Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D16B140F2E111EFBFC6FC63762E951A.roa
File: 2D16B140F2E111EFBFC6FC63762E951A.roa (raw, json)
Hash identifier: tQrhUTq9GNUcz/H5oHLQFp9u+wJAo6v+iZfJuE5kxQk=
Subject key identifier: FF:10:CD:35:5F:81:D4:06:48:40:45:4C:CA:AE:D5:40:30:61:0B:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D16B140F2E111EFBFC6FC63762E951A.roa
Signing time: Mon 24 Feb 2025 18:57:21 +0000
ROA not before: Mon 24 Feb 2025 18:57:17 +0000
ROA not after: Mon 07 Apr 2025 18:57:17 +0000
asID: 63139
IP address blocks: 154.223.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89284 (0x15cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:57:17 2025 GMT
Not After : Apr 7 18:57:17 2025 GMT
Subject: CN=67bcc111-5cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:f4:76:46:75:99:69:c7:8b:a9:f6:ba:e2:
8d:e4:d9:f5:74:85:67:55:ec:ba:4b:96:b2:28:08:
bc:db:ff:f7:31:4c:ba:dd:21:f7:85:a2:06:d5:c4:
17:89:a7:c6:72:8d:4d:c3:19:aa:e4:bd:4a:ad:5a:
78:c4:42:56:78:c7:a0:ac:6e:28:54:f2:50:ef:a2:
ed:f3:f6:f4:8d:0a:44:73:db:b6:08:55:7c:44:5e:
4a:b3:34:e6:db:03:49:88:44:bd:85:18:58:57:61:
8a:c6:0f:d5:7f:4f:41:91:09:2f:ca:59:6c:0a:ce:
ec:d9:ed:25:fe:2f:f3:0f:e6:02:88:cd:c4:f3:69:
44:dc:a3:69:6e:27:2f:86:eb:b1:1f:e2:bb:11:ab:
99:34:f9:12:1c:57:5f:f5:cc:ad:6f:86:4f:0d:6f:
b2:1f:be:2e:89:69:dd:25:e8:23:0a:b1:df:e1:6a:
8b:f8:48:5c:54:86:3e:6f:db:8b:38:f7:01:1d:57:
2f:f3:75:52:42:41:7f:3c:b1:f5:a5:6c:d7:3a:f6:
2b:a9:f3:26:ad:9e:3f:29:7e:b3:b8:96:54:4f:8d:
eb:9e:48:e1:75:27:f7:78:3a:aa:18:16:1f:5e:ce:
bd:e0:7a:25:87:c9:e9:2e:e3:b2:cd:17:fe:1a:87:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:10:CD:35:5F:81:D4:06:48:40:45:4C:CA:AE:D5:40:30:61:0B:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D16B140F2E111EFBFC6FC63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:24:9f:02:40:3e:b3:eb:08:a4:a8:a8:7b:36:1a:16:b6:6c:
d8:7d:a3:4e:77:04:b0:01:2b:b7:a1:1f:85:fd:76:58:52:3d:
94:21:8a:61:16:88:87:84:d2:41:26:d1:67:2f:0e:51:b3:49:
6c:14:80:8c:fb:d9:07:93:f2:63:bb:fd:dc:a0:09:93:bf:16:
91:e2:64:f2:da:e7:75:fd:93:1d:59:cc:60:39:84:5e:4c:f4:
17:8a:04:f7:92:76:ab:e1:50:22:58:85:05:e2:e8:8a:b3:22:
5c:cb:4a:d2:9d:29:a8:08:b6:51:0a:f3:8b:63:b8:0b:21:d4:
fb:7e:c6:b0:dd:0e:b5:52:8f:39:76:80:e5:e7:eb:00:5f:2b:
5d:fd:6a:bf:dd:09:65:d4:63:71:b1:b6:91:65:04:10:b5:b5:
4c:86:c5:e6:1a:cc:5d:f4:b1:5a:9a:54:1b:04:0a:38:ac:a1:
a3:fc:28:d5:2b:e1:de:a4:06:86:c9:99:4e:b5:2a:bf:a9:98:
48:42:1a:30:e4:48:08:5f:88:d0:41:6f:f8:4c:3c:ba:dc:48:
42:8f:c1:20:fe:54:24:8f:51:24:a9:e9:18:23:22:d8:81:99:
be:82:84:05:b4:95:91:70:d5:8d:ff:b7:85:0a:8e:67:fc:6d:
33:4a:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:22:30 2025 by rpki-client