Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B7916E0F2CA11EF9B834848762E951A.roa
File: 3B7916E0F2CA11EF9B834848762E951A.roa (raw, json)
Hash identifier: mR8SizOSuK8BS/z9yYUO76/iNwjm38Vwph9OQWm9hdc=
Subject key identifier: 87:21:A5:B1:91:9E:DF:71:29:B4:BA:D4:0F:19:DF:DC:7C:1C:32:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B7916E0F2CA11EF9B834848762E951A.roa
Signing time: Mon 24 Feb 2025 16:13:07 +0000
ROA not before: Mon 24 Feb 2025 16:13:03 +0000
ROA not after: Thu 27 Mar 2025 16:13:03 +0000
asID: 395793
IP address blocks: 154.82.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89180 (0x15c5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 16:13:03 2025 GMT
Not After : Mar 27 16:13:03 2025 GMT
Subject: CN=67bc9a93-582b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:78:11:93:89:4f:f8:07:56:81:d7:08:44:
aa:94:99:aa:56:31:d1:b4:4d:c1:cb:0c:0b:43:6c:
26:03:5d:be:e7:83:3c:c6:28:f4:b5:bd:c9:3f:a6:
9c:e1:e1:0e:ef:8c:16:f8:3c:e5:4a:01:f1:93:4f:
5f:47:da:45:41:7e:df:ce:ab:3f:b5:0a:fe:fc:1d:
65:d3:5a:58:bc:2e:68:90:e5:de:5f:5e:8c:43:59:
0a:b8:b2:c8:9a:82:6f:f6:d8:cb:13:0e:fe:d8:fe:
5c:75:95:bc:d4:2e:c0:73:af:00:61:44:98:3e:5c:
32:09:4e:61:7f:ac:48:16:f6:f6:45:a6:18:bf:bb:
70:48:77:65:93:ba:f9:1b:89:ce:be:82:5e:1f:9b:
1b:6b:ce:04:7d:71:e1:f8:ee:24:8c:54:c9:cf:cf:
ad:1c:29:a3:f4:a7:17:95:f3:af:c5:c3:67:f0:b3:
f9:53:85:8e:4e:8e:5f:b8:c0:ce:99:82:31:22:b7:
65:3f:4b:b4:ea:20:87:24:cb:57:f0:62:30:7c:d2:
64:a0:a2:17:5e:b1:d1:08:45:42:cf:93:54:60:76:
4f:fe:4e:64:7f:02:00:d6:5a:a5:ba:a1:20:47:1b:
e4:b3:3f:b3:aa:46:12:e6:bf:92:f9:40:bb:d5:72:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:21:A5:B1:91:9E:DF:71:29:B4:BA:D4:0F:19:DF:DC:7C:1C:32:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B7916E0F2CA11EF9B834848762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.164.0/22
Signature Algorithm: sha256WithRSAEncryption
16:d6:04:6c:3e:9c:41:1f:bd:47:92:52:f5:49:0b:13:7c:cf:
65:99:29:21:a6:ab:60:f5:aa:64:a1:a6:e0:e0:00:b3:cb:90:
d1:d0:02:a0:0d:56:dc:cf:74:97:0d:cb:4b:0d:54:93:9b:ca:
ed:7c:93:6c:df:51:a3:78:7a:e8:7f:89:70:e6:f4:18:2b:d4:
87:45:53:43:19:07:e0:a5:c5:aa:da:05:63:cc:7c:54:58:d5:
7b:53:c0:3d:e8:9d:c2:1c:ae:0c:86:e9:48:38:38:5d:6e:ab:
6d:12:61:c2:be:fd:04:e5:7c:62:cb:9c:3a:9f:62:6a:45:c8:
38:e1:56:88:e1:ea:a0:0a:99:a7:fb:ad:3b:0e:b5:3f:f7:3b:
e7:34:76:4d:03:80:6e:2c:15:13:9b:36:7a:30:8b:f2:c0:1a:
11:5e:75:cb:52:e1:15:77:3b:82:a7:e7:eb:6c:d0:ac:21:6b:
d3:13:1a:7e:0e:c9:7f:ed:25:0f:f5:34:25:94:7b:b4:6c:a6:
3c:f6:ba:c8:aa:b8:ad:17:49:78:fa:3a:9a:d4:d8:10:6d:04:
cf:a5:1f:de:5c:8d:b5:a2:d3:fc:a6:05:e1:6b:0e:3a:5e:04:
5a:36:2b:ae:ba:65:bb:f5:a8:88:a3:21:6a:a6:e5:68:50:8f:
cb:29:f3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:22:26 2025 by rpki-client