Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E88A8F8F69B11EFB9F5ED80762E951A.roa
File: 3E88A8F8F69B11EFB9F5ED80762E951A.roa (raw, json)
Hash identifier: 5haU3x38UNyEuHLT4m6JYDC+E7fodp6T+2lpuemkyIo=
Subject key identifier: 85:9C:18:BE:CC:FA:83:2D:CE:D5:71:EA:CF:D8:58:A4:EE:26:0E:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E88A8F8F69B11EFB9F5ED80762E951A.roa
Signing time: Sat 01 Mar 2025 12:46:50 +0000
ROA not before: Sat 01 Mar 2025 12:46:46 +0000
ROA not after: Mon 31 Mar 2025 12:46:46 +0000
asID: 202656
IP address blocks: 154.219.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93778 (0x16e52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:46:46 2025 GMT
Not After : Mar 31 12:46:46 2025 GMT
Subject: CN=67c301ba-e46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:84:f5:20:41:f8:d0:80:54:2e:7d:84:5a:
a6:89:e1:87:a5:b0:59:e8:de:a4:4e:6b:47:6b:58:
4a:36:b4:44:de:99:7c:91:72:f0:e6:7a:ea:64:bd:
e0:ce:69:1b:34:77:5c:2b:99:9a:38:8e:b9:0c:f3:
41:d7:e4:80:01:21:35:55:2b:e0:b8:1f:34:7f:c2:
fb:99:1f:ae:f0:74:8f:60:10:6f:40:84:bc:5e:5c:
82:5d:c3:04:6e:73:41:19:e8:b8:92:1d:a3:f0:16:
b2:55:ad:5f:12:7c:fa:31:2d:5f:8a:16:26:11:bf:
9f:49:66:12:47:76:d2:87:d4:6e:5c:0a:29:73:6a:
d6:16:24:26:4c:a6:80:2a:a9:a8:5d:e1:cd:78:c2:
a8:cf:7d:de:9f:2d:18:2c:b0:7a:ce:44:82:68:bd:
db:76:00:0c:6d:fa:ff:4a:2e:96:b0:ea:cc:a2:72:
de:75:20:4f:53:2f:f0:8e:bd:3c:65:bf:c1:3e:a3:
b2:d0:b5:2a:a5:a5:d7:dd:6e:69:42:21:d2:b2:06:
d9:d5:f7:ea:9c:60:c2:be:bc:94:38:67:6f:3e:d4:
62:94:b0:9e:74:3b:7d:c3:da:b0:af:e2:2d:f3:a8:
ea:81:34:b4:42:81:6c:b8:69:a4:e7:2b:3e:60:c2:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:18:BE:CC:FA:83:2D:CE:D5:71:EA:CF:D8:58:A4:EE:26:0E:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E88A8F8F69B11EFB9F5ED80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:52:5b:a0:2a:b6:51:90:a4:a3:a6:48:65:e2:88:6d:5d:cc:
66:c4:ff:de:0e:68:6c:2e:9d:db:ed:a3:c8:97:9d:43:64:e6:
a2:10:9b:cf:a5:2a:5f:d4:05:e6:9c:2d:bd:1f:a7:f0:ce:57:
be:01:74:64:05:d3:d3:fb:70:f9:c1:49:b2:30:7f:00:80:2a:
bb:36:8f:d3:46:88:93:09:47:f0:a1:02:cd:91:4b:b4:da:7c:
7c:a8:a3:c5:e0:8e:38:c4:18:05:30:8d:72:e4:84:f2:29:e4:
89:d0:8d:85:0b:46:4a:ed:c4:ea:79:3b:a0:c6:91:24:ca:49:
da:80:77:72:7c:0d:53:fe:3e:dc:b7:24:3b:a5:1c:78:3b:91:
8a:b5:2b:b4:31:10:c5:9c:1c:ac:70:74:7a:2f:cb:71:86:6d:
a3:4b:8b:20:e2:01:56:94:ab:5d:46:f0:d3:60:e5:20:11:fe:
c2:4a:8f:2a:a5:b7:be:f4:7c:59:19:0d:c1:5e:ab:9c:61:eb:
1b:12:d9:7d:1c:78:ca:1e:f2:47:38:5b:cb:8c:9e:48:6d:05:
d3:a8:fa:fe:90:d9:68:ca:f5:d1:01:93:77:ae:00:2b:2c:55:
07:b0:20:dc:96:d9:e1:fe:1b:57:74:a0:3f:b1:00:51:a6:a8:
5e:3b:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:09:02 2025 by rpki-client