Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/214BED60F5B811EF96C7196B762E951A.roa
File: 214BED60F5B811EF96C7196B762E951A.roa (raw, json)
Hash identifier: 3P8fWiVMSArgdL8aD6WX20KYfP+BqurL7RtaOaau+dk=
Subject key identifier: 85:81:EF:BD:E4:BB:28:58:67:39:A9:45:6C:82:34:1C:0D:60:EB:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A59
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/214BED60F5B811EF96C7196B762E951A.roa
Signing time: Fri 28 Feb 2025 09:41:05 +0000
ROA not before: Fri 28 Feb 2025 09:41:02 +0000
ROA not after: Mon 31 Mar 2025 09:41:02 +0000
asID: 54600
IP address blocks: 154.202.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92761 (0x16a59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:41:02 2025 GMT
Not After : Mar 31 09:41:02 2025 GMT
Subject: CN=67c184b1-ea84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:c7:4f:76:d2:f8:12:09:97:49:b3:83:10:
32:fb:d6:4c:81:4b:98:a2:99:9e:af:fb:a2:56:db:
8b:1a:7f:88:ca:0d:8d:1a:1e:ac:f6:3e:cc:d2:50:
09:d3:e0:8a:0c:a1:39:86:e1:19:38:50:ef:bf:9f:
ab:07:33:26:49:85:ac:03:b6:0b:a1:ea:eb:ee:34:
b8:d3:a0:7a:59:55:6c:ad:0f:4e:6a:b9:58:20:d1:
6a:d4:d4:df:ed:49:1f:5c:01:c7:81:48:0b:f5:e5:
54:11:33:d6:80:57:be:d7:72:e2:e7:fe:9f:fa:42:
77:5c:82:10:50:a6:ce:75:c8:89:4b:a4:a4:c1:51:
79:19:67:59:83:22:b5:ec:9c:d7:c1:97:d1:80:e3:
30:db:28:21:f7:98:80:df:39:f5:c1:69:e4:4c:31:
9d:20:9f:18:99:08:5b:f3:53:8b:92:89:ca:99:73:
f6:66:e5:42:f5:95:a1:46:45:8a:b4:48:0e:bf:20:
70:9f:d4:13:61:ba:dd:7d:0f:99:7e:e1:1e:18:25:
8f:97:80:56:7e:12:39:70:6c:43:3b:9b:fa:34:d9:
c0:d5:c9:18:31:59:5a:fd:b8:c6:1f:a9:c0:44:56:
67:f2:ef:8a:47:bf:ff:f2:c4:05:bc:d5:dd:d9:11:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:81:EF:BD:E4:BB:28:58:67:39:A9:45:6C:82:34:1C:0D:60:EB:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/214BED60F5B811EF96C7196B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.144.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:99:8e:72:52:a7:0b:b8:20:cc:7d:8b:3c:b4:f3:c5:b7:04:
24:34:50:01:19:19:ec:64:76:1f:c7:2b:a7:00:bf:5b:ea:b0:
ec:2f:69:0d:73:6c:52:a2:14:79:8d:31:0f:6d:a1:0e:4c:c3:
f6:28:0e:cb:aa:83:80:13:ac:ad:ec:ab:8a:70:6a:38:b5:45:
10:9d:5a:19:b4:53:5d:f8:9f:a2:61:8a:7d:4b:74:a4:2e:c9:
8a:c8:8e:86:53:10:cf:9b:d6:38:d5:10:1a:c2:b2:3b:87:76:
30:7f:ff:dd:0c:5c:cc:8c:ea:db:2b:77:25:bc:64:5c:5c:95:
15:d2:7e:0c:2b:fe:8b:0d:42:08:8d:64:35:75:85:5b:15:45:
aa:3d:bd:86:92:47:e4:51:60:e2:f0:77:f6:53:e3:a5:ba:b2:
c4:c5:59:ad:52:7e:bf:79:4b:f1:4b:50:2d:cd:8c:a9:6d:06:
6b:58:4b:9e:b1:78:20:aa:ed:73:6e:1c:52:7b:87:3e:b0:90:
bf:6c:39:85:f7:0e:75:45:cd:b7:28:92:0b:13:1a:fe:de:7e:
83:57:ac:07:6c:ce:da:53:a4:a0:66:06:53:3d:2d:f7:38:ec:
8e:6e:ec:96:01:a2:9d:cf:6c:03:00:74:1f:f7:f2:fe:41:d0:
f1:50:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:55:38 2025 by rpki-client