Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC4E4FCF6C211EF8CC2C583762E951A.roa
File: 4AC4E4FCF6C211EF8CC2C583762E951A.roa (raw, json)
Hash identifier: Ib7W+udo85KDB0tXN3BXmlCIXjLfH+SeaR7wePzZHQ4=
Subject key identifier: EC:5E:1C:49:FA:09:AE:23:1A:A8:DC:D8:D1:C2:83:E6:04:57:17:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC4E4FCF6C211EF8CC2C583762E951A.roa
Signing time: Sat 01 Mar 2025 17:26:21 +0000
ROA not before: Sat 01 Mar 2025 17:26:17 +0000
ROA not after: Mon 31 Mar 2025 17:26:17 +0000
asID: 202656
IP address blocks: 154.219.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93997 (0x16f2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 17:26:17 2025 GMT
Not After : Mar 31 17:26:17 2025 GMT
Subject: CN=67c3433d-b2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:31:9c:fd:c5:38:3e:ef:cc:32:44:fa:5e:5c:
79:ba:a6:e2:60:6e:6d:76:1d:ba:51:af:c3:dc:c5:
0c:eb:ae:b1:40:06:d4:42:e1:f6:db:bc:f3:b5:26:
9d:2e:c7:04:fe:43:fd:f7:7c:8b:0b:e9:1c:fe:a3:
5c:d2:26:be:be:48:de:b9:a1:81:0c:91:96:b3:a7:
e6:ed:70:f4:aa:d7:07:9e:9a:3a:d6:b5:bd:59:d4:
21:d0:d4:a5:3e:59:ba:d4:69:1e:4e:ed:b0:7c:20:
bc:36:d2:b0:91:ea:7a:d0:89:68:c5:2e:b7:9f:4a:
f1:9e:78:2c:71:08:2f:38:09:9a:39:5d:61:ab:a1:
56:39:84:82:38:04:19:62:de:b0:e5:a0:88:b6:af:
c0:e9:08:84:fb:8a:c0:78:ee:45:6e:42:78:53:43:
ec:f1:19:6e:43:ee:7b:a8:16:99:d9:15:83:f2:73:
ef:53:59:c5:da:ef:c5:2d:51:32:24:4c:a7:cc:d8:
89:aa:45:d3:c2:62:a6:7b:fe:26:d6:94:5a:d7:95:
2b:a6:fc:11:42:65:5c:cf:c2:64:ea:b7:fd:2a:89:
04:fc:fb:f1:56:91:b1:2f:09:b1:e9:4a:0a:3f:3e:
67:89:89:0b:27:26:c8:0f:25:d0:d2:84:69:5c:f6:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5E:1C:49:FA:09:AE:23:1A:A8:DC:D8:D1:C2:83:E6:04:57:17:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC4E4FCF6C211EF8CC2C583762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.240.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a0:60:1a:07:be:ff:8d:09:8f:1e:42:f9:16:5c:be:0f:f0:
2b:a9:37:27:80:5b:2b:8f:9a:10:89:5b:39:c3:f3:f4:79:be:
63:63:ae:93:84:ac:4f:ae:c0:91:b9:e8:af:5b:2e:c8:8c:cf:
2a:d5:f9:37:0a:57:fb:41:07:81:9b:5a:6b:3f:95:84:14:b1:
86:6d:87:ff:f1:f6:3a:4b:21:13:bc:54:7d:9d:9e:57:0d:57:
7f:dc:29:85:7b:96:7b:1f:74:8c:77:aa:ea:80:1f:ba:fb:24:
f0:38:de:72:c1:43:1d:04:18:fc:ad:b8:7f:61:95:d4:c6:8b:
ab:f0:85:27:af:8e:5a:64:b7:6b:db:8e:0f:12:bf:7f:ec:76:
0d:d6:07:c7:9e:50:a7:26:ce:ef:44:a6:87:c2:aa:41:ce:0e:
b4:00:67:d9:6a:a2:51:6f:38:f3:cf:41:c6:5d:b2:d3:23:28:
b4:dd:84:1d:7a:7f:e3:d0:87:2a:1e:7a:ad:b5:6c:27:90:8d:
d8:c4:cf:9d:0e:95:f3:19:e8:bb:f0:07:42:4a:0c:98:a8:04:
fb:90:4d:42:6b:a0:b1:36:ab:49:7d:2b:8d:b6:e9:7a:c2:05:
12:2e:67:31:c0:71:98:53:02:b7:9f:82:28:50:a4:ed:e9:b3:
32:78:14:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:19:26 2025 by rpki-client