Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2204171CF4E311EFA640B5B5762E951A.roa
File: 2204171CF4E311EFA640B5B5762E951A.roa (raw, json)
Hash identifier: Yjp93jM36qEWJwhoQDuwAyVR99v2SRBk0QerbPB3yao=
Subject key identifier: 03:F9:9B:07:C9:88:B9:EB:1C:D5:74:44:87:6F:8F:8F:EB:47:30:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2204171CF4E311EFA640B5B5762E951A.roa
Signing time: Thu 27 Feb 2025 08:16:24 +0000
ROA not before: Thu 27 Feb 2025 08:16:20 +0000
ROA not after: Wed 26 Mar 2025 08:16:20 +0000
asID: 62240
IP address blocks: 154.195.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91865 (0x166d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:16:20 2025 GMT
Not After : Mar 26 08:16:20 2025 GMT
Subject: CN=67c01f58-89ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:9a:74:bf:6e:68:7d:a8:39:14:77:b1:d4:
60:c4:fd:07:e2:9a:6b:4b:6a:f5:68:e7:36:ce:63:
31:75:b0:75:a7:87:f3:75:3d:d2:55:e7:32:9a:65:
e5:19:15:c1:c1:08:33:0c:05:5e:53:b2:e2:92:3b:
93:a1:43:57:f6:c2:48:5f:a8:f8:6f:2d:bb:f8:a7:
9b:3a:72:e5:c2:a0:17:6f:e0:63:24:a1:b4:9c:97:
b3:62:a0:48:a4:98:28:cf:f4:01:39:3f:1d:f2:b6:
19:32:a1:6b:2c:0a:c6:2e:38:74:16:1e:cf:79:40:
a2:59:03:74:34:6d:69:44:e3:15:57:8f:ed:b9:15:
07:c7:c5:9b:54:fb:08:60:b3:a6:d5:30:1b:50:61:
0f:4c:9e:e6:cf:cc:59:7e:97:c6:de:b7:f1:39:9e:
62:5b:67:2f:2b:f8:11:73:7f:90:11:a3:d0:af:49:
50:3f:84:69:22:73:aa:3e:7e:e6:e8:34:e0:17:52:
49:41:47:ec:49:29:91:31:f3:ca:2c:47:67:34:cd:
70:fd:14:2f:f3:0e:d1:ef:c7:61:7a:2f:37:20:06:
cf:8a:5f:73:fd:e6:0b:79:f0:e7:3f:df:4b:0c:6f:
fb:b6:ba:96:f7:a0:9f:b8:69:c3:66:3e:3e:f6:c4:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F9:9B:07:C9:88:B9:EB:1C:D5:74:44:87:6F:8F:8F:EB:47:30:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2204171CF4E311EFA640B5B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.180.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f6:2a:93:47:e3:df:6e:56:d8:66:29:ff:3f:9f:55:0d:6b:
02:23:32:e5:bb:2a:78:62:97:9f:9a:46:5d:d7:57:69:4d:00:
40:fe:ba:d7:55:05:a6:a7:c0:4c:c0:27:f3:f7:98:56:39:99:
bc:07:40:90:81:df:ba:ff:85:1b:91:91:a4:03:58:9b:8d:94:
e4:50:15:10:52:23:26:63:69:7f:16:c3:5d:b7:cb:aa:ab:3e:
32:48:da:94:54:22:1d:1c:bd:6b:d8:dc:f2:a4:39:97:5f:9e:
cf:c3:85:3d:81:40:37:5c:32:5f:8b:05:5f:28:95:1d:7b:8a:
65:4a:6c:41:17:52:66:11:a9:0f:cb:38:60:f0:ac:db:cf:d1:
29:20:43:e5:88:74:63:09:e6:c9:ed:ca:16:d4:cf:dd:23:4a:
87:18:91:92:4a:fb:08:81:ca:e8:22:99:ed:d7:1f:98:84:6f:
da:80:15:53:ea:ca:65:ef:86:1b:62:f8:a9:f5:8f:a9:33:cb:
4a:65:4d:57:09:dc:7b:50:fc:34:81:7e:74:f8:f3:34:95:01:
83:40:27:a6:0e:47:a1:08:f7:3a:fb:8e:33:64:e0:17:17:f4:
b0:1e:48:79:ff:e9:95:f9:28:e0:73:80:2a:9c:cf:1f:96:31:
e1:84:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:36:00 2025 by rpki-client