Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE45176F6AE11EFA722117F762E951A.roa
File: 3FE45176F6AE11EFA722117F762E951A.roa (raw, json)
Hash identifier: yQzwxGVLFT6noTVxV1j+R7xQfXjN//jK6QlblseHplU=
Subject key identifier: B5:88:91:08:30:DA:C6:98:4D:DF:91:77:76:E5:F3:4B:1B:84:46:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE45176F6AE11EFA722117F762E951A.roa
Signing time: Sat 01 Mar 2025 15:02:53 +0000
ROA not before: Sat 01 Mar 2025 15:02:49 +0000
ROA not after: Mon 31 Mar 2025 15:02:49 +0000
asID: 202656
IP address blocks: 154.221.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93832 (0x16e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 15:02:49 2025 GMT
Not After : Mar 31 15:02:49 2025 GMT
Subject: CN=67c3219d-746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:9c:2e:04:ec:b9:d9:37:81:36:3c:14:87:
1c:a4:c6:1f:30:bb:68:6d:84:8e:02:25:6f:0d:c7:
69:07:10:b3:e1:64:cb:95:68:f2:4b:d9:cd:7a:91:
f1:c6:f0:58:bc:e7:6d:b8:d8:a3:59:48:5d:18:a5:
e1:f7:40:3b:79:17:e4:32:c0:d1:68:0f:28:35:f5:
31:5a:b2:bf:8e:01:ca:d9:53:43:e4:13:9b:3c:61:
ec:68:7f:ba:71:db:3e:25:66:be:e2:2e:3f:1b:a6:
39:fa:05:66:6d:8c:13:07:fd:2a:0e:8a:c1:cc:65:
89:87:c0:36:c8:6c:ac:cf:a2:1a:af:4b:ff:70:6e:
ce:8a:55:76:2c:3f:7a:c3:1f:88:18:33:81:93:a1:
72:49:b2:cb:2d:93:e8:00:09:59:86:76:ec:f0:d2:
bd:1e:63:ae:f8:1f:72:cf:f7:9e:46:23:05:aa:2b:
a1:f8:b6:95:e9:fd:8a:25:9e:9e:8a:9a:1e:65:f9:
b5:cc:88:ca:0a:75:c2:6d:4f:c6:d7:24:fb:62:d7:
a2:e3:b0:f6:be:47:38:c4:11:53:47:c4:96:bb:7c:
63:a8:4f:39:f8:d6:de:41:6d:97:36:ee:33:77:b3:
3c:d9:32:cc:bc:de:02:ff:f3:fc:f9:46:5e:54:38:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:91:08:30:DA:C6:98:4D:DF:91:77:76:E5:F3:4B:1B:84:46:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE45176F6AE11EFA722117F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.52.0/24
Signature Algorithm: sha256WithRSAEncryption
40:10:00:ee:eb:dc:8c:dd:65:c0:6f:bf:c6:53:43:4c:51:e0:
74:16:4e:de:cf:3a:30:d4:38:09:8c:d5:ef:9f:22:fa:95:0d:
d8:85:b0:dd:01:6c:7d:9e:bd:a5:38:f1:60:79:59:65:78:94:
f3:6c:f3:31:f2:2f:a8:bb:22:9d:cc:ef:49:b6:bc:83:ed:e8:
ed:a9:b0:7f:6c:ce:09:dc:cf:af:9d:2d:5e:e4:4b:1f:7b:33:
58:c0:27:c3:12:08:62:ae:b8:24:33:dd:0c:50:3d:94:7d:89:
38:fa:8e:87:70:2f:bf:ae:20:8d:7d:0f:d4:00:b1:91:4c:eb:
f2:35:ca:7b:9d:78:ac:78:84:df:07:16:6b:2c:9d:f5:bf:c2:
df:2c:5d:d0:d6:87:b4:3b:a9:95:2d:20:da:38:c0:0f:e4:cc:
d1:71:8e:bb:25:93:89:ce:50:34:36:9e:40:b9:97:ac:b0:46:
5d:05:8e:16:71:14:90:68:77:f0:ae:c7:3d:71:7a:1d:87:88:
99:54:16:53:a8:68:66:f1:d5:7a:09:54:46:cd:4b:12:e6:b4:
44:a5:ca:78:47:f6:8a:72:02:f5:22:3d:d1:1c:56:d1:ac:75:
e5:4b:51:81:75:a1:b7:bb:28:bf:fa:61:ff:7c:76:f2:6e:63:
b9:eb:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:49:55 2025 by rpki-client