Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B356B00F4E511EF87076745762E951A.roa
File: 1B356B00F4E511EF87076745762E951A.roa (raw, json)
Hash identifier: Snr0L21KwpgJB7TQ1V0g/bjnBKqWke1zE85GzgKzm5U=
Subject key identifier: 6F:CE:56:06:43:94:44:51:28:4A:9E:B8:E5:A8:7E:6A:5C:FC:C1:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B356B00F4E511EF87076745762E951A.roa
Signing time: Thu 27 Feb 2025 08:30:31 +0000
ROA not before: Thu 27 Feb 2025 08:30:27 +0000
ROA not after: Wed 26 Mar 2025 08:30:27 +0000
asID: 62240
IP address blocks: 154.195.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91881 (0x166e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:30:27 2025 GMT
Not After : Mar 26 08:30:27 2025 GMT
Subject: CN=67c022a7-3490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d7:10:b8:60:c7:eb:a8:d2:18:22:e4:13:95:
dd:02:79:c8:81:15:25:d2:af:c9:db:79:64:34:65:
f2:bd:56:23:b6:81:65:06:00:4d:a4:21:e3:03:aa:
da:e7:ed:fa:41:cd:75:2d:e9:ae:19:db:c4:4c:b6:
4e:38:9e:b4:2a:e5:02:4c:a6:46:48:94:12:c2:21:
82:ea:a4:d3:e5:ed:bc:80:a5:c1:10:6a:8a:0f:ef:
e2:3e:e2:d7:0f:cf:36:95:97:48:0e:90:11:d3:00:
ef:05:a0:dd:f7:2e:6b:28:74:79:f5:69:ad:cb:2f:
cf:41:b4:98:70:54:b9:d8:7e:3b:5b:c1:49:8a:b0:
fa:6e:22:8f:01:ad:f2:a0:62:14:7c:db:45:fe:33:
7c:e0:4e:95:ae:12:f9:c5:7d:b0:7f:ff:f2:d4:2f:
31:d6:dd:50:05:12:26:21:c5:bd:38:93:44:b1:df:
bd:7b:41:fb:cf:c8:2c:47:24:c9:e5:9e:b2:56:c6:
88:da:a0:17:2d:ad:f5:23:fd:be:07:10:56:c9:78:
68:c4:b0:fe:71:4c:18:97:41:e5:7f:70:ee:a2:54:
3f:9f:84:55:42:80:5a:51:9f:ce:2d:f7:1d:f9:31:
39:b3:28:8b:db:aa:b5:f4:e8:77:dd:2c:27:3d:8a:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CE:56:06:43:94:44:51:28:4A:9E:B8:E5:A8:7E:6A:5C:FC:C1:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B356B00F4E511EF87076745762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.185.0/24
Signature Algorithm: sha256WithRSAEncryption
be:ff:0a:27:da:55:04:4d:d8:dd:3e:a7:1d:27:b7:61:b7:9f:
6c:c3:f7:b5:51:0a:e5:b9:fb:26:44:ec:06:b3:71:84:1c:5e:
5d:c3:ec:94:ef:7e:cc:02:0d:d8:25:10:ac:24:74:d8:87:7a:
71:c8:bf:f5:ff:5e:4a:3b:e6:ca:c7:bd:3f:91:46:d1:dc:4d:
b0:3b:e3:96:ba:71:c3:8d:f9:0d:12:45:5a:02:a7:c7:44:3b:
9d:b7:d4:95:36:9c:90:46:0c:41:fb:80:b0:bf:80:25:55:3f:
78:9d:9c:c8:4a:4b:5c:2d:b5:df:61:40:c7:ff:f5:99:92:74:
a9:f9:2f:5a:d3:3c:e9:89:f1:1a:6a:03:5d:23:fb:17:fd:79:
d3:4f:4a:9a:96:46:2e:e7:a3:88:53:8b:b5:02:15:d2:9a:52:
e0:8a:c2:7a:25:ae:52:c3:92:ce:c4:26:9a:90:13:20:94:47:
d6:45:69:26:85:f0:f4:f1:b7:15:a0:39:c2:59:0a:ab:5d:56:
98:4f:b0:6a:44:75:1a:e0:dc:5b:be:b8:ec:58:c5:f3:34:ef:
95:28:56:d7:73:45:9b:80:61:a6:a9:3c:d2:96:c0:38:f9:d8:
24:00:b9:74:fb:a9:86:d2:0d:8a:71:05:d4:a1:9c:2b:57:e8:
14:f6:78:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:24:04 2025 by rpki-client