Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AA2915CF81A11EF8DA4F1A5762E951A.roa
File: 2AA2915CF81A11EF8DA4F1A5762E951A.roa (raw, json)
Hash identifier: ErZEvpzYL8owtWH5L7YnmAdVsDbm+wANLjKdw5nr3KU=
Subject key identifier: A4:F3:D0:8A:5A:05:22:D0:9F:A2:A7:F6:B8:64:71:53:ED:DF:9E:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017015
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AA2915CF81A11EF8DA4F1A5762E951A.roa
Signing time: Mon 03 Mar 2025 10:27:54 +0000
ROA not before: Mon 03 Mar 2025 10:27:50 +0000
ROA not after: Mon 31 Mar 2025 10:27:50 +0000
asID: 202656
IP address blocks: 154.219.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94229 (0x17015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:27:50 2025 GMT
Not After : Mar 31 10:27:50 2025 GMT
Subject: CN=67c5842a-f24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:2d:cc:35:96:2d:4b:97:59:b6:9b:16:64:
25:6f:c9:6b:5c:6b:19:21:fc:37:60:3f:88:31:65:
0d:a1:4c:98:20:fd:bd:17:89:02:97:8d:cf:38:cd:
dd:e7:8d:93:13:b9:cc:11:eb:b4:50:7b:f3:d7:18:
37:b2:b7:1f:19:3d:e2:e2:9f:05:f0:69:e5:2c:db:
33:58:8f:f9:68:04:92:5b:b0:1b:44:cf:47:4f:1a:
c7:9f:e2:6b:75:ec:43:a2:a0:f3:07:89:c2:dd:01:
a0:f2:85:e0:08:90:e2:e2:dc:f5:b8:41:3e:02:75:
b4:d6:f9:5c:89:fa:2c:c0:29:8e:81:28:fd:cc:ed:
50:a8:37:cc:4c:48:9f:ed:de:bf:3c:cd:cb:d1:79:
1c:a6:17:b2:6d:e0:89:d0:3c:56:51:7e:7d:58:66:
62:0e:a5:30:e3:d5:21:0b:67:3f:fc:cb:d3:c9:16:
21:d2:98:13:3d:6e:13:4c:c6:f1:56:b7:68:62:d0:
90:7f:2e:f3:5f:5b:fd:18:e2:6b:7b:20:8c:e0:02:
17:90:11:ab:09:56:33:94:8b:90:d9:04:3f:f8:ee:
0f:7c:19:d7:55:79:4c:fa:1a:ce:ff:3a:54:4c:a4:
a0:69:60:1a:f9:f8:e2:7f:47:d5:46:0a:b0:0b:e3:
3d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:D0:8A:5A:05:22:D0:9F:A2:A7:F6:B8:64:71:53:ED:DF:9E:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AA2915CF81A11EF8DA4F1A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:56:7b:ef:d7:d7:c4:e2:f8:79:5e:9e:de:2f:2e:14:e2:9c:
dc:3a:d2:c6:7d:33:c6:57:9a:4f:23:a1:4d:17:8a:af:66:1a:
80:54:ea:75:30:c7:42:ed:63:13:2c:4d:40:0e:0a:46:32:94:
b1:ab:ce:08:7f:b5:9b:70:db:79:92:f5:45:f0:e3:83:e9:30:
06:2a:e1:a9:0d:aa:1b:11:69:c8:0d:a1:39:05:7c:91:0b:c9:
aa:8a:23:76:04:c8:cd:cc:1a:bd:07:d0:e5:24:df:53:1c:f9:
8c:db:dc:1d:99:96:d4:b8:80:aa:0a:4e:ec:fc:dc:df:39:f0:
4f:11:a3:8c:a3:19:01:eb:69:1c:35:24:fa:20:3f:50:f7:3f:
5f:51:c1:d7:7a:7f:9d:8b:81:e2:f7:33:7c:00:da:f6:58:c0:
f0:1a:c4:95:bd:41:be:e9:ee:10:c3:57:c7:9f:a4:c9:c6:15:
3d:67:05:1d:db:e6:cb:d4:e1:01:9c:2e:33:5e:fd:3f:09:98:
7e:f3:7b:46:f2:d7:18:33:e3:1b:da:a9:bc:1f:d8:04:77:2d:
3d:6f:30:85:b4:01:4a:8b:3f:7e:b1:b6:f9:48:f9:9e:8e:3f:
f9:20:b0:09:7e:e7:dc:3a:c2:66:df:c1:d8:a9:39:b7:8d:32:
91:81:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:34:01 2025 by rpki-client