Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B96FC6CF3B611EFBF764C88762E951A.roa
File: 4B96FC6CF3B611EFBF764C88762E951A.roa (raw, json)
Hash identifier: iqa0FuHgrVpdVZfs/JHvikTg9Xy+w5pFTZ8dCyn8LPc=
Subject key identifier: CB:07:16:BB:67:77:11:D0:56:62:A3:DB:49:12:72:25:AD:03:D3:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B96FC6CF3B611EFBF764C88762E951A.roa
Signing time: Tue 25 Feb 2025 20:22:55 +0000
ROA not before: Tue 25 Feb 2025 20:22:51 +0000
ROA not after: Wed 09 Apr 2025 20:22:51 +0000
asID: 138915
IP address blocks: 154.95.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90067 (0x15fd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:22:51 2025 GMT
Not After : Apr 9 20:22:51 2025 GMT
Subject: CN=67be269f-a037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:08:63:e2:da:c2:e9:d8:70:f4:3e:2d:98:
10:04:b3:fb:4c:07:d5:66:84:9e:05:30:96:e7:e9:
ab:c2:2b:f6:2f:44:ab:31:97:0f:1c:fe:c2:f9:c5:
fa:69:60:8f:a0:04:22:27:dd:69:3e:41:89:dc:db:
7a:16:a5:ad:53:fe:e7:72:e0:d5:e6:25:9f:02:3f:
0c:39:96:27:5f:0d:09:33:a2:0b:96:20:eb:a8:3e:
55:39:96:ef:1c:79:a0:11:5b:c0:f7:20:3b:bd:8c:
77:d7:fe:f0:65:3c:88:28:6f:61:f5:d1:e0:ca:68:
13:e5:3b:a3:0b:eb:0f:63:d2:88:41:ff:78:4d:69:
2c:3a:6d:f4:4b:09:80:3f:c7:17:07:1e:57:0b:b8:
79:3c:2e:ac:1e:bd:90:02:44:8d:89:a8:f5:ea:4f:
1c:a8:1f:4a:7f:b2:c7:4b:16:b7:48:9a:35:b1:d4:
57:52:65:53:d4:11:b4:87:41:46:65:51:b8:24:c8:
91:16:02:5b:0c:eb:a1:e2:37:b8:3a:f9:1e:6f:09:
cf:ca:0c:3a:8e:e1:c0:6f:b1:04:8b:1b:6f:cf:cd:
9b:2b:fe:00:16:37:ad:e1:07:5d:99:76:a5:e1:02:
e0:85:c8:03:2e:46:0b:18:c6:ce:0b:12:ba:64:51:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:07:16:BB:67:77:11:D0:56:62:A3:DB:49:12:72:25:AD:03:D3:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B96FC6CF3B611EFBF764C88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.85.0/24
Signature Algorithm: sha256WithRSAEncryption
50:58:24:d9:f5:63:6c:10:30:ff:6c:cf:95:2f:04:20:94:e3:
4f:46:71:8b:f4:f9:0a:3c:6d:9e:b9:de:83:b6:bc:34:7b:fe:
80:7a:30:7c:bd:0e:93:1b:af:16:35:de:03:a2:20:72:ee:72:
46:f1:d4:1a:11:79:61:c6:cc:12:34:72:b3:be:df:19:d2:8f:
52:6b:93:b4:6b:be:33:82:77:b6:4a:ff:dd:43:69:0a:35:61:
47:0d:65:0e:73:c3:4e:d4:a9:21:04:8f:f1:5c:1e:98:8e:ce:
a7:61:d9:e5:8d:20:60:fe:f6:51:27:24:92:2d:f6:8d:98:ef:
e1:60:13:77:52:e3:e5:f4:96:32:4c:aa:b7:3e:1e:8c:ff:06:
b9:1b:89:6e:74:92:42:c3:92:d8:ec:b3:8e:44:0a:a5:41:b9:
2b:5b:20:1b:25:67:4f:75:bd:fc:b5:d3:54:8d:69:15:9a:80:
60:26:88:96:31:47:7a:4c:06:57:3c:8e:96:c6:3b:f0:45:02:
6b:06:7d:ec:f7:ff:0b:2a:5d:50:4b:b0:d8:b3:fd:a4:11:45:
f4:4d:1a:60:c9:67:b6:36:e2:79:36:7d:55:d0:f8:a9:97:eb:
b2:12:f6:78:ae:e1:4e:19:94:0f:9d:02:47:a2:e5:bb:b3:fe:
bc:10:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:10:20 2025 by rpki-client