Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207A5EEAF68411EF83EB3362762E951A.roa
File: 207A5EEAF68411EF83EB3362762E951A.roa (raw, json)
Hash identifier: GCUkZJLd5nlc1nJzr9HI5QDQfSRSQuToBlA5GPzf39k=
Subject key identifier: 0C:4D:19:B9:8F:33:82:85:A0:1B:9C:10:1D:74:01:EC:8D:89:20:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207A5EEAF68411EF83EB3362762E951A.roa
Signing time: Sat 01 Mar 2025 10:01:21 +0000
ROA not before: Sat 01 Mar 2025 10:01:18 +0000
ROA not after: Mon 31 Mar 2025 10:01:18 +0000
asID: 48031
IP address blocks: 154.222.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93625 (0x16db9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 10:01:18 2025 GMT
Not After : Mar 31 10:01:18 2025 GMT
Subject: CN=67c2daf1-6a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:e7:8d:4b:6b:4a:05:ca:8e:cf:5b:dc:e3:
34:7d:ff:18:08:26:5e:9d:93:c4:00:fe:b9:5f:df:
fd:f9:80:36:a9:fc:9c:cb:1d:c5:08:e2:cf:85:91:
c4:7c:e0:49:eb:f7:b1:78:f0:bc:89:84:00:6e:1c:
de:de:a3:35:76:ff:86:5c:91:c4:d8:28:a5:9b:d1:
ef:88:f6:87:b6:5b:0a:8d:4d:a7:e8:b5:7c:ef:e2:
37:20:09:87:eb:e5:e5:86:00:2a:8d:27:7a:af:d5:
ab:71:dd:ff:b7:57:bc:40:55:b2:08:a1:1b:5d:b8:
ea:f0:17:34:7f:eb:35:86:14:a4:39:0c:03:8f:3a:
79:b4:c4:d3:5d:3b:52:d0:5d:71:7a:b4:22:3d:6c:
97:a3:25:23:e2:2d:84:b8:ec:fa:61:9f:3d:f7:1a:
d4:f3:8b:ec:b1:67:d7:d5:2f:99:92:90:bc:2d:cc:
f9:a0:cf:3c:2f:a1:a9:02:15:9d:76:37:ce:eb:dc:
bd:0a:b3:8f:29:7b:a6:89:ce:4b:dd:da:1b:cd:5d:
86:31:2b:82:a9:ec:b6:3c:02:d6:ad:7c:5a:55:a8:
36:c8:34:37:3a:05:b2:7d:26:0b:36:7f:ba:fc:53:
b3:2d:fa:73:3f:8e:19:3f:9b:73:54:18:58:2c:c9:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4D:19:B9:8F:33:82:85:A0:1B:9C:10:1D:74:01:EC:8D:89:20:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207A5EEAF68411EF83EB3362762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.218.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:8c:b5:93:86:cc:85:9c:dc:86:50:b1:2d:50:1c:8a:ae:e3:
3b:62:39:a2:c2:80:72:67:ac:6c:90:14:57:64:7d:00:fc:2b:
9f:40:c0:56:79:9d:29:d2:93:41:6f:6d:8e:80:e6:e2:e5:3f:
fd:47:45:94:8d:13:a4:98:ff:6e:e6:89:4c:ac:83:4f:cd:66:
4d:fd:a9:6c:dc:e3:4d:c8:ce:0c:50:1b:95:8d:04:63:88:c7:
18:7d:fb:18:21:e6:d6:e7:77:02:0b:c7:2d:ca:77:4e:21:28:
ca:12:13:88:63:43:35:68:75:ed:a0:bc:6f:3f:34:c9:53:64:
a1:61:53:82:a1:89:f1:18:80:b5:2f:7e:c3:a2:71:ce:8a:a3:
ef:fb:a2:0d:bd:71:86:ee:57:c1:2d:b1:f8:01:48:41:ab:df:
71:33:28:63:43:3a:ee:69:74:a7:89:cc:61:f8:03:5e:cd:55:
d3:c5:fc:cb:16:c8:2c:97:ae:9a:53:05:c2:c2:3b:fb:13:db:
63:f3:23:88:d4:a5:20:bb:be:2f:11:ed:d6:9d:28:08:a8:65:
da:f6:b5:ea:02:9e:1b:c8:26:6a:7c:59:bd:7b:f5:b0:e8:28:
3b:4d:8a:7d:2a:b2:ba:20:e4:a4:2e:3b:27:a8:0c:7b:51:6d:
9b:3a:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:12:46 2025 by rpki-client