Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2272ABC0F4EB11EFB7AFF46E762E951A.roa
File: 2272ABC0F4EB11EFB7AFF46E762E951A.roa (raw, json)
Hash identifier: WeDq13laFjTFJLZ7f9toUcGHPcgAQTOqyXXCHvaa4fc=
Subject key identifier: B9:4D:E6:23:F0:66:7C:24:02:BF:45:15:C9:AC:8D:B3:01:74:5C:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016719
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2272ABC0F4EB11EFB7AFF46E762E951A.roa
Signing time: Thu 27 Feb 2025 09:13:40 +0000
ROA not before: Thu 27 Feb 2025 09:13:37 +0000
ROA not after: Wed 26 Mar 2025 09:13:37 +0000
asID: 62240
IP address blocks: 154.195.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91929 (0x16719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:13:37 2025 GMT
Not After : Mar 26 09:13:37 2025 GMT
Subject: CN=67c02cc4-c049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:cb:8a:07:1c:07:1b:bf:17:66:7e:7c:37:
fc:f7:56:8c:5c:5d:a6:9f:c0:06:ac:ef:9c:40:47:
94:f5:ce:91:c0:45:63:0a:cf:a3:28:2c:a1:24:29:
f8:c8:c9:45:70:cc:95:c9:93:5b:32:66:e8:58:ff:
07:41:dc:14:d0:91:37:06:f7:06:76:98:51:1f:e6:
db:f8:9b:d8:82:be:5f:f8:53:d9:b0:8b:19:0a:3b:
5f:32:f0:51:45:d8:0f:49:78:4e:6c:75:a7:a1:10:
83:67:0e:10:04:18:37:fe:94:1d:5f:f1:41:c7:93:
66:51:88:f6:fc:6f:d6:f8:2d:2f:2c:9a:79:73:82:
ec:6a:8e:93:18:9e:a4:55:1f:5d:ef:37:fe:d9:25:
6e:b6:e5:2b:83:9d:e1:49:f4:c5:08:a0:ed:2e:20:
d9:e0:a5:af:10:f1:01:23:c9:f0:0e:b4:6c:b5:1d:
80:23:13:7b:c7:cc:d2:bd:09:bf:79:12:c4:02:ab:
81:9f:0e:7e:0b:76:73:3d:58:96:b3:0b:f7:81:7a:
23:27:29:96:f0:cc:c6:cb:7a:58:6d:12:78:43:82:
d6:bf:18:9f:6a:27:25:98:11:55:dd:e8:51:c4:24:
92:3f:a7:8d:52:83:6a:92:d6:d8:27:93:f7:21:6b:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4D:E6:23:F0:66:7C:24:02:BF:45:15:C9:AC:8D:B3:01:74:5C:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2272ABC0F4EB11EFB7AFF46E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.25.0/24
Signature Algorithm: sha256WithRSAEncryption
64:59:29:a9:05:ba:5e:b7:82:5b:be:6d:1c:81:93:d4:c3:15:
2a:34:77:7a:f8:c3:04:85:74:4a:b3:f4:71:b8:c8:66:19:b2:
d9:50:c4:94:c5:b4:16:59:b1:75:34:c8:e2:af:f5:fc:1e:1d:
47:0b:2f:4a:c9:c7:fe:a3:3a:e9:1b:56:94:4b:8e:30:83:cc:
94:75:ab:0d:38:ea:04:03:f3:a1:91:e2:33:a0:8a:89:2c:b2:
b3:95:85:67:6e:cf:b3:28:48:ce:b2:f8:15:b0:b4:4c:6c:6f:
1a:eb:12:e1:75:71:73:d5:91:95:90:c9:00:19:df:4b:12:d7:
48:9f:b4:c9:18:82:43:96:ce:5e:40:75:a9:11:c3:cd:ec:31:
19:56:84:13:7a:23:37:ab:f4:bd:d5:d4:11:96:f8:f0:56:a1:
5d:fa:bb:bd:5c:29:44:da:0c:01:d2:f5:f4:17:8b:ba:8d:76:
fc:e4:a7:de:72:00:d0:e4:8c:48:6b:f8:2e:1f:c8:ab:39:44:
d9:14:41:5e:91:99:e2:e0:63:cc:63:0f:82:c2:96:9b:b3:b7:
72:d6:ce:92:76:48:b3:37:7c:bb:57:42:f8:0a:c5:f8:0f:5b:
fc:e9:13:4e:27:82:68:21:1d:8b:fb:b0:bd:2b:1b:3a:9b:c0:
39:32:4a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:15:12 2025 by rpki-client