Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DD3CFDEF4F011EF854EFA8F762E951A.roa
File: 3DD3CFDEF4F011EF854EFA8F762E951A.roa (raw, json)
Hash identifier: wk2G22BnF6OYrBtc8hndNj/MqSzAqtx/64s9vnK/KLg=
Subject key identifier: 57:38:33:12:85:E5:C0:6E:EE:EB:24:EC:A6:1D:AF:7C:57:B2:03:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016764
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DD3CFDEF4F011EF854EFA8F762E951A.roa
Signing time: Thu 27 Feb 2025 09:50:14 +0000
ROA not before: Thu 27 Feb 2025 09:50:08 +0000
ROA not after: Wed 26 Mar 2025 09:50:08 +0000
asID: 62240
IP address blocks: 154.195.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92004 (0x16764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:50:08 2025 GMT
Not After : Mar 26 09:50:08 2025 GMT
Subject: CN=67c03556-3522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:fc:5b:58:2b:e1:54:a4:0e:dd:be:5a:dd:
69:90:d4:f2:97:7c:cf:74:48:42:0f:8e:dd:4b:f2:
58:89:2a:aa:f6:3d:2f:1c:8a:38:d4:18:b0:d3:dd:
d9:33:20:d2:2c:44:fa:c1:c4:4c:95:7c:87:3d:2b:
61:d0:60:59:59:8a:d8:ef:eb:b7:f8:51:cd:45:a5:
a7:f6:f7:d4:97:fb:a9:42:6f:06:74:ed:f2:01:d5:
30:81:02:a5:67:f9:15:43:bc:c4:7b:da:46:45:1d:
1a:41:e6:94:2a:5c:2b:52:68:90:c0:54:08:6c:80:
ba:a4:79:47:52:8b:31:b4:3a:d5:4e:ad:d4:a1:aa:
68:dd:9b:4f:77:de:00:0a:fb:c0:e0:49:30:94:ea:
6f:af:ab:51:e9:2e:fe:56:a1:d4:91:59:ed:e5:db:
3c:1c:da:2b:f2:6a:f9:47:94:58:a0:39:16:b1:5b:
63:6b:ac:28:4e:ba:a3:44:49:aa:39:03:e8:7a:43:
c2:28:5c:29:94:e5:77:14:55:15:ff:65:6b:4f:92:
77:81:34:fe:73:c2:5c:61:48:ef:08:3a:9f:11:e0:
31:27:82:6a:3a:ea:16:cf:cd:75:77:f4:c3:a5:a5:
70:ff:78:3b:42:89:0e:55:eb:b8:26:58:6b:f2:8b:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:38:33:12:85:E5:C0:6E:EE:EB:24:EC:A6:1D:AF:7C:57:B2:03:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DD3CFDEF4F011EF854EFA8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.102.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:66:83:a9:48:8f:a7:67:04:08:c5:03:41:ed:f0:1f:11:0b:
e5:3d:88:1b:bd:9d:89:d4:45:f9:ad:11:a5:80:61:26:cf:de:
cb:38:91:3c:66:b6:e3:b8:2a:53:fd:a0:77:29:7f:21:0f:6b:
a9:50:f1:55:78:73:25:85:31:eb:72:d9:64:b9:d4:df:39:b6:
a4:f7:a1:73:be:7d:fd:1f:8f:8d:7a:af:bd:53:41:fa:af:7f:
22:f2:b6:c0:a1:9f:42:2d:d1:fc:32:44:4d:75:ba:ba:96:cb:
fb:b3:73:9b:28:ce:1e:a6:4a:c4:e6:9e:63:7a:9e:76:01:8e:
07:41:36:79:e2:cb:0b:d7:b4:b0:80:0a:7d:1a:b9:62:36:fa:
2c:6b:d2:1c:7a:6c:fd:9d:ea:b8:00:f0:6a:32:4d:ac:3f:da:
44:3b:ca:4c:69:80:3f:d7:cd:1f:a7:64:d8:4b:c6:3b:f7:5a:
cf:50:40:55:dc:eb:85:0a:5e:09:6f:b1:d5:94:4a:54:2f:50:
27:e9:da:24:2a:03:ca:d4:e7:cf:18:96:d4:7e:da:00:09:57:
be:e0:04:2a:81:d8:42:01:92:8a:62:26:31:98:ca:37:53:8b:
47:d9:0e:0b:21:4e:bd:39:43:f2:30:e1:56:f0:38:b2:3e:f7:
14:06:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:12:29 2025 by rpki-client