Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B3B30BEF4F211EF8FEC649D762E951A.roa
File: 1B3B30BEF4F211EF8FEC649D762E951A.roa (raw, json)
Hash identifier: N4CYK6vyGtye3vU5f0OzCHLunfL0MzgYSz5qb4sW98o=
Subject key identifier: 9C:4C:E0:3F:1B:CB:3E:D1:1B:FE:D6:B6:E6:14:FB:01:FE:6B:CC:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016780
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B3B30BEF4F211EF8FEC649D762E951A.roa
Signing time: Thu 27 Feb 2025 10:03:35 +0000
ROA not before: Thu 27 Feb 2025 10:03:31 +0000
ROA not after: Wed 26 Mar 2025 10:03:31 +0000
asID: 62240
IP address blocks: 154.194.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92032 (0x16780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:03:31 2025 GMT
Not After : Mar 26 10:03:31 2025 GMT
Subject: CN=67c03877-59b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:d0:90:c7:92:ca:45:e5:28:3c:ab:95:0a:
41:f4:8f:ff:2f:71:fc:f9:b1:c0:56:9c:67:4d:d2:
40:7d:d4:1d:87:b1:cc:aa:79:aa:5d:c1:64:bf:c5:
c9:82:99:c0:36:ba:f0:47:2d:d6:60:23:0b:41:00:
d1:f3:50:d8:f6:e1:cc:a8:26:cf:dd:eb:4d:c9:b5:
25:6e:10:65:37:55:18:d6:9e:d8:73:fa:13:68:f7:
a2:0f:26:1d:47:32:40:73:ca:69:da:8d:d6:3b:20:
bb:28:f4:9a:41:71:e3:23:c7:7b:1a:a0:00:70:af:
89:9d:22:41:af:c7:42:37:ea:82:95:88:35:77:4a:
e0:7a:fc:ee:33:53:42:fa:ee:f4:fb:cd:eb:5a:35:
ab:b1:91:02:f1:02:b8:4b:7c:51:d7:d7:00:28:64:
c7:04:a4:37:03:ec:45:88:a9:98:07:33:63:5c:bd:
6d:78:41:44:75:df:7b:fc:a6:86:75:16:f0:84:21:
2b:ff:46:ff:c4:b4:b0:3a:77:2a:1b:7e:ff:b4:76:
6d:09:f7:98:21:ef:da:12:c2:02:ee:83:01:c3:6d:
30:54:db:9d:22:63:3d:38:a9:fa:f3:10:5e:82:77:
24:ca:64:24:58:d2:79:e8:b5:e6:a5:23:83:6d:3c:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4C:E0:3F:1B:CB:3E:D1:1B:FE:D6:B6:E6:14:FB:01:FE:6B:CC:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B3B30BEF4F211EF8FEC649D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.81.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:21:0c:37:c1:fd:cc:0d:b5:89:8f:46:11:f5:a8:b8:61:a6:
a5:55:fc:e6:5d:5e:e2:fe:4e:c0:c5:f5:21:78:69:6d:46:15:
54:42:10:d2:74:12:da:f1:e2:17:1a:7d:31:45:a0:53:79:99:
08:d7:53:36:3f:0c:11:6c:2f:47:fc:18:47:d0:84:ca:7e:19:
cc:1e:3a:fb:ef:cc:94:6e:d5:4b:ec:03:8e:d9:d5:d4:b7:19:
54:28:5b:39:f2:48:0a:5b:3d:f1:34:0e:4e:f4:b8:43:df:65:
cf:0c:d2:b7:2c:75:f7:a4:5b:b5:8a:64:16:d0:aa:a2:99:f1:
7b:70:23:df:9f:3a:84:71:04:d2:e9:55:9e:f0:a4:b3:e9:d0:
85:c2:07:92:71:db:2d:fd:00:94:4d:ec:a0:69:7d:79:26:fa:
ba:73:d0:67:5b:6e:95:48:71:06:c1:b3:bb:fb:da:00:7b:72:
c2:02:6b:f0:4f:56:78:3c:c3:c8:04:a2:66:a6:04:c8:85:df:
21:bf:73:bc:8c:03:c4:0d:31:d6:d5:91:ca:7c:92:65:de:b0:
95:41:14:48:c3:fd:d9:6a:80:56:17:ef:c6:7d:82:b8:e2:bc:
55:93:51:63:63:44:53:a0:06:97:cf:d5:db:4b:1c:ec:b3:02:
2d:e5:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:49:25 2025 by rpki-client