Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/511A0192F16411EF8DCB09AB762E951A.roa
File: 511A0192F16411EF8DCB09AB762E951A.roa (raw, json)
Hash identifier: /8+1aN55pYdlxv014I9Ui5lRuapz6LIEkCp+WKLnF+Q=
Subject key identifier: 85:6A:BD:2C:4C:13:35:FE:D8:88:57:13:9C:BE:18:AC:D1:08:A3:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015A8D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/511A0192F16411EF8DCB09AB762E951A.roa
Signing time: Sat 22 Feb 2025 21:31:03 +0000
ROA not before: Sat 22 Feb 2025 21:31:00 +0000
ROA not after: Wed 26 Mar 2025 21:31:00 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88717 (0x15a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 21:31:00 2025 GMT
Not After : Mar 26 21:31:00 2025 GMT
Subject: CN=67ba4217-128f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:ad:77:c6:fa:dc:90:80:e5:b5:5e:78:c4:
ec:3d:e3:59:1b:05:9b:b3:9f:40:88:b7:f0:73:ee:
c4:06:e8:99:bd:44:ae:27:a4:32:a4:24:78:c2:53:
2a:90:19:29:e9:76:e3:f5:c2:0b:14:32:1b:37:cd:
a8:de:e8:bb:fb:17:25:7c:d2:c2:9f:aa:e7:1f:59:
33:c1:e7:3a:92:49:2a:38:68:49:3f:0c:55:57:0e:
82:95:5b:23:b1:10:66:18:05:cf:4c:e2:60:e4:eb:
e8:98:dc:7d:0c:be:5d:e3:dd:b2:67:e7:cb:08:85:
f1:a1:5f:39:53:1c:c9:2b:0c:0c:4c:a7:69:84:61:
5c:5a:b3:44:b9:24:56:b8:54:02:df:ac:b3:76:2d:
ef:f7:e0:21:ea:ef:6a:18:12:56:97:ae:0f:e2:08:
57:8c:74:86:a9:78:8a:f0:ba:37:a9:ca:18:a6:65:
f9:c0:ff:d4:d8:cb:1f:b0:87:90:fd:09:69:b4:c5:
8d:d0:99:87:f9:91:c5:8a:6f:e8:ec:25:5b:6c:99:
d7:39:43:33:cd:62:97:36:af:9b:3b:96:cf:9f:99:
9f:15:1d:3b:c7:22:b3:63:c3:bf:dc:db:d6:a6:15:
d8:a7:29:c7:bf:fd:f7:96:3b:b6:5c:2d:cb:56:43:
a5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:BD:2C:4C:13:35:FE:D8:88:57:13:9C:BE:18:AC:D1:08:A3:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/511A0192F16411EF8DCB09AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
67:b7:46:00:fa:6e:11:6e:22:d8:ca:6d:ac:3c:c8:ad:2a:d7:
48:24:c1:2f:4f:44:8b:ba:10:a3:51:45:da:f4:8d:cb:2c:ac:
6f:5a:68:54:15:1a:ad:df:ee:30:08:5a:b7:96:06:51:ce:92:
a8:d0:ff:77:0d:ec:44:c5:3f:80:ce:48:bb:e3:2e:a3:5a:e3:
10:bd:3d:68:b3:57:19:d5:d4:30:13:65:3c:d3:1c:f7:b2:21:
ef:ea:bd:4c:90:09:e0:c2:1f:9e:50:76:00:ee:a0:ef:4c:82:
66:4b:49:06:cb:0c:32:3f:39:82:fa:88:9e:6d:41:95:cb:a1:
65:34:33:fc:94:c0:a4:84:a5:55:cb:81:49:73:80:dc:58:b8:
29:87:5f:c7:59:b9:44:3b:c6:13:60:75:e9:92:ec:eb:06:d2:
3c:49:f2:e5:75:42:40:b6:2d:4f:4d:b4:c1:b2:20:c8:8f:d2:
87:ad:e1:1a:ed:d5:ac:c6:a8:77:a6:e0:b8:13:1f:be:5e:1a:
b0:ae:5e:dc:5a:41:04:44:e4:e2:cb:18:28:80:4d:6d:f9:28:
8e:7d:07:b3:56:84:bb:b9:27:39:0c:e1:1e:a2:fe:bd:0a:20:
89:48:39:4a:02:44:a8:2a:85:f0:76:6d:ab:53:2d:fc:70:8f:
d4:4b:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:48:22 2025 by rpki-client