Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B8D7C2EF05711EF935B5A54762E951A.roa
File: 1B8D7C2EF05711EF935B5A54762E951A.roa (raw, json)
Hash identifier: WI7KDfu+2H1L09lihwvsCP2LIxL5+IEW9wz2REGMMmg=
Subject key identifier: 8C:E5:CE:BF:27:4D:16:81:16:73:BE:29:67:60:9C:A9:81:32:88:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0159B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B8D7C2EF05711EF935B5A54762E951A.roa
Signing time: Fri 21 Feb 2025 13:23:59 +0000
ROA not before: Fri 21 Feb 2025 13:23:54 +0000
ROA not after: Mon 24 Mar 2025 13:23:54 +0000
asID: 996
IP address blocks: 154.205.184.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88496 (0x159b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 13:23:54 2025 GMT
Not After : Mar 24 13:23:54 2025 GMT
Subject: CN=67b87e6f-eff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:80:f3:78:46:ae:d3:84:b0:96:ff:e2:85:
f4:b1:fe:c3:83:30:ba:34:95:04:80:ae:be:17:b3:
cd:0c:43:95:dd:26:3f:2d:2a:f9:c3:11:de:82:4f:
cf:81:8a:d1:66:20:93:9b:93:88:5a:f5:fe:66:ea:
e9:5b:49:b8:97:f0:ec:86:25:4d:72:da:e4:64:91:
72:33:2d:bf:05:13:cf:37:82:97:c3:40:3f:93:90:
26:b4:29:b6:e5:a7:0f:14:92:5d:00:7b:88:a6:6f:
b2:e6:27:fb:d1:8a:29:95:69:1f:f1:ae:9f:ed:45:
c2:6a:f6:59:a7:c4:ce:0c:75:fc:23:73:e4:b9:45:
04:77:73:2c:eb:79:88:5e:21:ce:67:eb:5e:54:9d:
dd:cc:db:8f:d0:20:5f:87:cb:e1:d6:68:e4:ee:d6:
9a:ca:43:5f:67:04:e4:b7:65:65:18:79:28:7b:e9:
79:5e:75:fb:19:43:fb:cf:80:c4:57:04:da:68:ab:
34:9f:d8:70:f8:10:a6:8d:76:8c:15:b4:32:92:20:
cf:95:25:78:bf:5f:5f:d2:0a:cb:5d:4a:69:6d:dc:
bb:98:57:11:30:7e:13:f4:4c:0c:e5:6a:55:df:15:
a2:d1:12:ac:5b:ea:39:d3:49:37:0d:15:2d:ad:a3:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E5:CE:BF:27:4D:16:81:16:73:BE:29:67:60:9C:A9:81:32:88:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B8D7C2EF05711EF935B5A54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.184.0/23
Signature Algorithm: sha256WithRSAEncryption
be:6a:12:4a:32:42:91:2f:b6:5e:a5:22:6b:f5:df:98:63:de:
4e:70:a3:19:13:86:ab:2e:c8:f1:88:f2:40:b3:3e:75:46:75:
70:c9:5e:97:e8:46:6a:ed:86:4e:84:95:6d:7b:09:20:35:12:
77:d8:b6:a8:51:b9:06:22:81:db:b9:a5:8a:60:2f:8d:f8:bb:
6b:2c:59:33:06:ae:1b:5a:5a:48:5e:d7:00:71:f9:42:fc:6e:
af:0c:79:43:f9:eb:fc:0c:63:c6:3a:11:76:67:ce:44:8f:a5:
d5:b3:28:50:c5:e3:5a:27:87:5b:fb:45:91:dc:95:ed:8b:88:
4f:0c:f7:29:09:61:24:b9:35:cc:3a:fa:76:37:f3:b3:dd:4b:
1b:bf:5a:c8:ad:06:9f:fe:32:9b:5f:38:ab:eb:c8:3c:f3:cf:
2c:03:4b:ef:d3:88:84:a2:fe:0e:2e:8c:59:86:c9:95:a9:d3:
da:c7:8f:ba:46:bf:9a:2c:b7:60:5f:33:a5:89:21:ee:b6:d8:
4c:66:43:97:f2:7b:e1:6b:41:2c:a5:ee:70:10:69:8b:19:bd:
9c:0b:cb:22:d9:db:ad:59:1a:db:db:43:ea:15:4a:38:d6:f8:
00:69:b6:e5:8c:f1:50:cb:9b:b3:9f:ba:41:74:c4:09:e4:91:
36:44:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:50:03 2025 by rpki-client