Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47996C9EF4F611EFBADC7FBA762E951A.roa
File: 47996C9EF4F611EFBADC7FBA762E951A.roa (raw, json)
Hash identifier: sh1xLcRH5CBLBF7eSQG4FPbJTaL06Bt09ZQ7fmmU3xI=
Subject key identifier: 9C:8F:41:6E:E8:E8:3D:3D:22:4A:67:BC:B2:AB:A0:99:90:57:6A:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0167C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47996C9EF4F611EFBADC7FBA762E951A.roa
Signing time: Thu 27 Feb 2025 10:33:27 +0000
ROA not before: Thu 27 Feb 2025 10:33:22 +0000
ROA not after: Wed 26 Mar 2025 10:33:22 +0000
asID: 62240
IP address blocks: 154.195.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92103 (0x167c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:33:22 2025 GMT
Not After : Mar 26 10:33:22 2025 GMT
Subject: CN=67c03f77-316e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:66:8b:c7:c3:87:cc:43:d6:ca:27:27:a4:
fc:d5:e6:70:51:69:5d:54:ba:11:cd:04:42:34:c8:
8b:b3:73:2f:e3:44:ce:6c:a0:ed:48:a2:b4:e8:81:
e9:c8:f6:23:27:63:00:34:37:15:37:30:8e:5a:5f:
1f:6e:8b:a5:d5:d5:5c:4f:81:15:91:a8:ae:b9:82:
07:12:5d:dc:61:7c:61:22:3a:b8:f9:b9:ef:04:3b:
cc:66:0a:ba:86:91:f6:47:87:c4:f2:51:d3:e6:58:
8c:31:14:61:2e:b5:94:4d:ea:79:e5:4a:6c:05:fd:
26:40:17:55:fe:85:ff:d8:dd:cb:a3:2d:bb:e2:92:
e9:9c:b3:57:4f:e0:5e:56:d3:34:6e:f0:7e:26:9a:
a1:a2:48:e2:59:a7:a0:50:cb:5b:b4:a3:3a:2d:c9:
63:9f:10:26:3e:9c:a3:a7:54:b3:03:cb:a7:d6:79:
5e:7d:6e:03:15:95:78:91:a7:09:4d:be:7a:bd:c1:
d7:cd:74:79:a9:b0:26:1f:84:aa:8a:cb:29:2a:4f:
98:97:2c:59:79:4c:fc:8c:c0:d9:22:9c:2d:e0:d4:
41:21:0b:98:bc:95:33:73:20:3b:47:66:df:c5:f3:
31:75:4b:4e:33:bf:95:5b:3f:65:58:b6:a8:80:f6:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8F:41:6E:E8:E8:3D:3D:22:4A:67:BC:B2:AB:A0:99:90:57:6A:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47996C9EF4F611EFBADC7FBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.125.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ef:c5:5d:e6:eb:be:1f:04:91:b9:ed:af:0a:8e:45:38:12:
93:45:41:44:34:c6:70:98:ac:e0:9b:44:45:b2:20:ea:be:e9:
e1:1c:a8:ea:11:fa:f9:d2:6a:83:aa:e3:77:c9:c2:59:9a:36:
da:00:28:c2:80:0a:b8:02:e5:49:db:64:82:84:2c:e6:a0:70:
aa:e3:72:ad:4e:2f:35:ce:4a:e4:d1:40:25:6f:1d:d3:1f:97:
9c:77:bf:2a:4e:12:c0:17:bd:bd:17:9f:0a:47:2c:02:71:b7:
36:91:1b:c7:7e:1f:04:a2:ee:3b:a6:d1:3f:06:e9:98:2c:ec:
e5:7b:0f:b1:03:80:d1:61:42:53:78:9b:d8:60:f1:25:c9:b9:
86:27:86:b2:ff:7e:30:60:92:d8:b3:ce:d7:95:4a:22:32:d9:
20:50:83:95:d8:d4:14:d7:7d:54:18:b8:55:24:4a:7e:00:be:
8a:99:df:95:d3:b8:9e:52:d1:6b:4c:a2:a0:b1:c8:e8:f4:b6:
51:ee:3a:6a:b6:c0:cf:e9:91:95:d5:a9:c0:55:7d:a7:8e:4d:
bd:7b:f6:41:a8:51:c6:a6:68:7a:1e:aa:ae:dd:01:f2:cd:ce:
4f:98:81:ac:8e:86:2d:d1:3e:3d:91:f1:5b:4c:9e:77:c0:d9:
63:86:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:28:19 2025 by rpki-client