Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D25DCF2F67711EF8E29EC8A762E951A.roa
File: 3D25DCF2F67711EF8E29EC8A762E951A.roa (raw, json)
Hash identifier: QbyNNBUcjyPbXKZkk8iNSLhgIkMeq5miGk7uIYjxTME=
Subject key identifier: 44:92:3D:3B:E4:65:75:52:C5:24:BE:9D:8C:14:D1:A9:CE:E8:6A:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D25DCF2F67711EF8E29EC8A762E951A.roa
Signing time: Sat 01 Mar 2025 08:29:06 +0000
ROA not before: Sat 01 Mar 2025 08:29:02 +0000
ROA not after: Mon 31 Mar 2025 08:29:02 +0000
asID: 202656
IP address blocks: 154.219.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93532 (0x16d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 08:29:02 2025 GMT
Not After : Mar 31 08:29:02 2025 GMT
Subject: CN=67c2c552-ba1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:37:b0:35:bf:e3:b4:ce:46:c3:1f:42:f7:
ed:50:b9:d1:32:94:11:5e:b5:2f:77:0a:1d:9c:42:
65:6a:d1:65:56:ce:5f:97:a8:68:3e:f4:1f:bd:81:
35:c2:3b:81:66:f9:08:ae:5d:ea:8e:a7:db:4c:aa:
34:68:35:78:7c:e5:f5:3d:55:9f:ac:8f:3e:97:ac:
86:78:e8:9e:6f:2e:48:b7:8d:49:bb:eb:0f:f3:70:
88:79:a0:ad:29:5f:6b:41:a1:2e:c1:e1:1b:c2:07:
47:60:6b:cd:ad:43:38:9e:d0:ab:25:9b:a9:9a:6a:
23:de:8c:1e:e5:7b:f1:34:49:cf:ae:6f:51:31:1f:
3b:13:e7:e1:26:04:17:61:9b:fd:32:41:15:45:75:
fa:8e:f6:26:89:47:ff:9e:74:e4:35:2e:dd:a7:a9:
fe:ca:9c:92:9a:85:98:ef:cb:07:d6:89:f6:bf:1a:
96:98:64:1f:4c:ec:ff:bb:39:9a:93:64:28:72:21:
49:45:ea:52:be:1b:9e:20:13:52:a1:eb:e4:16:bc:
29:5b:f4:2d:91:41:95:8f:55:37:e7:3e:a5:e7:e6:
0c:96:5e:6b:01:ea:bf:43:7b:80:24:41:6b:49:3f:
4f:44:a5:c0:2f:e8:d1:20:f7:ab:54:77:ae:72:58:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:92:3D:3B:E4:65:75:52:C5:24:BE:9D:8C:14:D1:A9:CE:E8:6A:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D25DCF2F67711EF8E29EC8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a6:98:f6:4e:94:77:f6:86:fa:22:a4:e5:b9:5b:7b:d6:0b:
de:66:91:6f:59:cc:f1:de:43:9e:d1:55:2b:65:75:64:fd:9f:
65:9a:8c:8a:49:25:58:8b:02:1a:cc:b0:bf:2e:31:f9:3f:e9:
cb:77:b3:99:71:11:1d:55:8a:80:80:f6:55:6e:be:64:f5:d7:
9b:93:25:96:4b:db:c8:0d:a9:4b:cf:32:ed:ec:d5:5f:89:37:
1f:b7:a5:8d:a7:78:c3:85:8c:10:20:03:c7:0b:fb:c9:3b:5f:
02:e8:29:a5:a1:c3:7f:cd:77:f3:38:e6:16:10:18:c8:a9:c4:
b7:21:7d:3b:ab:c9:c4:82:00:97:b2:f3:23:4d:c5:c0:87:03:
bc:ee:3e:7d:fb:c0:be:d4:68:3e:79:29:3c:a5:02:4a:6c:7c:
00:1e:b7:21:00:5f:fb:de:25:9d:81:e8:9d:3a:ab:7f:53:23:
3a:8b:02:aa:55:45:1e:04:4b:ef:fc:38:63:e2:13:17:f9:2b:
23:2a:43:cc:4a:34:72:99:67:3c:14:07:8d:c3:db:34:b3:3b:
65:5f:75:6c:48:bd:6e:ed:28:40:1b:63:48:1d:0a:d2:f1:3f:
5a:70:33:f2:e8:73:c0:80:00:6f:9e:7a:1c:3b:46:92:98:20:
ad:8c:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:12:59 2025 by rpki-client