Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ADF7316F1E111EFAC0A13AE762E951A.roa
File: 4ADF7316F1E111EFAC0A13AE762E951A.roa (raw, json)
Hash identifier: CVoteHEdkrkpGYPN9F2WdXEbIbKAch/FqMjmhJMoeng=
Subject key identifier: 74:16:24:51:6C:2F:78:BF:A8:09:75:62:69:81:C7:96:2E:0C:2D:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ADF7316F1E111EFAC0A13AE762E951A.roa
Signing time: Sun 23 Feb 2025 12:25:40 +0000
ROA not before: Sun 23 Feb 2025 12:25:36 +0000
ROA not after: Sat 29 Mar 2025 12:25:36 +0000
asID: 203020
IP address blocks: 154.223.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88945 (0x15b71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 23 12:25:36 2025 GMT
Not After : Mar 29 12:25:36 2025 GMT
Subject: CN=67bb13c4-0803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d1:85:6c:50:e0:01:ef:89:fe:b8:28:b7:4e:
d3:e4:de:cd:d3:4a:2b:e7:3d:eb:09:11:68:b3:0d:
46:cd:34:ad:e3:9b:d3:d6:7b:9d:13:b8:e0:d0:d1:
d4:ba:04:d7:57:54:ba:7c:53:15:8e:82:69:78:61:
47:16:17:9a:bb:36:87:e5:dd:5d:df:9b:fa:9d:8e:
bf:02:fe:cc:bd:49:d5:d4:43:21:f0:93:df:e9:cd:
f8:f9:9c:ce:87:00:f9:fb:21:43:fd:a2:e9:65:f4:
16:1c:74:57:9d:89:d0:88:dd:43:71:1f:fc:43:22:
aa:fa:61:2f:f4:ac:d5:f3:f1:d7:17:62:e3:01:36:
4a:36:84:66:d2:90:64:9b:40:6e:fa:33:ab:51:67:
93:38:69:f0:9f:4a:01:ea:1b:33:30:4d:90:3f:ab:
a4:1a:99:a5:97:fa:d9:86:45:23:62:aa:9e:8e:b9:
f7:a6:59:f4:e8:e7:d6:65:95:b2:ca:cf:21:09:4f:
1c:da:1e:fb:8b:5d:7d:4e:42:9d:80:d0:e6:6d:59:
2b:dc:a2:73:67:57:9a:f5:a4:7d:ed:9d:56:e1:5e:
c8:b9:99:f7:c0:c5:59:b8:a5:51:79:f9:d0:3b:c5:
bb:1d:6a:8c:c3:2c:f3:49:b3:16:21:70:14:f8:e1:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:16:24:51:6C:2F:78:BF:A8:09:75:62:69:81:C7:96:2E:0C:2D:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ADF7316F1E111EFAC0A13AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.143.0/24
Signature Algorithm: sha256WithRSAEncryption
69:70:c6:48:83:51:15:45:77:23:6b:b4:37:4d:24:b9:93:9c:
2e:c5:1a:ef:3f:bc:d8:d5:b3:67:ea:56:6b:d7:ad:30:88:cf:
2d:7b:e2:01:53:46:cd:bd:20:bc:36:81:b0:f9:ad:d2:f3:2f:
16:0f:ec:b8:6f:8a:0b:4f:19:95:48:4e:7d:28:d4:60:01:bd:
25:d6:ba:cc:3d:f1:ca:51:4b:db:e3:07:ee:6c:ab:30:d4:9f:
ec:3a:f2:6c:ac:c7:8f:bf:b2:1e:de:c8:65:e0:b9:ef:a1:1f:
cf:39:2e:d4:c0:d1:6a:d7:92:39:4f:12:e3:f6:88:3d:fa:a2:
00:23:18:c3:46:27:44:44:b3:52:53:1f:1d:5a:89:4b:9c:21:
ec:f4:bb:ac:dc:84:4f:70:2a:60:04:09:5a:50:ad:b2:7d:91:
47:ec:3f:dc:1e:bc:1a:d6:bb:8a:1c:02:e3:d1:ac:00:35:34:
2a:4d:fb:2d:78:ea:f5:e8:ab:22:05:e3:dd:cd:47:d2:fa:c8:
1d:be:61:a2:ac:66:ea:06:e2:41:c0:bb:35:92:cb:73:f2:87:
68:a4:f4:65:48:5b:32:ba:9d:83:d9:a4:f3:44:dc:b5:a4:14:
1f:f3:86:2f:09:6e:9d:0a:e3:b5:6c:5f:77:22:c3:bb:8c:9c:
2f:35:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:05:45 2025 by rpki-client