Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F70548CF68E11EF8225BFA6762E951A.roa
File: 1F70548CF68E11EF8225BFA6762E951A.roa (raw, json)
Hash identifier: gA4zOZp0lRF7027iQRCq2zmzQkg+r1z4r8FvFUPboTY=
Subject key identifier: BA:4D:A3:1E:87:A3:68:86:6E:BC:EB:5A:F2:83:04:32:4A:8A:AC:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F70548CF68E11EF8225BFA6762E951A.roa
Signing time: Sat 01 Mar 2025 11:12:54 +0000
ROA not before: Sat 01 Mar 2025 11:12:51 +0000
ROA not after: Mon 31 Mar 2025 11:12:51 +0000
asID: 202656
IP address blocks: 154.222.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93687 (0x16df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 11:12:51 2025 GMT
Not After : Mar 31 11:12:51 2025 GMT
Subject: CN=67c2ebb6-1d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:d8:af:e0:0c:40:01:48:9c:80:05:df:27:
bc:4f:52:52:f3:d6:c1:19:0c:da:25:bd:f6:11:7c:
7f:38:88:48:89:ab:69:dd:50:d5:a7:90:c6:26:de:
1c:27:ec:15:1e:60:cb:7a:00:ee:e2:39:11:88:a2:
62:f8:32:3e:63:f4:6f:8f:bb:ac:2d:94:09:0a:69:
2c:be:15:53:79:f1:bd:ce:37:b5:e0:24:18:9a:54:
58:cf:2a:85:c4:5c:87:36:74:ad:24:ab:96:b5:ab:
f8:ce:6a:63:33:ec:2b:c1:8d:6f:88:70:bd:05:a0:
a5:c9:70:8f:94:73:eb:a0:69:8a:e1:45:b5:20:fa:
bd:49:3d:32:9e:c5:5a:ef:17:7a:07:e6:f8:7e:91:
57:33:e9:0d:ea:4f:80:a0:98:1a:47:8f:23:ea:11:
84:56:b7:6e:29:6c:41:e4:f7:74:09:8f:19:e8:86:
4b:ef:db:42:ee:d7:8c:c8:20:59:be:b0:f4:88:52:
63:d5:40:ae:55:81:98:30:8d:b7:5c:cd:e2:dd:60:
b6:a2:b2:46:ba:55:36:8d:47:d6:47:49:ef:8d:31:
0d:ce:56:3a:5b:5a:cc:57:e9:31:c9:72:51:ff:72:
46:de:e5:84:c2:80:40:c9:a1:5b:57:99:71:ed:9c:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:A3:1E:87:A3:68:86:6E:BC:EB:5A:F2:83:04:32:4A:8A:AC:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F70548CF68E11EF8225BFA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.47.0/24
Signature Algorithm: sha256WithRSAEncryption
47:34:48:fc:25:a3:f0:cd:df:ef:4a:b4:b8:30:22:b2:fb:78:
06:ce:26:81:11:7a:9d:51:a3:85:55:ed:fe:fb:16:bf:d4:a5:
7a:9b:34:d1:ce:b9:b3:d7:8d:b8:0d:62:07:dc:ba:2a:b7:c7:
d7:f2:6d:70:da:00:e5:87:5d:05:65:d4:db:21:a1:5e:da:50:
8c:29:de:e1:d3:38:a6:b7:03:e2:45:51:13:c7:5a:b6:e5:c3:
ed:01:5a:2d:d5:ba:27:ed:e1:6b:bb:b1:65:7d:1b:19:b7:11:
5d:39:3a:58:df:93:07:35:de:0b:72:af:85:b3:5a:be:4c:c2:
33:38:82:29:f3:a4:0b:c7:9f:00:90:4e:75:47:45:5b:5e:0a:
45:de:73:61:65:a9:0a:dc:33:51:cc:aa:7a:6c:37:bc:56:b3:
5c:ff:15:11:57:12:e2:ae:aa:bb:e1:26:87:34:eb:44:40:f5:
28:62:09:cf:ad:1b:01:bc:6a:86:c3:4b:c1:87:3a:55:b0:82:
d6:66:76:9a:e9:f8:24:bb:24:2a:2d:e9:78:f2:c5:db:73:9b:
84:2d:fe:48:8d:8e:34:66:8f:b7:39:21:40:38:38:87:1c:58:
ac:de:a0:59:0e:40:91:72:1b:b2:77:49:b3:c1:43:da:12:59:
29:92:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:58:56 2025 by rpki-client