Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50A36AA2F5B811EFA173AE6E762E951A.roa
File: 50A36AA2F5B811EFA173AE6E762E951A.roa (raw, json)
Hash identifier: MjKAZ3otffC9CCFFHqM06YmVUQNGDvsptHVBKpO31vU=
Subject key identifier: E6:00:9F:90:84:9A:C7:4C:39:41:ED:9B:E8:7A:2C:4F:50:AF:E0:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50A36AA2F5B811EFA173AE6E762E951A.roa
Signing time: Fri 28 Feb 2025 09:42:25 +0000
ROA not before: Fri 28 Feb 2025 09:42:21 +0000
ROA not after: Mon 31 Mar 2025 09:42:21 +0000
asID: 54600
IP address blocks: 154.202.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92763 (0x16a5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:42:21 2025 GMT
Not After : Mar 31 09:42:21 2025 GMT
Subject: CN=67c18501-ec3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ec:b4:1d:47:c7:2a:ad:f9:6f:90:83:81:f8:
da:63:4a:c3:4f:45:45:cf:0c:3d:14:3f:15:2f:5f:
95:0d:bc:a7:b7:fd:6b:45:a5:3b:06:2a:de:3b:ee:
1c:b9:ee:b7:63:65:7d:f4:73:a4:50:2c:c6:df:05:
4d:47:6a:65:cb:8e:0a:a5:62:3d:4f:19:57:60:0c:
65:44:f5:9f:49:73:2e:ec:b6:6f:3c:db:55:f6:84:
82:84:17:ba:fa:74:9f:e9:29:df:fe:2d:0d:9e:95:
a4:d8:b5:d3:1e:0a:b3:31:fa:b8:fb:3a:67:25:0e:
e3:ca:57:77:ac:c0:a1:db:36:b8:32:e7:f7:ae:0d:
7a:91:df:7f:01:d6:8c:8b:e7:5f:3c:2e:84:01:69:
f8:77:39:62:7d:f0:17:4e:88:de:bd:8b:50:71:96:
82:aa:bf:1a:c1:7b:e6:e5:9d:ed:af:4d:89:78:70:
48:d2:ac:dc:03:86:7b:6b:d1:3c:b9:28:7f:8f:ce:
53:0b:61:57:4c:28:bc:49:f6:7c:05:0d:57:a0:f2:
bd:e6:d8:23:fe:d8:89:3d:44:53:47:4e:45:e9:e7:
a9:62:0e:d0:46:90:17:f4:e5:fb:93:11:d7:03:91:
33:8c:6b:be:f7:12:c6:30:52:26:d1:ca:dd:2f:11:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:00:9F:90:84:9A:C7:4C:39:41:ED:9B:E8:7A:2C:4F:50:AF:E0:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50A36AA2F5B811EFA173AE6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.144.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:e1:0f:ce:df:39:7a:5b:6a:22:aa:ae:2e:77:58:98:b1:a3:
a3:12:e4:e9:5b:e4:6b:f9:c7:67:d9:ee:eb:2d:56:c4:f2:e2:
b7:78:2f:05:61:87:07:25:7a:bf:2a:42:b0:0e:d3:f8:2d:7d:
90:a6:80:de:11:94:f9:42:4f:10:e2:48:cf:69:e9:50:21:29:
d6:54:66:de:b0:ff:92:99:3b:1a:69:c3:09:f8:3a:15:c6:8f:
22:60:51:d1:14:ea:0b:eb:92:2b:6a:1c:59:7d:c8:65:ff:57:
ad:ee:56:22:5d:b9:a1:f7:0e:ab:f4:82:5d:88:ef:5c:e0:7b:
6c:c4:56:06:31:a6:60:73:f9:99:6e:a9:f2:32:7c:12:48:5a:
c8:42:7a:dc:59:28:50:64:2b:d4:74:59:4b:20:77:2d:24:97:
fc:c6:40:af:88:04:4d:41:a4:aa:34:84:a3:60:ea:98:7f:ed:
18:b9:9b:22:d9:dd:9b:7a:98:73:df:b1:9f:4a:5f:4f:c1:e8:
9d:1a:5e:5d:cb:ad:d2:37:61:61:ab:f4:2b:e9:00:51:e1:65:
8c:e8:d0:37:9a:e8:2a:81:f4:c2:6b:ba:4b:68:10:9e:9d:07:
91:e5:2c:21:41:af:cc:af:8c:94:8b:bb:13:91:ff:95:62:bc:
e4:28:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:52:32 2025 by rpki-client