Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B91D47EEF7E11EFB3C11C4C762E951A.roa
File: 1B91D47EEF7E11EFB3C11C4C762E951A.roa (raw, json)
Hash identifier: 3GC1sFvQzKr6Zml/hzVuhDcUGIfrbb1119Bak420IRc=
Subject key identifier: F0:C9:8A:40:7C:B0:C8:24:78:0D:1C:96:31:05:D4:54:13:ED:0B:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0158CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B91D47EEF7E11EFB3C11C4C762E951A.roa
Signing time: Thu 20 Feb 2025 11:30:39 +0000
ROA not before: Thu 20 Feb 2025 11:30:26 +0000
ROA not after: Thu 20 Mar 2025 11:30:26 +0000
asID: 54600
IP address blocks: 154.202.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88266 (0x158ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 11:30:26 2025 GMT
Not After : Mar 20 11:30:26 2025 GMT
Subject: CN=67b7125f-2c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:f2:de:b5:99:e3:d5:78:b3:43:42:41:a0:
05:20:df:95:46:5c:1e:f2:7c:d6:8a:40:19:dd:c7:
ca:3d:f1:ac:00:2d:71:21:54:99:d7:e0:19:6f:f1:
c4:17:b3:d5:2a:33:b3:e6:14:b6:99:d4:40:10:84:
fe:3b:94:e6:61:a4:b5:39:0d:77:da:a2:5c:9f:64:
03:e8:98:f5:fc:48:4e:c7:ae:ed:00:5d:d1:92:8b:
f6:3d:be:0a:ec:47:19:15:67:ed:cb:1c:71:66:f7:
1b:b0:78:f2:8b:b3:98:dd:c5:c3:6c:a7:05:c2:bb:
a3:c5:21:16:0b:33:05:72:66:0f:d2:8d:54:bf:66:
36:42:d7:52:f4:72:68:d3:76:dc:06:8d:6c:c3:fa:
18:3d:11:38:eb:05:9b:ce:4e:b1:dc:c0:4f:48:21:
3d:48:4e:35:b0:1f:38:71:4d:85:e4:9d:d2:02:f5:
a7:3a:0f:03:df:56:a1:52:3c:88:d0:07:56:34:ad:
4e:bf:3d:11:ea:7c:4b:02:d6:d2:30:d0:b8:ca:d3:
e2:b3:97:40:a2:2d:4c:34:df:8b:11:8b:85:3c:f6:
c6:e8:23:d4:54:78:5e:c1:3d:2c:df:b2:ff:7f:d3:
07:7e:ad:69:50:5b:e0:1b:51:92:06:dd:98:ad:9b:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C9:8A:40:7C:B0:C8:24:78:0D:1C:96:31:05:D4:54:13:ED:0B:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B91D47EEF7E11EFB3C11C4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.120.0/21
Signature Algorithm: sha256WithRSAEncryption
10:af:ae:86:e7:b7:e9:38:ee:f1:16:76:34:7a:ba:24:5b:c4:
3c:51:ed:b5:58:44:ce:7b:f5:8e:fa:71:3f:f0:d2:62:30:a7:
90:c7:36:00:f4:82:67:17:04:15:eb:01:ad:1f:8a:a0:b4:44:
b9:8e:a4:fc:78:e7:28:b0:b2:be:f1:ae:fd:c5:48:91:d1:67:
b1:e7:56:6c:90:37:6c:bb:6c:c1:06:20:40:ed:2b:d8:91:a6:
46:2b:25:02:36:1e:50:c6:fa:d5:eb:50:2e:bc:f6:1c:b5:93:
b7:32:e9:e7:ad:5a:76:e2:8d:a5:0a:85:7f:9d:c7:d4:72:da:
af:d2:38:11:ac:a1:1a:96:94:ae:a9:6f:f6:f8:d6:53:83:21:
29:c1:7c:73:f9:6d:3a:ba:21:58:e5:30:94:ba:02:83:aa:66:
d8:f2:38:b7:4e:db:4b:86:d6:f6:e2:6d:3e:3f:4d:ec:55:90:
f1:67:8a:22:79:ed:24:1b:a3:64:cc:d4:49:06:24:14:4a:d1:
12:61:b8:cb:df:a0:10:13:56:78:43:05:43:dd:84:f8:f0:3d:
83:2e:eb:57:00:09:a4:2f:24:a4:d2:11:25:6a:e8:ac:73:bf:
f9:14:b9:18:46:3f:e6:b9:dd:77:b9:5c:10:37:9f:47:42:6c:
68:73:65:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:31:35 2025 by rpki-client