Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267196D0F6C311EF8B98F68B762E951A.roa
File: 267196D0F6C311EF8B98F68B762E951A.roa (raw, json)
Hash identifier: 1RdaZkQmnaJTpSRDCUavS+0Mq7ikUwnxCcfGeIAdRGQ=
Subject key identifier: CF:28:D0:20:80:E0:3B:86:D6:72:A4:59:3E:DC:61:21:51:64:74:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267196D0F6C311EF8B98F68B762E951A.roa
Signing time: Sat 01 Mar 2025 17:32:30 +0000
ROA not before: Sat 01 Mar 2025 17:32:26 +0000
ROA not after: Mon 31 Mar 2025 17:32:26 +0000
asID: 202656
IP address blocks: 154.219.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94005 (0x16f35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 17:32:26 2025 GMT
Not After : Mar 31 17:32:26 2025 GMT
Subject: CN=67c344ad-9e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:1e:5e:97:e4:64:e8:26:0b:1f:ec:95:27:
88:e7:8b:6a:a6:ac:d7:ef:85:3e:c4:ea:8e:80:7f:
e7:9f:a7:73:89:ff:ea:e2:cc:72:4a:79:3d:bb:a2:
7a:cc:f2:8d:1a:0b:72:1b:ce:46:55:c1:0a:d2:1c:
b8:ca:68:1f:ee:ab:e7:b0:3b:ef:1c:21:0e:6e:20:
c8:78:31:a9:80:3d:0e:48:d7:8c:ee:3d:72:3b:77:
92:e0:b4:54:39:0d:83:b8:8f:a9:de:df:ad:55:00:
10:9c:8a:e1:20:8f:11:69:6d:62:ac:f3:bd:b3:73:
95:73:88:cc:0c:01:b5:40:c0:35:84:a3:58:ae:8e:
53:26:95:69:f2:fc:8d:85:ab:33:62:3f:4f:11:bc:
2b:25:ff:71:86:8b:5b:cf:61:94:01:5f:6a:2e:c8:
bd:d1:af:02:4b:20:b5:55:43:14:53:a9:e8:2d:28:
4f:66:2b:3d:ed:d6:1f:20:aa:26:63:d6:83:77:92:
af:65:e6:81:06:b5:01:f7:07:e0:20:4b:c6:94:94:
c7:85:2c:94:05:f4:cd:b1:1f:f2:e2:7c:57:88:cc:
c5:2e:cd:00:a9:f1:c3:a9:90:4f:9b:d9:0b:84:4a:
a4:fd:2d:36:58:6a:49:59:e0:16:39:54:73:78:db:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:D0:20:80:E0:3B:86:D6:72:A4:59:3E:DC:61:21:51:64:74:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267196D0F6C311EF8B98F68B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d1:a8:b3:5f:9d:51:7d:2f:3f:82:8c:7d:00:ea:b7:2a:78:
4c:37:e3:9c:50:d9:73:d1:7b:78:5c:58:a1:51:f5:e5:2a:38:
ea:ff:e4:ad:43:16:9c:db:8b:50:b0:cb:2b:fe:c5:1b:86:f4:
f3:95:d2:9d:b1:7b:bb:66:d7:a2:22:f7:3a:2a:df:ec:1f:c5:
f1:7a:fb:90:48:16:93:e4:3c:2c:7d:32:2f:20:22:b4:a5:97:
1d:c2:ec:33:c3:d1:11:54:ca:3e:f6:e9:de:7d:05:3c:aa:d5:
0e:b2:a2:90:28:bc:98:9a:25:e5:1c:52:b0:8f:f4:6f:d4:b0:
aa:fd:63:fb:f8:7f:73:5e:b1:1b:85:0b:a8:51:a9:b2:88:d0:
30:72:4d:11:e2:51:ab:03:8a:ed:9e:d2:4d:c7:4d:9d:ad:e7:
27:91:f0:c0:06:33:f6:92:bf:2c:b5:6f:87:5f:d0:3c:b3:7b:
0e:63:ee:23:d0:b4:77:95:4c:b6:69:c6:48:46:34:61:3c:ad:
4e:c7:e5:90:f3:08:54:1a:09:79:fe:0c:3a:66:25:0c:92:ec:
90:29:29:ae:7f:fd:6f:35:5e:1d:72:56:77:e8:18:d0:0c:03:
3c:d3:d3:07:fe:54:44:62:79:66:b2:ea:26:97:4f:a2:a6:90:
17:bb:50:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:26:09 2025 by rpki-client