Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38906D8A088111F099B61AB3762E951A.roa
File: 38906D8A088111F099B61AB3762E951A.roa (raw, json)
Hash identifier: iX+hxtE5MoGzDqP/nXVFqa50JEulYgiWq+elND1OYRY=
Subject key identifier: DE:B3:D0:20:AF:57:95:84:79:38:C4:5F:CF:46:3D:0E:20:EE:DF:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38906D8A088111F099B61AB3762E951A.roa
Signing time: Mon 24 Mar 2025 07:25:54 +0000
ROA not before: Mon 24 Mar 2025 07:25:51 +0000
ROA not after: Wed 02 Apr 2025 07:25:51 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95678 (0x175be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 07:25:51 2025 GMT
Not After : Apr 2 07:25:51 2025 GMT
Subject: CN=67e10902-fd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:d5:94:f8:aa:6a:1c:61:6c:c3:3a:92:d8:
f4:1c:bb:4d:cd:37:26:50:2f:18:10:db:a0:33:ad:
dd:ce:0a:21:da:f2:1d:4d:47:e4:91:24:85:5c:82:
ae:b4:16:84:b1:09:81:b6:6e:18:5d:ea:3e:9d:eb:
c2:4b:c4:57:4a:d0:ca:2f:d9:53:c8:8a:f7:78:fc:
5d:5f:09:b1:f8:e4:62:ed:63:12:b0:9e:6e:23:34:
43:37:e0:46:96:32:8c:6d:e4:12:db:9f:9e:c8:1f:
26:c0:d8:5c:88:31:ad:9d:83:03:be:bc:b5:fc:95:
6f:4f:2a:ba:76:98:5b:c1:f7:4d:20:7a:34:7d:9f:
65:25:aa:ef:7c:23:ed:f0:4b:88:40:a6:8d:f0:ec:
50:86:85:f0:9e:e0:4e:02:6a:05:6f:cc:9f:e5:bb:
a2:35:30:c3:b3:f8:a7:83:3b:f8:28:ee:ce:bd:1d:
22:a6:e3:ae:f6:50:41:f8:cb:f9:9a:dd:68:e6:69:
9f:43:33:cb:83:0d:c5:83:6f:62:45:47:1f:1f:86:
71:26:3d:90:5e:c5:5d:bd:85:97:39:69:58:26:7e:
bf:49:67:f5:31:ff:7c:31:f6:fa:6c:4d:46:f4:48:
a8:7d:38:31:5c:26:c0:07:5c:40:72:66:06:84:82:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B3:D0:20:AF:57:95:84:79:38:C4:5F:CF:46:3D:0E:20:EE:DF:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38906D8A088111F099B61AB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
79:d7:67:43:08:56:2f:b3:e4:31:27:3e:ca:d0:d0:8c:b7:9f:
3a:fb:48:76:14:66:3e:50:f6:2c:4c:f2:6d:bf:b5:89:65:7b:
ec:a7:f7:fc:05:c2:7d:45:b6:26:29:ac:3e:29:d0:f0:13:f7:
d8:6d:cd:99:f8:e2:7d:ee:ec:14:46:0a:ed:b0:d1:7b:7b:b8:
df:8e:71:60:6f:43:95:c5:5d:f9:a9:59:53:b8:1e:25:69:48:
7a:cd:b0:8e:bd:45:d4:51:f2:4c:ad:19:b2:bf:07:21:36:38:
7b:49:d5:46:24:97:2d:c2:02:19:06:a7:00:1e:37:25:68:3e:
40:f4:ec:27:59:fd:2c:14:a6:d6:18:d1:d0:2e:11:2c:45:86:
f3:ad:f8:e5:96:c8:90:62:f4:1c:3b:f5:43:39:a2:36:97:6e:
19:ce:5d:71:41:1f:ad:25:12:aa:2b:a7:8d:9b:7f:4e:e0:76:
27:d8:f8:c6:21:45:43:f2:e5:50:20:99:31:dd:fe:78:54:54:
14:0f:52:b3:0a:58:a7:73:46:d1:db:73:c0:5d:e4:0c:71:be:
ca:98:c6:63:d4:11:c1:67:ba:f5:a6:c7:89:19:28:3b:47:e3:
5c:09:c1:50:e9:41:92:c7:fa:63:6f:da:da:14:25:c2:86:ec:
6d:b9:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:01 2025 by rpki-client