Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/441C1670F4D811EFA9E00E6E762E951A.roa
File: 441C1670F4D811EFA9E00E6E762E951A.roa (raw, json)
Hash identifier: s+I5yEfrpPEycih+90TIzczLIy2vroqf6AQhLccZ/hQ=
Subject key identifier: B0:95:77:65:3A:F0:17:3C:B9:91:51:8F:75:5D:E4:13:B7:47:B9:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016687
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/441C1670F4D811EFA9E00E6E762E951A.roa
Signing time: Thu 27 Feb 2025 06:58:36 +0000
ROA not before: Thu 27 Feb 2025 06:58:33 +0000
ROA not after: Fri 28 Mar 2025 06:58:33 +0000
asID: 214413
IP address blocks: 154.193.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91783 (0x16687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 06:58:33 2025 GMT
Not After : Mar 28 06:58:33 2025 GMT
Subject: CN=67c00d1c-5504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:06:e1:05:53:1e:21:08:32:c6:9a:66:2f:
78:d7:14:f5:2c:2e:94:4a:f9:8b:62:49:35:73:a4:
f4:50:be:05:e2:52:a7:ba:66:b3:a1:88:7b:d3:3a:
e9:a9:10:08:2a:7e:a4:bf:07:68:97:5b:ce:5a:9e:
7b:b4:de:a7:b6:9f:77:a1:0c:5e:ca:6a:ca:76:e1:
13:f1:2b:5a:5e:98:21:44:2d:25:1d:b7:56:fa:92:
47:fe:3a:00:5e:41:90:55:ec:a2:77:db:96:f4:2a:
65:f9:4e:3d:e7:36:f3:79:5b:8a:79:4e:25:7e:62:
ea:51:fb:07:00:a7:e2:98:f7:43:67:d4:f2:36:5c:
66:4f:21:48:21:9b:b9:d9:29:9f:5e:4b:98:08:ef:
42:bd:0b:75:00:d8:7d:16:a4:f7:3f:fd:e6:68:b6:
de:32:5b:49:00:25:b2:93:a6:80:5b:78:ab:72:06:
48:4e:6e:c1:8e:39:0e:de:f7:fe:84:74:b8:8b:a0:
3e:e3:82:02:87:95:13:91:1b:4a:1c:19:bb:3e:ca:
4d:36:f5:09:68:6f:03:14:f3:ec:ef:0b:ab:33:80:
95:40:8c:d4:65:c3:be:b0:ba:0a:35:c9:a1:2b:be:
9b:0d:67:5b:26:8a:f4:3c:74:78:4f:33:fc:8e:21:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:77:65:3A:F0:17:3C:B9:91:51:8F:75:5D:E4:13:B7:47:B9:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/441C1670F4D811EFA9E00E6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:e2:24:e2:71:f2:67:75:0a:08:6d:d8:d4:04:46:e1:e0:6b:
e8:92:ef:31:b5:b2:14:cc:b8:ab:7a:f5:6d:2f:92:b0:af:16:
30:96:a9:7a:b5:83:8d:ac:40:e8:84:a9:79:4d:22:9e:95:1c:
cc:d8:a8:e0:ee:41:c7:c6:52:30:04:23:72:12:e3:56:5f:46:
f2:55:77:be:9d:ab:56:84:6b:0d:f8:60:79:f7:a6:ff:e2:82:
67:1e:69:0f:0c:11:2e:ea:cf:ad:a1:d4:81:63:ae:5c:66:44:
b1:15:89:3f:83:52:79:c7:4f:ed:55:b6:c7:bc:7d:fa:a9:0f:
de:86:1c:d2:d1:1b:18:23:ca:56:9b:1e:69:70:af:7f:3b:2f:
81:2b:71:16:a6:83:3e:45:71:cc:8e:47:38:d7:c0:d2:43:80:
88:68:10:30:4f:a1:8e:7f:6a:e8:88:d4:50:40:61:f2:9a:fa:
f1:4c:d3:c5:d3:7c:19:b3:1b:d8:4d:60:4f:28:70:2c:d2:28:
0f:c2:ee:82:49:00:7c:31:da:b1:61:98:b3:00:2d:64:cd:60:
a7:a0:e9:7e:9f:41:9f:16:9b:94:84:f2:b2:3b:7d:b8:39:f5:
cf:fa:84:fb:64:4d:69:16:b9:d2:9e:83:2e:cd:d5:c0:ef:eb:
8f:84:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:10:06 2025 by rpki-client