Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43870136F67511EF92FAF67C762E951A.roa
File: 43870136F67511EF92FAF67C762E951A.roa (raw, json)
Hash identifier: jBK1H1Vq/eiYJp+5jKT+MZz/Mn7mcN4fSk2DECQcKDY=
Subject key identifier: 0D:3D:B7:68:6D:48:35:9D:DA:6F:FA:4A:59:67:3D:2D:3F:26:A0:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43870136F67511EF92FAF67C762E951A.roa
Signing time: Sat 01 Mar 2025 08:14:58 +0000
ROA not before: Sat 01 Mar 2025 08:14:54 +0000
ROA not after: Mon 31 Mar 2025 08:14:54 +0000
asID: 202656
IP address blocks: 154.219.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93510 (0x16d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 08:14:54 2025 GMT
Not After : Mar 31 08:14:54 2025 GMT
Subject: CN=67c2c202-c1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:e6:a1:18:a4:52:2e:9a:73:65:59:0f:11:
5b:90:9e:39:db:4f:5e:04:ea:78:37:d5:b1:d0:1a:
67:af:76:2c:a6:bf:e8:e2:0e:cb:df:d0:6b:3e:e6:
b7:45:b7:ee:6a:79:b3:69:f4:69:f9:b0:7e:0e:4e:
70:b9:30:97:3e:3c:bb:ae:24:2a:93:c2:dc:b3:70:
07:d7:0f:d8:54:46:1b:67:e5:4a:7b:74:5d:54:3e:
68:d4:0c:e4:05:90:f3:20:26:b4:95:d4:bd:50:1e:
c9:89:bb:06:25:58:90:fb:fd:d8:b5:3d:1e:e9:9f:
38:49:50:1e:8c:1f:cb:99:58:f0:f0:13:1b:77:b9:
79:4a:d8:93:66:e9:64:bf:5f:fb:91:aa:6a:b7:e3:
cc:57:38:0d:49:04:a1:cd:d7:3e:ec:42:f1:1d:fa:
08:b8:dc:df:44:fb:4f:54:a7:d5:55:2e:55:28:95:
92:bc:1d:a6:4b:ba:f9:ab:46:4f:21:d8:b5:56:9f:
60:75:1b:0d:bb:6c:b5:40:72:0c:22:6f:37:53:2b:
32:69:4d:da:de:c4:9c:bb:fa:54:56:4a:31:bb:bb:
45:9e:21:06:e5:f7:47:a6:e7:13:5d:ac:67:b0:86:
c7:93:5c:0c:ec:00:e0:a3:1d:e9:5c:17:c8:bf:d5:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3D:B7:68:6D:48:35:9D:DA:6F:FA:4A:59:67:3D:2D:3F:26:A0:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43870136F67511EF92FAF67C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.197.0/24
Signature Algorithm: sha256WithRSAEncryption
53:22:4e:33:27:52:c6:6a:98:26:73:5d:91:9a:a0:70:11:72:
6c:8e:c6:6e:b3:25:e5:99:7b:20:bb:15:4d:95:58:ac:ec:bd:
1e:34:73:69:e6:e6:1f:42:56:2b:5d:d1:28:0f:29:c6:e4:9d:
f0:04:f9:28:2f:5a:cc:86:d7:12:61:7a:f4:a9:73:81:7b:41:
13:6c:26:44:85:7d:dd:c9:ce:8f:bf:ca:4b:89:1e:3a:d0:1b:
7d:60:4e:d7:e1:84:40:ae:1e:1c:80:ea:d4:ef:41:a2:ab:cf:
98:49:70:a7:be:8e:21:30:64:38:b3:06:ac:e1:6e:0b:df:1e:
7d:19:03:73:3f:2a:ee:ac:54:7f:3d:f4:d2:0c:f3:22:d5:a8:
eb:7b:c4:f4:d4:54:96:d2:2b:5b:ec:25:53:58:5b:a9:83:e7:
13:c1:c5:66:bd:16:19:65:36:6c:05:61:9e:a8:5b:c3:bd:a8:
83:71:a1:d7:5c:f7:06:a8:2c:78:b5:08:fd:13:74:07:55:d1:
91:42:83:3d:55:d3:b0:c3:8d:62:58:2f:a9:5c:6e:5b:61:2c:
6a:e4:d1:40:22:60:7e:c7:ef:e8:09:58:da:91:3f:66:69:7c:
88:e8:10:cd:98:7b:55:b9:50:77:5a:64:5a:01:af:ba:bf:23:
59:f9:17:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:46:23 2025 by rpki-client