Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3267E792F4FB11EFABD8FC5C762E951A.roa
File: 3267E792F4FB11EFABD8FC5C762E951A.roa (raw, json)
Hash identifier: OPFpCjfM1lC3hkp3Cwo02nWWk8AmDo2eFcGhla8MA34=
Subject key identifier: 66:72:42:FF:14:66:B2:71:52:83:9D:D4:3C:B9:BF:55:9F:ED:46:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016806
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3267E792F4FB11EFABD8FC5C762E951A.roa
Signing time: Thu 27 Feb 2025 11:08:39 +0000
ROA not before: Thu 27 Feb 2025 11:08:34 +0000
ROA not after: Wed 26 Mar 2025 11:08:34 +0000
asID: 62240
IP address blocks: 154.196.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92166 (0x16806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 11:08:34 2025 GMT
Not After : Mar 26 11:08:34 2025 GMT
Subject: CN=67c047b7-9234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:05:ca:5d:cc:90:81:05:5e:e4:8c:29:a9:
60:93:8b:23:01:fc:39:02:69:a7:ea:9d:36:ca:9c:
b5:57:8e:6e:d4:a5:16:63:36:e2:2c:bd:34:54:f3:
f4:bb:45:ad:53:dc:09:e7:f0:bb:d7:5a:e4:fe:d3:
3e:f6:33:20:32:9e:82:e2:8b:f0:39:5d:be:3c:57:
e3:f3:32:b6:d7:74:36:9d:a2:d7:f3:a5:30:55:8a:
b6:39:ad:ce:12:4d:1c:c2:46:a9:60:3d:3a:92:20:
61:66:77:9a:89:ab:aa:50:16:3b:a3:2f:d8:6d:e0:
5c:b0:19:4b:cf:60:5a:01:a8:48:b7:17:11:1b:35:
0a:34:7a:02:3a:b2:ed:63:c7:e5:b1:a9:fc:db:f4:
39:f2:f4:01:33:ad:e7:37:f6:a9:46:f6:9d:e7:d9:
5a:15:7f:1c:f2:3c:31:2a:74:9b:55:5d:23:18:20:
9d:8a:c8:8b:c9:09:bd:e2:54:33:58:2c:b4:73:bd:
8e:8f:bb:d4:42:fa:0d:c0:eb:d7:61:a9:ae:4f:99:
0a:af:eb:c6:de:f0:98:08:30:ae:0a:c4:91:74:c0:
97:cb:87:99:3a:a5:9f:cc:dc:50:b2:68:1d:93:b6:
b4:61:58:2e:0a:13:f4:89:48:15:93:bf:fd:8d:b2:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:42:FF:14:66:B2:71:52:83:9D:D4:3C:B9:BF:55:9F:ED:46:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3267E792F4FB11EFABD8FC5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.43.0/24
Signature Algorithm: sha256WithRSAEncryption
77:54:07:2b:52:99:ee:ed:9c:ee:0a:c6:9f:19:37:c9:ce:fd:
d0:64:47:55:56:b1:26:a8:90:1f:af:2f:bd:d2:02:5b:6e:77:
be:d6:86:28:d0:21:32:d5:4d:d3:1a:fc:09:d8:a1:a4:ed:a9:
c9:b0:89:ed:5f:c8:e1:f5:cd:52:b0:c1:9f:95:da:d1:79:13:
23:6b:60:49:cb:7b:b3:26:26:d0:7d:92:37:27:0c:de:43:9d:
d7:9b:92:a6:30:2d:2d:f9:f5:42:fc:cc:fb:d0:a9:3d:c2:ad:
90:39:4d:65:13:12:7e:7d:7a:40:32:22:0e:d6:e5:ca:f7:2e:
f3:96:28:9c:76:21:cf:47:3b:b3:54:35:21:ea:cc:95:29:09:
71:39:f5:bc:87:cf:ff:9a:72:69:98:58:f2:6e:a5:e7:0b:e2:
9e:f5:fd:de:72:1f:b7:39:7a:f6:fe:7a:7b:a5:32:6b:d0:c8:
57:f2:1e:29:52:58:be:db:53:17:65:31:07:f8:a4:35:fa:37:
f8:aa:01:ed:ff:c7:9e:7c:8a:75:7c:df:94:cb:00:ce:6d:fc:
21:22:72:fd:f5:15:a4:96:54:25:76:6d:6b:a7:6f:43:2e:d1:
43:f1:fb:d8:53:df:6b:23:3e:c1:b9:36:7a:f4:0f:82:89:b0:
ff:0e:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:17:15 2025 by rpki-client