Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/281DBD80F53B11EF9621DA8C762E951A.roa
File: 281DBD80F53B11EF9621DA8C762E951A.roa (raw, json)
Hash identifier: upi5QNKLbDaJ2TE8vdNXA7DbIq/x7TX3Ckium7MW00s=
Subject key identifier: 52:B1:CF:B2:97:F7:0E:02:E7:0F:E8:FE:0A:93:5D:B2:76:5E:D5:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01697E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/281DBD80F53B11EF9621DA8C762E951A.roa
Signing time: Thu 27 Feb 2025 18:46:30 +0000
ROA not before: Thu 27 Feb 2025 18:46:26 +0000
ROA not after: Sat 05 Apr 2025 18:46:26 +0000
asID: 205125
IP address blocks: 154.203.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92542 (0x1697e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 18:46:26 2025 GMT
Not After : Apr 5 18:46:26 2025 GMT
Subject: CN=67c0b306-c0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:22:f3:be:1c:2d:60:59:f1:b2:30:4d:e9:
d5:69:2c:3e:e1:b1:05:3a:ba:ba:4e:11:5f:35:f5:
47:05:3a:3a:f4:bf:4f:3a:6c:2b:1d:f0:1b:8a:1a:
7e:1e:4c:bf:f9:10:74:aa:1b:ab:4b:58:ad:ac:11:
cf:6a:e7:06:0f:63:67:6d:80:d7:2d:8b:e6:4a:9c:
5e:58:0b:33:44:c2:99:22:2c:aa:77:f1:85:b1:6e:
54:22:93:53:27:f0:4d:95:3c:90:5b:1c:04:f2:72:
76:d5:9b:3e:f1:4d:3d:c1:4f:bc:07:41:71:ea:07:
c0:a9:ae:82:a3:62:e1:a7:d8:96:c0:46:21:ae:30:
a5:73:4b:28:fa:e5:63:c2:ac:46:22:4f:f6:b1:d8:
48:46:92:ad:16:82:9e:8c:85:c5:ea:5b:e9:c6:34:
ff:80:57:3a:e0:be:a3:9c:f5:59:d9:fd:98:a0:f3:
16:6a:83:7d:48:b7:74:85:4b:64:33:26:2b:25:ec:
b2:35:44:6e:13:fc:87:67:76:4a:0b:69:d4:01:c6:
f3:a2:de:66:0a:97:0c:a5:23:a4:ea:ec:09:41:c7:
66:8c:ef:85:0c:43:6a:f7:3d:e2:1a:8e:ea:50:be:
ae:50:f2:17:3e:7b:4b:1a:cd:0d:c7:7c:24:5e:57:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B1:CF:B2:97:F7:0E:02:E7:0F:E8:FE:0A:93:5D:B2:76:5E:D5:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/281DBD80F53B11EF9621DA8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.195.0/24
Signature Algorithm: sha256WithRSAEncryption
58:97:dd:e8:b1:ae:d5:f7:ee:f8:55:73:12:72:fa:b9:d9:bf:
b8:ed:81:9f:b5:17:4e:63:59:5e:d9:6e:a6:dd:3a:69:ed:24:
c8:cc:59:29:8a:f3:dd:c4:9b:5a:5f:82:24:2a:58:67:c5:fd:
79:85:da:09:cf:50:62:b4:31:e0:3d:5b:87:df:75:9b:ea:46:
1c:c7:ba:ff:2c:a2:be:bc:25:0e:0f:a1:f0:27:f1:f4:b0:1a:
ba:85:e8:1b:cf:ba:9e:37:74:00:48:eb:c7:0f:c2:03:a0:b5:
54:be:57:7a:12:3c:c8:b9:8f:06:f9:dd:b8:21:3f:60:cd:b0:
ad:5c:c0:e0:e5:d4:36:6c:ab:d2:73:d0:5c:99:92:05:e4:63:
fe:a0:d9:dd:15:0c:b9:30:c0:76:6c:01:b7:a6:1f:40:9c:15:
0a:9b:20:29:e7:7d:e3:53:e4:a4:f9:05:b9:41:b5:5f:4f:a2:
9d:48:3d:ee:1b:61:76:b2:2c:c3:80:09:fb:f2:5b:56:1a:33:
90:78:f9:d2:3c:07:13:63:2d:85:f2:61:43:21:6d:dc:0d:67:
e1:94:db:85:82:46:85:38:05:1a:83:ae:04:16:f1:f1:bf:6e:
7c:f9:ef:e1:70:80:70:fe:38:5c:2e:ca:80:6c:3c:5d:7a:49:
74:36:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:04:41 2025 by rpki-client