Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A9FEB4EF1D711EFBE0B9073762E951A.roa
File: 2A9FEB4EF1D711EFBE0B9073762E951A.roa (raw, json)
Hash identifier: D8NbonFdOBFVLxmD5rX6Anziqa+gYw5z0ox0GbbekHs=
Subject key identifier: 1C:88:61:08:78:60:BD:EA:24:07:A4:11:FD:D2:DA:7E:98:35:E4:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A9FEB4EF1D711EFBE0B9073762E951A.roa
Signing time: Sun 23 Feb 2025 11:13:11 +0000
ROA not before: Sun 23 Feb 2025 11:13:07 +0000
ROA not after: Wed 26 Mar 2025 11:13:07 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88911 (0x15b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 11:13:07 2025 GMT
Not After : Mar 26 11:13:07 2025 GMT
Subject: CN=67bb02c7-f6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:0b:7d:19:09:35:f3:07:31:45:0a:1d:21:
4a:0b:98:d1:97:89:9f:d7:c2:1a:20:ba:f7:cd:d9:
5f:b5:46:81:2a:9b:3c:a8:de:d9:e5:fd:2d:5a:81:
d7:87:53:dd:7c:fa:6f:a2:61:d9:66:a1:c6:d3:06:
13:9e:fb:c7:bb:c0:24:12:8e:72:10:53:01:43:b9:
fd:92:88:8e:e6:2d:b3:9a:79:64:bf:fe:2b:6b:d2:
3b:2c:88:59:b0:15:81:45:31:e1:c7:b9:b5:9d:92:
9c:c6:25:18:a6:85:32:c1:81:7e:fa:6a:4e:5a:a6:
93:4f:1e:a0:93:bd:3a:7d:2b:a5:79:e2:45:14:35:
7a:b6:42:1b:38:31:8e:21:09:e6:87:52:d9:b4:40:
4e:36:80:b7:ce:09:ef:be:c9:e5:19:80:7d:83:a1:
39:a4:b0:9f:32:d2:e3:b1:8a:dc:de:ed:46:9b:19:
0c:d9:ac:42:40:36:9d:9b:16:4f:ef:fa:74:4b:19:
ef:09:26:a3:31:8c:d0:03:96:c1:84:e9:68:2d:1c:
99:fc:f7:0b:2d:e8:f5:5b:b7:6b:ac:3d:8c:67:b0:
05:51:1c:2a:f9:b1:a6:75:91:1b:2e:5b:4e:67:f1:
4d:e4:7a:e3:32:0d:1c:df:80:81:f0:ae:8a:b9:80:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:88:61:08:78:60:BD:EA:24:07:A4:11:FD:D2:DA:7E:98:35:E4:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A9FEB4EF1D711EFBE0B9073762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:77:1a:1c:ee:d9:33:24:5e:f8:a8:f0:a1:7a:e8:d4:14:af:
b9:1a:c9:ea:3f:4d:9c:da:af:54:85:66:48:22:fd:a6:95:70:
d4:d4:be:86:12:3e:72:9b:e0:d1:7e:76:ad:57:94:f7:54:fd:
4e:f6:91:fd:1f:ef:01:bf:c4:fa:12:9f:b2:d0:78:5e:bb:ba:
c2:34:de:59:76:fc:26:cc:b3:1c:d7:ea:0d:93:76:3f:a4:0a:
4d:a5:ca:d1:6c:83:35:de:ab:a9:d8:e3:2d:91:65:ed:64:7c:
9a:76:ff:e2:cb:70:21:e1:18:91:96:03:dc:e4:61:41:e8:31:
40:84:ef:cc:2b:42:71:1c:e8:5a:77:bd:65:85:45:f8:82:5a:
0b:3c:ca:3b:92:d8:dd:de:fa:71:74:46:8e:92:f6:54:d4:0c:
6e:7f:e0:42:b9:c9:c6:f7:8e:0e:d4:98:42:04:79:c1:9e:d9:
ec:20:d7:e1:30:b6:04:a4:16:01:f5:4c:7e:e8:e0:59:d3:33:
cd:a5:e3:b7:6b:de:80:6a:f5:de:c1:e8:34:dc:38:83:fe:07:
3d:67:c0:8d:4b:04:a1:ce:55:46:36:90:90:d4:16:2c:9e:44:
ba:d1:1d:6e:6f:22:41:95:c6:51:de:de:6c:28:7d:ec:41:7b:
76:18:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:17:02 2025 by rpki-client