Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/444556CCF69811EFAE47F26A762E951A.roa
File: 444556CCF69811EFAE47F26A762E951A.roa (raw, json)
Hash identifier: 5Kbqvjc0JxaKFsvABQ8OqfE7A90iSHeKUgW+szVj+68=
Subject key identifier: BD:6B:F4:7E:8B:C2:E2:F7:FF:73:4E:EB:28:8B:C6:3E:6B:7F:AD:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/444556CCF69811EFAE47F26A762E951A.roa
Signing time: Sat 01 Mar 2025 12:25:31 +0000
ROA not before: Sat 01 Mar 2025 12:25:28 +0000
ROA not after: Mon 31 Mar 2025 12:25:28 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93756 (0x16e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:25:28 2025 GMT
Not After : Mar 31 12:25:28 2025 GMT
Subject: CN=67c2fcbb-91c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:14:44:8d:3b:cf:ad:50:37:fc:7e:0f:1f:
01:61:c1:18:77:4e:1e:6e:26:fa:45:af:08:1e:a2:
f8:7c:1b:80:de:59:d9:d6:14:0d:f3:0d:23:46:fe:
0b:4f:00:72:94:da:98:d9:73:d3:12:48:00:0b:c4:
8f:73:8b:b6:ab:09:59:53:85:fb:1f:e8:9d:d1:e1:
4e:97:c9:9e:69:22:6b:41:7c:66:6a:c0:3e:41:10:
3e:df:ad:72:37:ae:10:93:d8:a9:ee:bd:06:d2:2f:
0f:2b:8f:e1:34:dd:f4:56:13:01:67:f7:ba:18:c5:
d6:49:e1:b5:0d:1d:79:f5:c1:d0:8e:df:68:20:06:
fc:4f:66:cb:69:ad:d8:10:a1:9a:a5:f5:e0:6d:4a:
b0:d7:21:da:18:50:8b:29:7c:23:1c:96:ba:d8:82:
0b:18:92:88:5d:4e:0c:d9:a5:a3:1e:79:d1:87:9b:
0c:34:9e:ba:77:d1:07:08:08:b2:0e:aa:53:16:c0:
e1:f2:22:4a:74:10:4c:47:1d:70:98:da:d0:85:43:
3e:f4:9c:99:0f:45:51:08:f0:3f:7d:0d:2a:65:f8:
41:2c:b4:29:1e:63:8f:7b:58:46:95:72:49:68:a0:
ae:f5:22:3e:45:3a:be:33:05:36:ef:c3:65:a4:3c:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:F4:7E:8B:C2:E2:F7:FF:73:4E:EB:28:8B:C6:3E:6B:7F:AD:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/444556CCF69811EFAE47F26A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:01:d7:ba:f8:99:24:31:48:9e:8b:7e:b5:12:41:2e:b9:7d:
c1:97:1a:2d:0c:86:2c:5d:3b:f4:4f:d3:e9:5a:90:90:9a:8f:
c8:be:d5:93:4b:a4:52:7f:11:b3:6c:c6:c2:9c:67:35:dc:de:
c9:2e:e1:3c:fa:c1:7d:7a:a1:f7:40:01:29:e5:03:29:81:ca:
d8:cd:71:a7:f0:88:e0:31:cf:47:a3:ed:94:a0:a8:65:ba:19:
22:50:8a:5d:c9:3a:b9:29:66:37:b8:e7:63:07:b3:5f:b8:48:
6b:80:e0:d5:ae:41:21:89:11:8a:84:ff:2f:c6:2b:48:e5:13:
5a:74:6e:3a:2b:6a:41:d9:fb:34:2e:86:08:9b:1e:bc:2c:1e:
3e:fb:f1:0e:12:11:e6:22:32:53:9c:fb:b2:13:75:a6:c7:40:
2b:f2:1d:83:1e:d2:6b:e0:e8:28:92:25:42:b0:4c:6a:5c:36:
b9:10:3a:3b:23:e2:0d:4e:f4:b9:b0:dc:df:1d:09:1c:ab:a1:
02:33:bd:d3:8e:1c:c0:4c:7d:71:08:10:5c:47:ca:19:40:f2:
c3:bd:c7:bd:22:bf:fc:60:8b:32:44:36:a0:38:a9:df:5f:34:
4e:22:5f:3d:7f:79:64:47:60:87:43:e1:fc:05:6f:77:ce:8c:
a4:0a:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:52:31 2025 by rpki-client