Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC0E428F29711EFBFEC2982762E951A.roa
File: 4DC0E428F29711EFBFEC2982762E951A.roa (raw, json)
Hash identifier: hqg5Em1R1ylp5X6doczJABHdDynAyj6sGAt6j+xJMwY=
Subject key identifier: AD:29:15:AB:E4:AE:8A:43:9D:05:66:1F:1F:81:FA:0B:55:13:35:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015BA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC0E428F29711EFBFEC2982762E951A.roa
Signing time: Mon 24 Feb 2025 10:08:33 +0000
ROA not before: Mon 24 Feb 2025 10:08:29 +0000
ROA not after: Wed 26 Mar 2025 10:08:29 +0000
asID: 39600
IP address blocks: 154.94.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88992 (0x15ba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:08:29 2025 GMT
Not After : Mar 26 10:08:29 2025 GMT
Subject: CN=67bc4521-989d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:33:3d:90:49:07:49:83:d4:12:01:d6:9d:
33:78:2a:da:38:9c:f0:78:b1:0a:2f:29:04:60:4a:
b3:cc:f9:d3:22:2a:25:78:99:e6:a1:51:ed:f8:46:
0a:e2:0f:d0:7d:16:6c:18:ea:f8:62:84:23:32:2f:
f1:8a:90:87:c2:9f:1a:04:d8:03:c3:bc:df:1a:80:
88:30:f8:ed:ec:8d:92:88:24:1d:2a:30:f1:02:05:
d3:ed:87:7e:2e:75:c2:6e:1e:4a:c5:af:da:c4:0a:
eb:09:33:92:ea:5a:a9:e4:a5:54:c8:b2:45:fe:b2:
91:d2:4d:3c:4a:f9:db:56:42:3a:90:4e:bd:f1:c4:
15:f9:53:ad:6b:dd:f4:31:8a:ab:5d:9f:71:fe:87:
a7:c5:96:44:3d:0a:5f:de:aa:22:ae:fb:1d:b4:c3:
59:1f:e5:7b:67:d7:bb:bd:18:91:58:30:4f:23:e8:
71:d7:e1:e6:61:74:c3:e9:aa:ad:83:aa:23:46:71:
e3:62:4d:fd:16:c8:11:8d:b0:7b:65:b0:b3:df:af:
72:09:6d:08:34:7f:e6:7f:67:94:e2:8d:11:35:9e:
90:92:a5:11:c2:9d:de:27:8a:f6:94:a1:84:cd:6b:
5b:bd:f4:ab:15:6e:7f:af:04:f0:d3:8e:4d:75:b4:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:15:AB:E4:AE:8A:43:9D:05:66:1F:1F:81:FA:0B:55:13:35:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC0E428F29711EFBFEC2982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.59.0/24
Signature Algorithm: sha256WithRSAEncryption
18:19:48:32:74:0b:d1:5d:67:79:f6:2d:4a:64:f9:d9:96:7c:
c9:de:21:37:64:d6:92:6e:d5:a4:ff:df:ef:59:8c:51:8e:f9:
c5:a5:bd:43:34:55:56:22:66:c2:b8:90:4c:55:a4:cf:ac:f6:
37:e7:77:59:6c:5c:fc:b3:a8:ff:8e:b9:e1:1a:bd:39:7e:34:
95:08:8e:1f:46:52:ac:ad:0d:65:8e:3c:da:26:79:f9:db:64:
7a:f9:47:9b:95:b5:62:e7:78:fd:49:2c:d0:13:ce:81:e0:7b:
91:9a:4e:8e:db:33:79:dc:e6:6e:95:25:9f:70:ed:7a:67:67:
15:16:da:2f:0d:38:16:ac:38:6a:6f:2c:bc:8b:3c:d9:72:4e:
f7:2d:95:47:29:4a:f2:05:b2:3c:70:15:f8:cd:2b:2f:8c:a2:
a6:12:a8:4e:66:49:42:82:c3:5f:cf:4f:ff:f5:62:97:73:d5:
79:86:97:4c:a6:b7:7d:53:17:5b:6f:95:3e:f3:b7:e0:98:64:
5b:27:59:5a:8b:9c:71:ff:b0:dd:bb:ee:b0:03:83:d1:01:53:
36:bd:f2:f5:04:e9:d6:c5:b1:d7:82:16:fc:3e:39:bd:f6:1f:
ab:1b:24:c9:0f:75:24:3b:ab:7b:4a:f5:ee:00:c3:3a:d3:72:
66:97:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:14:05 2025 by rpki-client