Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4330AE62F59E11EFBF72FDB9762E951A.roa
File: 4330AE62F59E11EFBF72FDB9762E951A.roa (raw, json)
Hash identifier: zMMxAoMEf4NAkw/47ui1nebRav0F8/xN6Z8VEDih6V4=
Subject key identifier: 13:89:D5:E6:FB:C1:51:54:0E:FF:B8:C1:6F:32:87:DC:F5:A1:B4:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4330AE62F59E11EFBF72FDB9762E951A.roa
Signing time: Fri 28 Feb 2025 06:35:55 +0000
ROA not before: Fri 28 Feb 2025 06:35:51 +0000
ROA not after: Wed 26 Mar 2025 06:35:51 +0000
asID: 62240
IP address blocks: 154.194.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92617 (0x169c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 06:35:51 2025 GMT
Not After : Mar 26 06:35:51 2025 GMT
Subject: CN=67c1594b-57fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:7a:60:d7:9a:b2:29:8d:85:99:45:c4:04:
02:15:84:ed:49:51:bd:f4:e0:25:b8:a2:76:32:a5:
bc:23:38:bf:50:f5:7b:cc:fd:56:ec:04:c2:80:e1:
be:f5:b6:90:d5:3c:e5:36:0a:0a:1c:d8:11:d3:61:
37:19:af:96:d1:df:12:50:6d:23:d2:e2:e2:a0:ce:
bc:6f:48:05:f3:9f:73:03:a9:4f:db:a6:56:16:15:
e1:2c:5f:ca:4e:90:a0:88:98:60:e9:c4:97:3d:74:
69:48:0e:22:9f:87:31:e3:cb:c8:d6:eb:68:f7:b5:
d6:0e:aa:45:80:d1:06:be:84:0a:d6:3a:de:8f:99:
ff:72:50:3d:f8:18:52:fe:c2:48:76:10:21:4b:00:
4a:4b:e7:ee:ee:b5:cb:b3:1c:69:75:e2:c2:70:15:
be:bc:ed:98:9b:93:b8:0a:d3:c1:43:ac:b5:d0:49:
c7:f6:88:e1:3c:ef:3f:0c:e1:dc:5b:31:26:c3:90:
79:f8:2f:dd:7b:bc:9b:c0:c6:36:6e:fd:a0:77:aa:
d7:be:87:bf:cf:2e:48:9d:b8:1e:14:5a:5b:25:16:
f0:d1:02:db:c2:63:2d:b0:27:13:20:ae:e5:fe:40:
bd:b3:54:95:dc:0d:63:4a:73:60:4c:0f:64:34:20:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:89:D5:E6:FB:C1:51:54:0E:FF:B8:C1:6F:32:87:DC:F5:A1:B4:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4330AE62F59E11EFBF72FDB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.82.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0d:a2:bf:90:30:6b:e7:af:db:64:03:05:37:99:fc:c7:ad:
aa:86:f9:5f:6d:01:48:85:05:a1:8b:85:29:1a:f2:b1:06:2b:
bd:05:47:24:a4:2c:77:61:a2:d1:2d:ef:f7:88:8c:c9:89:9a:
a2:d4:18:37:d7:33:1d:64:f8:24:1e:0b:53:c6:17:d1:26:8e:
05:49:69:89:c8:ea:25:d6:cb:23:91:72:7a:74:ca:48:47:3d:
03:3e:2c:41:15:30:df:80:d9:16:e8:fc:9f:d8:dc:ff:fe:1c:
15:4b:6c:86:25:88:8b:bd:11:de:1d:60:6c:e5:16:3b:1e:88:
57:82:b4:c8:1a:c0:9c:d5:e1:0c:f4:eb:f7:b4:c5:bb:db:3a:
29:27:9c:e4:b8:aa:77:6f:81:89:72:e6:7c:de:88:50:4d:9a:
e2:af:8e:c0:93:b9:45:1a:b4:cb:d4:d3:14:eb:70:2d:82:f0:
c1:84:69:c2:03:9e:62:9a:02:63:18:c3:2b:30:f8:eb:71:5d:
7f:de:30:73:83:7e:29:60:4f:e8:18:6b:1d:81:87:ab:c7:bd:
27:24:ca:e6:68:bd:01:b1:9f:b6:36:ae:5f:f8:22:aa:8a:17:
7b:5c:e8:37:9a:3c:4d:00:44:39:1c:4c:5c:ff:10:3f:02:63:
39:1b:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:43:42 2025 by rpki-client