Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AAA13FCF5E311EFAF842591762E951A.roa
File: 2AAA13FCF5E311EFAF842591762E951A.roa (raw, json)
Hash identifier: rAuiYI5z/vQXiEn5BpNrjb2c7/9KL2uPQTgIWeQK2jk=
Subject key identifier: 3A:5C:41:79:B5:53:F8:41:ED:4E:99:09:D9:5B:FC:78:3A:D0:92:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AAA13FCF5E311EFAF842591762E951A.roa
Signing time: Fri 28 Feb 2025 14:49:09 +0000
ROA not before: Fri 28 Feb 2025 14:49:06 +0000
ROA not after: Wed 26 Mar 2025 14:49:06 +0000
asID: 62240
IP address blocks: 154.194.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93050 (0x16b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 14:49:06 2025 GMT
Not After : Mar 26 14:49:06 2025 GMT
Subject: CN=67c1cce5-3227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d2:df:89:be:2b:84:98:e5:67:d2:c4:cb:db:
4d:9b:1b:f4:c8:2b:96:42:4d:fa:ab:bb:50:44:76:
07:7a:a5:07:35:06:15:a4:14:80:68:21:b0:4a:92:
f1:38:ce:ab:7e:a3:21:a1:4d:bf:6e:71:72:27:4d:
85:27:80:cf:17:d6:5e:5a:da:b0:24:30:a3:b8:07:
47:bf:82:f8:53:ad:81:bb:a5:30:2e:35:17:19:a6:
53:95:8e:6a:0d:32:44:7c:22:9d:db:d5:b8:c8:b9:
49:bf:eb:3c:3f:9a:4d:71:9a:89:27:f1:29:c9:22:
ae:b9:92:86:83:14:db:9d:40:5b:3e:bb:be:6f:99:
27:fc:8d:c7:ea:52:90:9f:ca:fa:d0:ee:8e:a0:7f:
a5:61:f9:7e:6f:65:e4:e3:94:b9:e7:7a:7a:0b:c0:
81:e2:9c:43:7d:4d:db:cc:b2:e8:1d:a6:8f:ab:c3:
eb:64:32:57:b3:78:b1:da:ed:37:97:8c:df:fa:ee:
14:3c:9e:ef:c6:de:93:37:c7:e7:41:f9:e9:fa:85:
2e:a9:0d:e4:d2:47:95:b2:93:11:ce:a1:ac:91:cc:
1d:73:07:9d:6d:6f:8a:e3:e6:b7:08:d2:c9:ec:04:
e9:f1:ac:f5:f2:e3:d7:33:82:5a:04:87:73:d3:cb:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:41:79:B5:53:F8:41:ED:4E:99:09:D9:5B:FC:78:3A:D0:92:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AAA13FCF5E311EFAF842591762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:55:f5:0e:4c:cd:c0:4c:20:7b:e7:a5:d3:6d:81:b7:5c:a4:
5e:4b:3f:a8:50:4b:52:f5:6d:53:de:5d:5e:d6:28:0a:d5:83:
ac:8d:1c:17:ec:5b:a4:03:16:e9:2b:6f:54:95:7f:0a:55:5f:
5f:ef:04:14:a4:33:1d:d5:0c:fb:e9:b7:7a:4d:b6:73:06:fa:
c0:97:5b:77:b5:af:98:35:fb:3a:51:8d:3e:19:46:a9:d7:f3:
30:13:9c:9a:ac:89:da:62:20:5f:ef:a8:76:a7:f6:46:71:04:
6e:00:9b:e7:0a:41:0c:74:cc:ab:46:28:83:4b:4d:42:a7:48:
9a:f5:15:d4:47:34:94:60:b3:50:97:7c:07:e5:c7:63:95:04:
df:d5:39:fa:8d:1d:37:10:a0:e2:0a:d0:c9:5f:72:1e:54:ab:
90:a7:b2:06:0a:da:2b:a3:ec:0e:ae:13:f8:61:ab:01:a9:91:
07:e5:8e:fb:cd:1c:a3:9a:1a:b0:56:c4:c9:b6:8d:a3:57:fe:
83:71:e1:e7:fa:9e:52:11:58:41:a4:0c:16:3e:04:43:a5:2b:
cd:b7:a1:b2:e3:59:10:ab:ab:71:b6:ec:98:16:b3:c1:16:f9:
52:09:ac:99:cd:df:58:05:2e:2f:24:9e:48:9a:5a:5b:9a:21:
77:b7:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:49:41 2025 by rpki-client