Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C61C9FCF6BE11EFABEA6A6B762E951A.roa
File: 2C61C9FCF6BE11EFABEA6A6B762E951A.roa (raw, json)
Hash identifier: wguHCtRJnLhpDBFlX0SkCDuEY2BMob4o/eyytqkXe18=
Subject key identifier: C7:37:6F:83:9F:C3:53:1E:AB:BF:6E:99:D3:06:6B:2B:76:80:CB:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C61C9FCF6BE11EFABEA6A6B762E951A.roa
Signing time: Sat 01 Mar 2025 16:56:52 +0000
ROA not before: Sat 01 Mar 2025 16:56:48 +0000
ROA not after: Mon 31 Mar 2025 16:56:48 +0000
asID: 202656
IP address blocks: 154.219.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93954 (0x16f02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 16:56:48 2025 GMT
Not After : Mar 31 16:56:48 2025 GMT
Subject: CN=67c33c54-3c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:4e:72:c8:60:27:ea:c7:64:24:ef:d4:f8:
03:05:be:8c:20:84:30:c3:1a:4e:9c:df:e4:ee:01:
8b:33:ae:00:34:8b:40:ce:3b:2d:5f:d9:51:5a:37:
77:00:98:f6:a3:84:bc:55:e9:fb:c7:0e:5c:79:5d:
78:c0:e0:02:c0:b3:d6:08:2b:47:4e:a7:c6:34:04:
51:c9:4e:1c:c0:3f:b4:dd:88:cb:f4:c6:a4:bf:86:
f0:79:f7:2a:ca:e2:75:a3:ae:99:f2:a7:c3:d6:d6:
c7:6c:72:f3:f6:58:fb:89:12:83:0a:f2:a3:22:af:
42:28:bb:9c:b0:18:0a:4b:47:73:58:7e:75:37:d5:
22:0b:9e:41:4c:fa:79:86:17:d9:23:63:8c:04:88:
56:ec:8d:0e:4e:33:8a:3a:c5:ca:07:9d:7d:58:cc:
e5:c7:86:b1:28:e4:e1:c3:c5:03:9c:63:c7:5f:10:
74:73:03:4b:f6:9a:3d:8c:1a:0e:fe:74:9e:ab:90:
27:dd:eb:73:da:f7:d6:d1:91:67:2e:ae:0d:48:ea:
d7:1b:5b:37:20:7d:99:7f:d6:a0:ff:40:67:0b:67:
23:0d:a5:2d:f0:4c:b4:ae:19:76:58:a7:be:ec:25:
ee:f3:fd:d2:5f:12:8f:93:2f:d1:cd:41:6e:a0:6f:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:37:6F:83:9F:C3:53:1E:AB:BF:6E:99:D3:06:6B:2B:76:80:CB:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C61C9FCF6BE11EFABEA6A6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.234.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6d:22:65:f2:0d:23:cc:5d:f6:b6:0e:79:c6:3b:bb:e6:c4:
b0:2d:70:a0:23:5f:ed:d2:4e:ec:24:6b:5e:3b:7f:0a:f8:61:
f6:d8:8d:e5:2f:3a:a8:78:d2:74:d9:a4:49:ee:dd:c0:a2:2c:
64:74:39:98:48:d4:79:c2:f7:f0:74:1f:1c:99:be:d4:08:ab:
3c:f0:42:79:33:d0:86:21:e3:e8:ea:62:8c:07:84:d3:3d:00:
99:86:7d:48:e0:fa:90:20:6b:26:9c:b1:3f:c6:0d:cf:ce:05:
f6:e4:3f:b7:66:e1:f0:82:39:ff:d1:90:3d:45:dd:d1:2b:54:
6e:26:08:a4:c1:cf:96:e7:98:a6:a1:28:26:70:0d:4b:82:d3:
6d:92:e7:7e:d7:10:5b:75:94:71:16:08:a8:32:91:fb:7a:27:
88:0d:13:7c:e8:cc:8b:3c:3c:39:7f:30:71:64:8b:5f:32:49:
86:fd:1a:1b:8f:33:b7:b3:6a:cf:15:ae:73:81:0e:46:2b:b2:
3c:42:4a:ad:41:69:97:76:29:41:79:8e:ac:0e:38:d0:f0:87:
72:70:0b:71:9e:73:ee:7b:e7:03:6e:dd:ab:de:d0:62:e1:2f:
2d:e3:70:50:71:3d:73:c6:e3:2d:cf:d4:37:6d:55:49:c4:d4:
b3:97:ca:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:12:57 2025 by rpki-client