Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F0DCBEEF40F11EFA013E171762E951A.roa
File: 2F0DCBEEF40F11EFA013E171762E951A.roa (raw, json)
Hash identifier: LWrDsOXhJMjWgNrvdggNBAsqfaiL82xQTYI1WKmraWk=
Subject key identifier: D2:35:08:52:A9:01:E9:23:C1:4A:AF:8B:57:7B:0D:00:AB:0E:80:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016109
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F0DCBEEF40F11EFA013E171762E951A.roa
Signing time: Wed 26 Feb 2025 06:59:12 +0000
ROA not before: Wed 26 Feb 2025 06:59:09 +0000
ROA not after: Fri 28 Mar 2025 06:59:09 +0000
asID: 214413
IP address blocks: 154.193.136.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90377 (0x16109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 06:59:09 2025 GMT
Not After : Mar 28 06:59:09 2025 GMT
Subject: CN=67bebbc0-684d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:39:4e:56:6a:2c:e2:db:a9:9b:f5:a2:2e:
20:e9:48:c5:1f:64:f8:5c:e5:f4:2e:88:a4:25:59:
69:91:86:81:1d:8b:80:61:6d:f6:db:00:c4:f7:ea:
b6:76:31:eb:ec:f6:33:65:f3:d1:eb:39:36:4a:58:
2c:be:dd:a0:c6:2b:9b:42:8f:6a:29:e9:d3:9e:28:
7f:d9:cd:d9:de:b2:de:8d:ee:ec:43:df:43:56:77:
2d:e5:36:42:2b:1e:37:0f:29:be:a5:81:ef:fe:d9:
48:dc:5b:c8:05:9b:f2:f2:81:b5:ca:07:b0:43:a4:
e9:fb:2f:97:83:94:a6:e4:c8:d1:8c:7c:f0:49:ee:
9a:d3:76:5e:21:3a:bf:0b:7e:ad:55:2e:c8:81:a8:
5f:d9:62:68:88:90:d9:5e:5c:59:dc:71:67:61:64:
e9:1f:b2:af:ff:e6:9c:e3:2d:be:68:c1:6d:30:b1:
c2:5f:10:f8:c4:75:34:34:17:7c:71:f1:9f:4a:35:
a5:e0:2c:b3:93:3c:65:23:83:e2:66:a3:82:fd:7c:
32:47:99:36:69:f7:c7:1f:1c:5d:43:0c:6e:85:9d:
11:8b:0b:15:30:f1:44:05:70:6d:8e:b4:5a:88:60:
04:b1:e6:76:8d:a7:0e:32:67:ed:a2:6b:64:ae:78:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:35:08:52:A9:01:E9:23:C1:4A:AF:8B:57:7B:0D:00:AB:0E:80:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F0DCBEEF40F11EFA013E171762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0/21
Signature Algorithm: sha256WithRSAEncryption
cc:7f:8f:07:cc:56:40:7f:40:5b:88:3e:97:a5:41:31:56:9f:
b3:b9:4d:f4:f6:aa:74:11:05:f1:de:f4:4c:24:58:4a:ac:49:
53:27:78:20:06:d7:5b:bb:2c:97:29:0f:0b:86:9d:00:e7:71:
45:2e:71:b3:4f:47:cf:0b:65:d6:61:58:1a:d9:f9:02:95:0f:
f7:30:8b:95:1f:cf:3f:d1:fd:20:74:57:5c:6a:a0:fd:08:80:
c0:da:b2:af:a1:5a:71:16:ac:9f:62:5f:9d:f1:ea:41:86:0d:
c7:be:9b:94:ef:52:72:11:09:99:19:8c:d4:dd:7f:0f:c7:36:
5f:7f:39:be:38:2c:23:e4:7b:06:ce:f9:0b:ac:aa:0c:51:ea:
82:a9:53:a9:7e:6e:a5:81:15:12:2d:bd:58:63:cd:36:6a:98:
2a:32:47:04:ad:18:bb:e9:90:ce:de:81:d4:55:27:b4:f9:45:
f9:95:23:fe:b2:df:51:0c:a3:60:2a:2d:a4:44:87:fd:51:81:
1c:f1:54:f8:c3:50:95:2d:1d:4d:98:71:2b:2a:5f:04:67:5e:
4f:28:8b:67:3c:1a:eb:58:8e:bd:63:ff:fd:1a:72:09:97:36:
9e:0d:4c:b2:50:84:3b:33:4a:77:93:fb:c8:c0:22:96:46:53:
eb:c0:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:32:56 2025 by rpki-client