Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2161862000CB11F09675528A762E951A.roa
File: 2161862000CB11F09675528A762E951A.roa (raw, json)
Hash identifier: KT1NpLfeWqZxOrcbu4Klngq/3VUsIOnywfQFuxbMAAY=
Subject key identifier: FC:63:3E:A9:2A:2C:20:1A:8F:29:D9:4C:DF:01:D4:69:E0:DF:01:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017456
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2161862000CB11F09675528A762E951A.roa
Signing time: Fri 14 Mar 2025 11:54:49 +0000
ROA not before: Fri 14 Mar 2025 11:54:45 +0000
ROA not after: Fri 28 Mar 2025 11:54:45 +0000
asID: 20473
IP address blocks: 154.81.157.0/24 maxlen: 24
154.81.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95318 (0x17456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 11:54:45 2025 GMT
Not After : Mar 28 11:54:45 2025 GMT
Subject: CN=67d41909-1da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:69:18:a2:f1:1b:3b:28:f4:45:d9:83:30:
b5:31:78:d8:5b:68:3f:c4:9e:9b:e8:35:93:00:43:
10:9e:e8:19:26:00:bf:03:16:74:6f:00:2d:32:30:
28:dd:d8:39:26:03:85:cd:af:33:d3:4d:6a:e0:b0:
d5:02:be:67:0b:3d:6b:c8:87:b9:77:90:c1:1d:23:
9d:3a:54:e3:2b:0d:5f:2d:4d:60:42:6d:66:1e:89:
d9:de:c8:7f:e7:2a:2f:a8:e4:7a:8c:d6:e9:f7:1f:
ab:a5:14:84:f3:34:cc:c0:68:9a:15:e4:86:19:c1:
b6:a1:fc:f7:be:09:75:e4:9b:4e:5e:ad:3b:cc:d3:
39:eb:68:7a:21:82:92:63:d7:85:77:3c:4b:87:46:
e5:82:bf:41:db:41:0e:15:f8:16:aa:2f:6d:c5:ab:
6c:66:c1:6d:c4:b9:60:89:cd:2d:0f:2e:42:16:a4:
d1:42:50:14:4f:a4:83:ca:6e:bb:f8:f1:f6:85:de:
86:69:05:38:af:c8:3b:41:f1:54:75:22:65:ee:05:
92:0e:9f:de:4a:58:bf:a7:6d:ec:0a:3c:fa:3c:2d:
a1:ee:2c:2d:70:ed:83:c6:40:1f:d6:a5:11:08:65:
d1:44:6f:14:8d:de:79:ea:f7:1d:a2:bc:b8:a0:74:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:63:3E:A9:2A:2C:20:1A:8F:29:D9:4C:DF:01:D4:69:E0:DF:01:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2161862000CB11F09675528A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.157.0-154.81.158.255
Signature Algorithm: sha256WithRSAEncryption
51:84:9c:0f:78:25:7b:0f:bc:a7:6f:6a:28:7f:bc:20:16:46:
2d:0b:44:5d:db:70:71:30:95:9c:04:9c:ec:7e:cd:d6:e8:62:
f5:c3:05:7f:dc:2d:7e:f5:7d:d4:10:82:c6:24:46:66:22:50:
2b:25:69:84:9e:68:74:cc:3c:57:a9:24:a2:a1:d9:ca:78:3a:
e7:27:04:f5:f9:3c:e0:61:0e:c7:e1:27:8d:aa:d8:16:b8:b4:
9f:89:10:8c:e8:8c:42:05:e7:84:fa:4c:05:0f:c4:4b:82:3a:
d8:02:5b:93:52:4a:43:d0:57:e6:f1:86:94:a0:33:9d:c3:74:
c2:03:b5:20:21:ee:48:63:66:92:01:ef:16:23:ed:88:f3:fb:
0b:30:2e:dc:f5:f2:4c:a8:fc:59:62:cc:90:e4:00:cf:41:b0:
3d:18:3c:8d:81:6a:24:5a:bd:7e:54:cf:02:67:ce:78:cc:59:
b9:14:fe:ef:3c:b3:fc:74:4d:59:b5:85:c5:58:55:51:e9:87:
9c:0f:07:0d:13:3c:0a:5c:ef:cf:c4:89:80:f8:35:e3:a7:93:
9a:11:20:e0:46:19:fd:23:f4:36:e9:2b:ea:1e:c7:d4:d7:0b:
9e:6a:5d:ca:3a:5b:29:7a:4d:32:e6:50:1a:25:c6:5c:6e:2b:
67:3b:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:11:56 2025 by rpki-client