Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5272E7D4F81711EF95D21C93762E951A.roa
File: 5272E7D4F81711EF95D21C93762E951A.roa (raw, json)
Hash identifier: 227lYVQ01+WVX8Ut0XOy8MdxoP/PsXY5a0LUxcRUptc=
Subject key identifier: 87:75:F2:15:D9:68:9C:AE:32:87:54:7D:27:13:C8:07:B9:6E:50:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5272E7D4F81711EF95D21C93762E951A.roa
Signing time: Mon 03 Mar 2025 10:07:32 +0000
ROA not before: Mon 03 Mar 2025 10:07:28 +0000
ROA not after: Mon 31 Mar 2025 10:07:28 +0000
asID: 202656
IP address blocks: 154.219.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94196 (0x16ff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:07:28 2025 GMT
Not After : Mar 31 10:07:28 2025 GMT
Subject: CN=67c57f64-f361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9d:17:09:81:d0:e7:e4:70:5d:83:d2:00:e9:
46:fd:37:04:b9:28:7f:5c:68:61:66:a8:86:dc:a8:
c7:d9:99:52:30:52:6b:c8:cd:52:eb:7d:64:fa:b4:
53:d6:31:3e:60:1c:be:f8:4d:7b:48:f0:89:f9:23:
11:f3:c6:f7:11:d7:e6:d7:8c:82:ba:75:0d:7f:be:
8a:24:e6:fe:d8:fe:e3:0e:7f:a4:92:52:af:13:f8:
b2:fc:c6:fa:f0:a9:2b:ef:31:01:5a:d0:f0:1e:8d:
21:65:36:38:2c:fe:f2:9b:be:47:6e:56:ed:b4:e5:
0b:11:b6:fb:41:f8:00:84:ec:5d:c1:0e:72:f8:0e:
a7:ba:87:b1:26:cd:76:d0:51:34:21:d8:22:dd:f2:
47:52:e7:01:0e:b7:6c:91:8b:4f:10:69:1a:e6:80:
c0:32:81:df:10:6d:dc:1d:82:91:9e:c1:0c:c4:53:
fc:c6:79:fa:84:fd:9d:0c:29:77:cc:ae:4c:95:0c:
c8:ee:57:db:7f:ed:c7:b5:89:38:88:f6:ee:b7:63:
61:b9:48:51:67:5b:b3:46:c6:19:0f:12:99:91:c8:
6b:9d:c4:38:c8:50:13:4a:39:de:54:f5:c1:94:e7:
06:b8:d7:f6:01:41:8a:4f:e3:3d:3f:06:a6:cf:b8:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:75:F2:15:D9:68:9C:AE:32:87:54:7D:27:13:C8:07:B9:6E:50:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5272E7D4F81711EF95D21C93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.17.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:8d:1a:3e:52:d7:69:ee:0f:0d:ee:31:9e:fc:75:ad:74:02:
bb:b5:e5:e9:9e:1d:d7:8c:98:fa:93:42:7a:be:a3:a2:08:3a:
d3:9e:cb:5f:9b:02:0e:27:95:f0:ab:a4:ea:79:5b:5c:35:82:
34:68:22:42:83:68:ed:48:4b:5b:18:b0:be:7b:05:34:1c:c5:
18:e9:ed:44:54:f9:ac:08:a0:24:bf:fd:88:e2:9a:fb:e2:ec:
57:07:63:8c:fc:e8:a0:7b:d4:f3:bc:bd:81:45:a2:fb:fe:a4:
01:4b:a9:ef:89:78:6f:17:18:8f:a4:4d:d0:cb:10:8a:17:c4:
fa:6e:f0:e8:27:d9:cc:4d:fb:73:2f:4d:10:7d:70:9a:bd:9a:
25:af:1d:16:ee:76:fb:9e:58:c8:e7:d6:09:44:9d:4c:b2:4a:
6c:1c:1a:b1:eb:91:7d:a6:6f:76:73:70:8d:9c:3b:a9:fa:a6:
a7:9a:46:a6:86:46:dd:df:49:a3:8b:79:6e:9f:40:a3:03:e7:
d0:1a:72:37:96:b8:3a:33:ee:05:ea:a7:0b:e2:d6:2b:d5:79:
c2:60:2e:04:6e:ff:7b:e8:82:43:09:c7:1a:29:15:8d:54:c4:
51:0d:ad:59:e7:78:d0:18:f8:da:95:79:a1:f2:25:b0:af:53:
bb:44:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:52:36 2025 by rpki-client