Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35DEE246F50E11EFAEF8E25C762E951A.roa
File: 35DEE246F50E11EFAEF8E25C762E951A.roa (raw, json)
Hash identifier: tAJzYRKO1eQlaJgOADQPvVdzAAXiVMX18f3u2cssXaA=
Subject key identifier: 30:03:D2:A9:55:5D:F7:20:F3:F0:A2:D8:9E:6F:9D:4F:A5:B6:35:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016880
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35DEE246F50E11EFAEF8E25C762E951A.roa
Signing time: Thu 27 Feb 2025 13:24:45 +0000
ROA not before: Thu 27 Feb 2025 13:24:42 +0000
ROA not after: Wed 26 Mar 2025 13:24:42 +0000
asID: 62240
IP address blocks: 154.196.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92288 (0x16880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 13:24:42 2025 GMT
Not After : Mar 26 13:24:42 2025 GMT
Subject: CN=67c0679d-f3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:f2:42:9a:ab:3e:d3:ba:69:ef:fd:aa:9e:
8b:db:1f:df:db:2f:36:29:97:bf:6c:a4:f6:88:9d:
bc:a3:ab:f0:f5:cc:1b:1a:56:b9:30:4d:ae:62:18:
88:63:bf:ae:ff:35:93:4a:d4:c3:6c:82:37:32:1d:
b1:eb:03:87:03:86:83:5c:c2:72:f6:88:57:7a:ac:
55:b3:3d:6e:27:c7:ff:03:dd:6b:d9:70:b1:65:a0:
ed:49:40:eb:f5:d7:48:98:fb:b7:2a:86:1e:5e:ff:
97:4a:d4:a2:eb:b2:4c:ac:f1:7f:39:19:72:c8:79:
79:42:9c:d8:5a:5d:49:7d:29:ff:e4:db:a5:9b:20:
7e:e0:5f:5e:29:d4:d9:94:72:41:59:2d:f1:8c:d7:
6b:15:c0:be:d6:e6:c4:a0:9c:db:c3:af:8b:2b:a3:
2a:25:3f:b4:12:e8:d5:80:37:c0:92:88:d8:76:eb:
c8:40:5d:b8:b5:b0:84:52:17:ae:92:ea:0e:23:10:
d9:95:2c:89:11:4b:43:a5:3c:77:54:b8:32:87:0e:
76:75:a0:79:0c:17:bf:f5:b0:ca:00:60:c6:16:77:
34:66:bf:09:6b:d2:cf:e0:d0:75:82:bc:d0:2c:41:
f2:e0:4a:3d:46:65:27:89:a6:1a:75:b9:5f:41:a1:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:03:D2:A9:55:5D:F7:20:F3:F0:A2:D8:9E:6F:9D:4F:A5:B6:35:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35DEE246F50E11EFAEF8E25C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e9:71:5a:df:9b:c8:47:7f:1d:96:2c:a6:4f:fd:b0:15:32:
7c:12:fd:db:59:43:a8:c2:25:6b:83:f4:34:49:1c:4c:6e:f0:
dd:de:af:49:2c:89:c3:7c:f9:84:e6:b8:f6:ff:ae:65:e1:75:
a7:41:e9:f9:e4:c0:18:84:8b:3a:fc:c3:d9:86:4b:f9:d0:5a:
d9:ff:4b:26:29:4f:4a:da:07:7c:76:5a:bb:c1:b3:b9:ef:f4:
65:f0:de:8c:c4:42:9a:da:bc:02:70:75:c4:56:ef:34:d8:e0:
6b:71:e5:e9:34:3f:d4:0b:05:3f:66:2c:f9:d6:ef:1a:38:8b:
39:cc:db:a3:f9:dd:34:b0:2c:19:4d:a6:67:ac:76:31:34:e3:
fd:f3:af:4a:45:c8:cd:12:46:29:b6:09:24:fd:01:43:1d:b0:
3b:af:cf:2e:98:af:33:39:fe:af:dc:e3:3c:88:c0:4c:0a:e6:
92:e4:c6:67:fc:44:8f:4d:4a:0a:a4:b1:73:3e:ef:3a:ef:9a:
92:0d:89:16:19:80:07:ce:cc:81:19:f9:4e:58:aa:7e:3b:4b:
dd:46:da:0e:b2:5c:0a:65:d0:f2:ed:3d:37:7c:21:70:17:ab:
7c:bf:9b:de:75:21:97:09:de:09:54:e1:db:b3:c0:42:c0:28:
93:09:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:00:16 2025 by rpki-client