Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC3718EEF7F11EF96F06654762E951A.roa
File: 4AC3718EEF7F11EF96F06654762E951A.roa (raw, json)
Hash identifier: y/AW6mtes//LVGLIdjy/Z7ZEO56hRsMg2/NhUR7hdag=
Subject key identifier: 46:5C:04:FA:AD:28:75:37:99:44:A4:DB:74:9C:BA:1A:97:0D:FC:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0158D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC3718EEF7F11EF96F06654762E951A.roa
Signing time: Thu 20 Feb 2025 11:39:07 +0000
ROA not before: Thu 20 Feb 2025 11:39:03 +0000
ROA not after: Thu 20 Mar 2025 11:39:03 +0000
asID: 54600
IP address blocks: 154.217.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88278 (0x158d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 11:39:03 2025 GMT
Not After : Mar 20 11:39:03 2025 GMT
Subject: CN=67b7145a-6717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:87:65:b0:20:24:1b:d6:41:9d:3c:98:b8:
1e:57:01:a7:a2:5a:48:30:7b:33:b5:3a:81:f9:7a:
13:9d:d1:8f:37:02:04:86:27:a3:ee:75:a0:34:e0:
83:24:91:28:f5:1b:5a:fa:46:64:d6:df:fd:88:6f:
89:3d:41:33:ca:a3:bb:f5:a4:ff:b3:a1:04:75:47:
95:8f:af:27:95:19:48:d5:7e:1b:77:ef:76:57:60:
f4:d4:0a:81:af:66:26:ed:c5:ee:17:b1:51:61:da:
97:80:e3:58:cb:05:21:59:31:d5:e3:73:7e:24:02:
25:08:b6:84:a9:02:26:ff:f3:98:db:95:c3:8c:48:
51:29:f4:78:bc:5a:5d:1c:6b:e4:b5:66:2a:20:0b:
59:59:e8:24:f6:90:92:93:27:44:87:72:9c:7e:04:
72:35:3f:83:bf:43:1c:f5:31:f1:59:ac:1e:8a:d0:
f1:33:ae:35:54:f2:97:e9:c6:60:3a:db:38:56:33:
2a:e4:0f:a8:19:9b:90:6b:e6:39:b9:74:a2:d6:fe:
cb:2a:3f:55:b8:1e:78:a0:84:31:15:f5:3e:f9:69:
4a:00:b6:93:fb:b5:a9:4c:a1:cc:fc:b1:4c:bb:b1:
96:f7:d5:2b:f9:ea:cd:ec:d0:cf:bc:5b:11:b9:35:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5C:04:FA:AD:28:75:37:99:44:A4:DB:74:9C:BA:1A:97:0D:FC:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC3718EEF7F11EF96F06654762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:a7:b6:bd:c4:9c:8d:d0:82:16:87:05:d9:c9:f8:1b:df:4f:
19:aa:a6:e4:7b:0b:e4:20:53:d9:c7:7b:69:58:7b:a5:81:19:
50:82:04:36:24:aa:55:b3:6d:cd:96:0c:7f:42:98:9c:b8:cc:
9d:84:e7:f0:92:5a:98:4f:f8:c0:a7:e9:bb:1f:e1:d8:eb:40:
cd:e8:ac:c4:02:a3:5e:9f:e8:60:5f:70:20:6c:91:d9:2d:1d:
12:83:c3:7b:3c:11:17:74:40:a6:ed:aa:fc:62:01:1d:0c:ec:
3a:ef:68:21:1b:7f:3b:de:91:29:21:68:dd:d0:d9:4b:2b:04:
81:e2:67:06:47:69:38:8c:49:ef:a2:40:9a:c6:cd:db:e8:ab:
39:e0:bf:ee:24:2c:7d:61:47:76:0d:ad:20:a7:6e:19:52:f3:
45:92:b8:52:8a:97:0a:bf:66:b0:16:0d:af:59:70:3b:36:52:
46:fe:2b:9f:e4:a7:aa:42:f4:2d:47:0f:2c:80:5c:66:f0:bf:
16:20:73:ad:a1:0b:34:a0:aa:94:4e:31:a5:fc:65:d9:45:c4:
ae:13:27:ff:2d:80:aa:f8:3b:32:d0:64:72:5b:cb:cc:fe:25:
45:0e:aa:a6:10:39:f1:0b:f3:4f:fe:ce:46:b7:4f:a7:39:8e:
46:c6:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:40:02 2025 by rpki-client