Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5329FDB6F2DB11EFB97087B9762E951A.roa
File: 5329FDB6F2DB11EFB97087B9762E951A.roa (raw, json)
Hash identifier: /KHQMaBEuLIUcTD63Y3LDdI/P6NZDLfI29jFN+4AYLI=
Subject key identifier: 50:1B:96:43:50:8A:53:96:04:AB:BC:23:5A:86:F3:41:79:D8:03:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5329FDB6F2DB11EFB97087B9762E951A.roa
Signing time: Mon 24 Feb 2025 18:15:28 +0000
ROA not before: Mon 24 Feb 2025 18:15:24 +0000
ROA not after: Sat 05 Apr 2025 18:15:24 +0000
asID: 42831
IP address blocks: 154.94.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89242 (0x15c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:15:24 2025 GMT
Not After : Apr 5 18:15:24 2025 GMT
Subject: CN=67bcb740-fa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:e3:92:6f:77:da:89:9c:7a:02:ce:8e:e2:
a3:08:fe:94:78:5d:eb:e4:3b:ef:89:e5:44:0a:f9:
ec:15:c2:d7:72:73:10:87:5c:48:6b:88:2a:8d:99:
d4:1a:75:8e:db:e9:db:db:77:5f:1a:7a:fe:c2:5b:
2e:27:87:cd:66:44:ba:00:f4:f1:21:e4:e3:a4:74:
7e:98:d3:83:ce:ee:d1:17:d6:0d:af:5b:a7:e7:53:
d8:b0:a1:fc:e4:69:e7:1d:ab:b6:3c:d7:75:2f:4e:
e8:81:bd:5d:c1:99:f2:c8:90:60:bf:63:20:e0:d9:
d8:aa:f0:4f:53:7c:c9:3e:fd:dc:06:2e:24:f1:22:
0a:ba:fe:78:5e:37:67:a5:ab:26:54:03:54:c9:7f:
a4:9d:b5:0c:e2:ed:70:fc:42:bc:cc:43:c8:dc:49:
c0:26:ab:24:bf:3f:99:b9:53:fc:99:92:e0:15:64:
b2:e5:d2:ff:e4:80:7f:a8:e3:52:69:61:c5:bf:fe:
83:a4:6d:4e:7d:b8:2f:96:7e:4c:03:2b:f4:28:73:
da:9a:b2:d3:63:bf:7d:6e:28:1e:17:82:bf:78:91:
27:d1:42:49:70:19:ca:4f:0d:25:f3:30:d2:95:a0:
c0:ca:08:80:db:70:d6:40:23:c3:1b:3c:6a:a8:4c:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:96:43:50:8A:53:96:04:AB:BC:23:5A:86:F3:41:79:D8:03:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5329FDB6F2DB11EFB97087B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:6c:1c:04:90:91:e1:62:c6:ee:60:6a:a6:44:ad:e7:4f:12:
83:6f:16:5d:b6:24:14:fd:eb:c9:f7:ff:43:1a:9b:b2:b6:17:
f4:0c:29:96:4f:9b:e4:04:f5:33:27:db:fe:10:66:30:e7:c1:
b2:a1:36:47:ca:8d:8b:ec:db:aa:3b:7a:9c:a6:df:55:f3:3f:
5f:e3:35:aa:0d:5c:4b:66:72:39:7e:ee:ee:dd:51:7a:91:02:
7f:c8:f4:7d:ad:77:27:14:11:73:3a:15:f0:49:00:64:34:bb:
92:42:f1:8b:c6:93:eb:09:39:38:81:84:46:16:d2:61:c8:68:
54:18:83:8b:0f:10:ad:48:7d:80:32:55:94:e6:6f:8e:66:78:
a6:31:cd:e7:c6:a8:13:87:82:fe:89:95:72:3e:e9:53:6d:6f:
9f:7d:8e:a8:e7:01:b9:52:6f:75:f3:62:fc:19:dd:fb:98:e7:
4d:62:31:cd:7c:d3:44:85:d1:73:a6:e5:fb:c9:9e:b9:2d:87:
88:75:66:25:d0:ac:63:a3:71:8d:49:e3:33:af:6b:2e:61:14:
1d:68:87:7e:de:b6:10:45:dc:68:53:d3:85:6f:77:1b:83:39:
68:fc:fa:65:14:a1:12:c7:bf:37:92:ee:96:02:3d:f0:ad:59:
23:a5:f7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:28:46 2025 by rpki-client