Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FA478E6F59D11EFB135C5B4762E951A.roa
File: 4FA478E6F59D11EFB135C5B4762E951A.roa (raw, json)
Hash identifier: T+V6+sDq0CLJ2jehHq30ZqT/EEY00xZ3UNlC5oZz3R4=
Subject key identifier: A4:BD:57:1F:E1:DE:E4:5E:E5:5A:8D:EC:95:A9:93:5A:16:8D:3D:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FA478E6F59D11EFB135C5B4762E951A.roa
Signing time: Fri 28 Feb 2025 06:29:07 +0000
ROA not before: Fri 28 Feb 2025 06:29:03 +0000
ROA not after: Sat 29 Mar 2025 06:29:03 +0000
asID: 174
IP address blocks: 154.202.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92611 (0x169c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 06:29:03 2025 GMT
Not After : Mar 29 06:29:03 2025 GMT
Subject: CN=67c157b3-7095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:a1:48:58:5c:3e:73:c0:25:bf:c8:87:57:
77:94:78:07:60:8a:b5:16:51:42:d4:75:cf:f7:cd:
b1:2b:27:4f:c4:7c:90:ae:18:4b:16:7f:dd:9d:bf:
88:51:2a:76:bd:a1:2c:c6:22:1e:fb:46:56:f4:58:
bb:ff:ac:90:0d:f2:36:7f:ef:9e:42:e4:f0:b6:82:
5f:ef:9e:bd:ff:c7:f2:17:11:c1:ef:ea:4f:af:7f:
bd:54:44:44:35:03:dc:02:62:bf:32:1b:13:80:6c:
f2:fb:19:1a:fc:69:c8:99:32:e1:93:8c:44:23:fc:
3b:30:7a:84:3c:49:81:df:5c:10:5e:da:94:64:46:
7f:cd:43:eb:74:7e:86:20:a9:c5:74:56:99:4a:94:
47:2a:01:17:e6:bf:f4:07:57:ea:97:57:f7:fc:58:
fa:d1:57:a2:08:b7:cf:d6:bd:53:30:2e:da:1b:59:
ba:c2:40:08:fd:18:8a:c4:8b:27:6a:05:4c:95:13:
17:eb:10:3a:69:fe:ee:56:2c:06:26:33:df:56:85:
fc:d8:6b:9b:40:cf:1d:74:61:bd:71:09:70:5a:24:
3e:76:18:84:44:9c:b0:96:46:48:6d:65:e8:af:c0:
cc:ff:f2:a2:d4:89:4b:63:aa:45:b5:3a:6d:68:bc:
91:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:57:1F:E1:DE:E4:5E:E5:5A:8D:EC:95:A9:93:5A:16:8D:3D:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FA478E6F59D11EFB135C5B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.135.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a6:23:93:33:4c:26:5b:51:7d:19:42:ea:61:80:12:4d:f9:
b7:04:25:71:c1:25:04:50:1f:cb:d5:77:28:d8:a8:c9:17:6f:
6c:01:c1:ff:dd:2b:a2:47:36:4e:67:1c:f6:46:8f:a4:bc:a3:
b7:64:da:18:37:e0:d4:aa:85:2b:54:5d:4b:f3:0d:fd:28:f7:
4e:d5:6a:ed:d1:1b:78:26:d6:a5:6b:49:2e:fa:ad:85:76:08:
ad:84:0d:b4:8e:1a:8d:df:e2:1b:d7:af:c6:b5:a5:bd:84:72:
ee:55:ad:0a:56:c1:dc:76:e0:db:29:ec:c2:cf:40:d3:95:76:
4a:e0:aa:70:63:a7:d6:03:fe:1e:e9:97:fa:7a:18:f1:21:5f:
9d:3b:9a:31:4c:16:3d:06:1a:9b:f3:c3:17:3f:e4:94:1b:77:
a4:b3:c1:5a:9d:6b:84:b5:35:28:8f:cf:4f:8c:6b:15:77:ea:
52:b9:cd:2b:1e:ec:be:0e:4a:d0:5a:0b:6c:ac:f1:b7:69:53:
04:e3:96:ea:2b:85:14:6b:77:05:b4:b6:b2:91:a7:78:61:86:
aa:06:4f:2a:86:42:3c:52:02:79:f0:ca:db:7d:ee:0f:9c:e4:
db:14:b8:01:c1:bd:5c:e9:1b:4e:19:05:f1:ac:4e:af:a2:ab:
6a:a3:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:12:55 2025 by rpki-client