Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37BA2CB6F4D611EFA4ED4460762E951A.roa
File: 37BA2CB6F4D611EFA4ED4460762E951A.roa (raw, json)
Hash identifier: iq4DLZg9xPVspSImpGCHFNqLXn4nxMTqP+a06InO/hY=
Subject key identifier: A5:F5:DC:DB:5E:9E:54:28:E1:E9:8A:9B:FC:DC:49:00:04:65:B3:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016677
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37BA2CB6F4D611EFA4ED4460762E951A.roa
Signing time: Thu 27 Feb 2025 06:43:57 +0000
ROA not before: Thu 27 Feb 2025 06:43:53 +0000
ROA not after: Wed 26 Mar 2025 06:43:53 +0000
asID: 62240
IP address blocks: 154.195.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91767 (0x16677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 06:43:53 2025 GMT
Not After : Mar 26 06:43:53 2025 GMT
Subject: CN=67c009ad-bf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:c2:df:2c:2d:06:ee:f5:40:03:5a:3a:f1:
3c:75:c8:10:43:84:9b:aa:5b:fa:1b:ba:e8:d8:46:
54:de:30:a5:8a:b8:29:2e:3c:b2:45:dc:56:22:17:
d8:c6:64:05:24:83:b8:3d:d3:ba:7d:4c:13:27:62:
2a:3a:00:b8:61:0f:49:29:94:7a:80:39:c5:82:3c:
20:72:88:31:1d:4b:a4:0e:fa:21:6b:f8:8a:99:78:
95:a9:76:18:a3:68:d0:85:80:88:a8:3c:37:6b:6e:
90:18:84:cb:4c:28:42:2c:3d:63:0c:6f:93:bc:27:
58:9a:51:85:2e:73:36:ea:90:8b:65:f6:f7:0a:10:
88:ce:53:da:d6:b4:20:79:77:a9:19:e4:20:e4:d5:
04:9d:c2:4d:32:96:21:27:33:df:d4:46:a4:2e:e2:
ea:8c:59:20:82:76:82:54:e9:42:cb:0b:f5:96:73:
5c:b9:6d:30:e0:71:f0:18:f9:e0:3f:fc:4e:90:94:
08:8b:d2:c0:c6:5e:0e:5a:8f:94:d3:38:c3:3e:97:
f2:2d:f9:44:d1:48:97:a0:1d:12:d9:32:37:12:6d:
8e:4c:ed:12:41:c5:9b:5f:af:b7:d0:44:00:80:66:
90:21:dc:84:71:cc:53:76:f8:fd:21:85:8e:01:f4:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F5:DC:DB:5E:9E:54:28:E1:E9:8A:9B:FC:DC:49:00:04:65:B3:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37BA2CB6F4D611EFA4ED4460762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.153.0/24
Signature Algorithm: sha256WithRSAEncryption
32:97:7b:3c:4c:93:7d:4e:13:85:c5:45:6d:91:1e:be:4e:21:
1e:2f:86:69:d7:56:e4:0d:c1:5d:4f:ee:9b:8e:b0:e9:ef:75:
a2:4c:75:b1:14:8c:f3:f4:c2:23:32:5d:71:10:14:b7:5b:57:
0a:4f:fa:16:d1:e1:71:0b:00:ef:0e:c4:6c:aa:df:d8:0e:e1:
05:64:fb:f4:4d:3c:27:78:fc:7f:97:6b:ed:2d:8f:27:d6:a1:
d9:71:7f:4d:70:9f:e9:7c:6b:32:d7:69:55:ae:27:4a:5c:15:
38:16:1d:bb:b3:db:da:fa:71:4e:52:d1:12:24:66:8b:be:b3:
88:17:4a:44:4d:0a:5a:7c:9a:58:0a:3c:90:26:b1:8a:0c:0b:
45:d5:d7:de:e3:dd:ab:92:83:23:b8:fd:44:35:bb:81:b8:32:
df:54:00:d9:8e:d2:35:d6:32:95:a5:62:17:e9:d5:5e:ad:9f:
99:15:db:a3:96:b3:26:09:df:83:c5:5b:c7:b1:3c:cd:c9:f0:
8e:07:97:3d:6e:ab:58:13:45:42:9c:b6:d0:02:b7:94:b6:79:
3a:ec:e0:8d:ae:5c:10:8f:ee:74:bf:dd:b7:ad:5a:21:7c:a6:
04:94:2c:de:48:d7:f6:ba:1d:34:3a:fb:25:77:f5:5a:39:c8:
2d:3c:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:40:29 2025 by rpki-client