Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA61BA0F1D611EFADA4E46B762E951A.roa
File: 1BA61BA0F1D611EFADA4E46B762E951A.roa (raw, json)
Hash identifier: KJMFca9cnYSwSJR2hdn7hEKQN2R+XYe9yfQP+M0WWrM=
Subject key identifier: 41:BD:2C:26:0D:30:7C:2F:96:BC:27:86:17:82:48:EB:5F:C0:61:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA61BA0F1D611EFADA4E46B762E951A.roa
Signing time: Sun 23 Feb 2025 11:05:36 +0000
ROA not before: Sun 23 Feb 2025 11:05:32 +0000
ROA not after: Wed 26 Mar 2025 11:05:32 +0000
asID: 8796
IP address blocks: 154.201.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88905 (0x15b49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 11:05:32 2025 GMT
Not After : Mar 26 11:05:32 2025 GMT
Subject: CN=67bb0100-f4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:1a:14:2d:dc:65:c7:ca:db:66:eb:ac:fd:
e9:c8:34:f1:63:a7:80:68:7e:a5:04:4f:a0:2d:dd:
77:ac:1d:48:8e:42:47:92:2f:ba:f1:fb:76:6f:91:
1c:11:66:9b:78:d6:48:2e:e5:5f:56:67:f1:93:db:
70:f4:69:7e:61:33:7d:b7:85:22:db:7d:e0:e5:e3:
da:2e:15:97:75:76:8a:37:56:4b:68:a4:f1:e9:0f:
4a:77:f6:53:5b:ac:2e:d8:31:c6:87:32:02:7d:16:
90:b6:13:81:84:0d:58:2f:c3:fe:35:98:63:e5:83:
79:4a:56:79:0b:4d:af:60:5b:e9:15:47:24:33:30:
b4:54:63:41:be:47:77:d9:15:b1:38:69:fb:4a:a4:
97:27:7d:ba:6b:5d:9f:d4:a5:96:75:42:51:88:c6:
ff:99:a8:c8:ad:01:28:ee:1d:63:09:8f:97:1b:9f:
91:d2:58:ff:34:f2:76:45:2e:a1:7c:b2:1e:7c:49:
38:b2:4e:3b:63:c5:21:a6:ac:97:6c:ca:37:e5:9e:
30:2e:ab:e3:52:f0:6b:7c:1a:65:c4:ff:04:4c:91:
83:94:75:14:bf:3e:f0:86:9f:2e:6b:08:ea:d4:45:
c9:df:b3:43:ab:4c:8e:ce:d3:ff:5e:1e:f7:37:7e:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BD:2C:26:0D:30:7C:2F:96:BC:27:86:17:82:48:EB:5F:C0:61:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA61BA0F1D611EFADA4E46B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.88.0/22
Signature Algorithm: sha256WithRSAEncryption
95:e5:7c:d8:18:08:12:0d:7a:45:2a:5c:0c:43:24:f6:ee:fc:
d7:1d:39:e4:1e:39:c3:13:a4:6e:2f:e1:0e:fe:43:9d:ab:3f:
59:39:43:ee:80:d6:30:8a:69:87:10:c9:1a:ba:f2:88:9b:f2:
5d:30:30:d3:60:fa:b6:12:83:37:cb:84:98:ab:ea:e6:20:4b:
95:80:71:08:95:d4:07:68:78:d9:72:2b:6a:cf:45:fa:8b:13:
e2:4a:47:ec:e6:00:19:fe:9e:2d:19:91:71:a6:f0:7e:fe:8e:
c2:1f:30:00:38:13:bc:7c:d8:c2:ca:af:d8:de:37:f6:c0:92:
1b:50:ce:ec:2d:6f:83:5c:7b:af:83:2c:35:f0:b4:e2:58:72:
f2:d0:34:81:e0:1a:10:e8:12:60:34:b6:42:af:4e:41:2d:38:
29:30:13:33:74:29:0b:4f:f4:e5:4e:bc:ad:2b:25:e3:bd:92:
66:65:7e:be:1d:ec:d6:fa:ab:0e:e2:46:4f:3e:e0:49:f1:c5:
fd:14:13:37:22:7e:8b:58:cc:7a:20:d5:bb:44:b1:d2:0a:ab:
0d:7c:f4:61:41:df:b4:46:44:66:e6:d6:de:09:a7:7c:f7:8b:
3f:ac:f6:60:02:42:fb:fe:8d:d1:19:fe:11:46:26:1d:10:64:
d5:5b:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:46:22 2025 by rpki-client