Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/213B3C02F5B511EFB1C7F557762E951A.roa
File: 213B3C02F5B511EFB1C7F557762E951A.roa (raw, json)
Hash identifier: qLft0ijJEBxL/gVmGCYYGkHYgW0Y2EJrgYO0oBjvOII=
Subject key identifier: BA:FF:84:95:B0:76:0E:D0:B0:6D:5F:8C:00:C4:A4:68:06:6A:40:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/213B3C02F5B511EFB1C7F557762E951A.roa
Signing time: Fri 28 Feb 2025 09:19:37 +0000
ROA not before: Fri 28 Feb 2025 09:19:33 +0000
ROA not after: Sat 29 Mar 2025 09:19:33 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92733 (0x16a3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:19:33 2025 GMT
Not After : Mar 29 09:19:33 2025 GMT
Subject: CN=67c17fa9-ad28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:f0:dd:93:3e:ac:69:be:50:07:75:e6:da:
ba:19:d6:34:eb:08:0c:60:1f:9d:8f:b5:88:91:69:
e2:bd:bc:11:f9:be:3b:68:7d:99:fe:69:38:02:04:
80:7f:07:14:d4:d6:ae:2d:93:d6:63:d8:c0:a2:9f:
63:8b:90:53:92:2c:bf:e5:cc:71:eb:4f:5a:3a:b2:
c1:79:d4:51:5d:61:fb:a0:14:6a:2a:9b:f9:ac:6d:
b1:eb:64:bb:14:bd:5d:71:b9:5e:fc:d8:aa:4c:35:
3d:4b:cc:9c:f2:53:82:d2:b8:e7:20:12:88:4e:5c:
d9:57:d0:d9:bc:5f:0e:88:44:25:4b:66:e5:b9:ce:
f8:7a:68:52:53:23:f1:a6:ce:2a:95:96:60:93:27:
bd:fc:4d:81:41:01:cb:09:0c:4c:78:4a:7d:40:38:
7c:7b:21:50:0a:e4:36:5a:fa:5a:8d:5b:b4:79:a5:
b8:fa:86:83:4c:11:45:9e:cd:95:3b:e4:9a:ef:5f:
06:e9:f8:67:c0:90:64:15:f4:41:ca:f2:eb:7f:06:
c3:14:83:2a:44:b3:48:71:f2:36:08:15:22:b6:3e:
24:f1:18:7a:ef:ff:be:3e:31:68:0f:9f:5a:ea:54:
c9:22:0c:43:4b:1a:71:37:50:c5:7b:73:75:8d:bf:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:84:95:B0:76:0E:D0:B0:6D:5F:8C:00:C4:A4:68:06:6A:40:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/213B3C02F5B511EFB1C7F557762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a8:d3:32:c9:31:f6:7e:09:7f:59:69:c2:84:88:25:d9:56:
64:0c:2d:ca:88:da:cb:93:bb:5d:10:05:61:77:7f:de:01:2f:
00:04:ec:0b:7d:0a:46:ce:50:f3:dd:04:83:56:96:59:c5:b0:
3e:64:77:32:c9:2f:ba:ef:be:df:e8:e9:cf:b5:7b:5c:ab:b9:
5d:c4:bb:23:a4:75:4c:bd:77:d1:c9:5a:54:a3:72:40:92:16:
84:89:78:21:ab:59:6d:f9:d2:21:62:d3:c0:ce:5d:db:c0:77:
1a:d5:67:2c:90:56:a4:ec:79:4f:b8:e3:f3:27:2b:4b:89:b1:
38:b8:68:23:90:4f:ec:4c:e7:b1:60:ae:39:71:91:a6:d4:02:
c0:e3:0d:bf:ec:aa:24:e5:94:c0:42:2e:4a:12:0d:8f:55:a3:
bb:71:8a:93:12:6f:e1:53:44:5f:1a:06:59:a8:d3:52:95:c1:
93:24:35:40:3b:db:d4:ce:64:2e:5c:64:fc:cd:f2:d1:0d:93:
ef:34:ef:21:03:6f:f6:45:6e:35:a4:d0:71:d8:3c:3c:ec:78:
b9:92:00:ee:d3:ae:48:a3:ae:3c:b2:c4:f1:25:c0:5a:ba:b4:
bb:3c:50:d0:08:51:9a:b8:15:c0:ea:c5:3c:06:53:d3:85:36:
d1:ba:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:17:20 2025 by rpki-client