Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/523C24CEF5BA11EFA2432E7B762E951A.roa
File: 523C24CEF5BA11EFA2432E7B762E951A.roa (raw, json)
Hash identifier: UJpaPAMzmB0mcga24BIs9sfVLn9HfQVZcBOyxIXlZgM=
Subject key identifier: DC:2B:0F:E6:EA:01:CE:C1:2D:53:19:A9:13:61:68:DC:0B:56:FB:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/523C24CEF5BA11EFA2432E7B762E951A.roa
Signing time: Fri 28 Feb 2025 09:56:46 +0000
ROA not before: Fri 28 Feb 2025 09:56:43 +0000
ROA not after: Mon 31 Mar 2025 09:56:43 +0000
asID: 54600
IP address blocks: 154.207.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92783 (0x16a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:56:43 2025 GMT
Not After : Mar 31 09:56:43 2025 GMT
Subject: CN=67c1885e-3ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:f2:5e:e5:8b:5d:fe:32:7c:dd:e7:9a:e7:
08:89:bf:66:45:bf:f1:68:ba:80:4e:c7:5f:9a:56:
33:80:ad:2a:78:2b:40:ce:52:d5:b5:80:1c:1a:e3:
68:bc:c4:f2:7a:21:7b:3f:d9:a3:77:f7:48:d2:bd:
92:bc:eb:17:11:ca:de:01:07:52:30:ef:26:9b:e1:
b9:8f:be:a1:73:cc:95:f8:d1:24:f9:eb:1f:1a:45:
02:c9:90:fc:1c:a7:cf:0a:3f:e1:55:65:47:42:fd:
2a:04:6a:48:66:1d:8f:40:4a:6a:6f:52:5d:08:22:
ea:07:65:4f:67:7a:ce:5f:b0:2e:c5:bd:6d:d5:98:
43:6e:ca:c1:f5:e6:b1:b0:3f:26:23:d1:f9:b8:e6:
22:4c:7b:2c:46:0d:a8:10:97:29:cc:fb:fb:2d:52:
61:2b:0b:25:80:17:87:4b:3d:50:e3:99:f8:75:6b:
0b:27:0c:8a:cf:01:3c:e2:01:79:b6:be:02:0b:78:
d5:74:c5:d8:7d:20:35:e8:92:a6:ff:a7:89:d7:76:
f4:c7:79:59:3b:09:40:92:e0:a5:dd:00:e2:c4:6e:
6b:3c:b7:47:07:a6:08:86:32:fd:2f:f8:7b:38:9d:
51:32:48:46:f6:11:4b:e1:21:dd:7b:d0:e8:4d:6e:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2B:0F:E6:EA:01:CE:C1:2D:53:19:A9:13:61:68:DC:0B:56:FB:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/523C24CEF5BA11EFA2432E7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.208.0/21
Signature Algorithm: sha256WithRSAEncryption
01:2a:da:f7:ff:91:82:56:0d:50:51:cd:e3:66:79:70:a9:fa:
b4:17:c2:cf:e0:3a:80:d2:9a:47:7c:7c:51:ba:39:ab:fc:30:
dd:f2:c5:89:7b:09:66:d9:70:22:74:70:c2:c5:d2:eb:14:e4:
f1:2e:a0:ba:49:f9:4a:77:94:32:17:90:da:74:3b:54:5f:a8:
44:a9:10:b2:23:6b:ea:eb:08:94:2f:2f:ae:23:7f:19:f6:33:
a9:2b:6f:fb:64:3b:8c:4f:00:d4:04:1f:e2:1a:47:eb:35:fa:
a2:7f:1b:76:04:d8:06:e9:d5:3b:fc:ee:e5:88:b2:cb:22:29:
cc:8d:2d:62:93:34:fb:a0:81:36:55:c6:ae:a8:6b:c5:e8:b0:
cd:bd:d3:e7:f2:d9:3c:b6:e5:09:f6:34:53:ba:8f:64:f8:94:
85:da:18:c1:11:3f:eb:ec:3d:12:09:14:0d:0b:20:39:99:ff:
3c:60:8c:73:9b:38:50:25:3d:7c:77:96:10:95:b8:00:6d:3c:
a2:71:bc:93:a9:b2:9f:d6:68:15:04:12:9b:27:10:ba:c5:40:
80:af:1b:41:33:b4:f7:44:f4:96:f5:79:a4:a6:cf:b3:21:30:
40:35:58:67:6f:9f:bf:a2:5c:21:59:7e:6c:9f:20:97:54:86:
99:39:4f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:43:39 2025 by rpki-client