Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53AAAFE0F4E011EFBA9B12A2762E951A.roa
File: 53AAAFE0F4E011EFBA9B12A2762E951A.roa (raw, json)
Hash identifier: NyjITRD/vc09k+oBQVbs89LCmF87yS6Skl9J2kTlwMs=
Subject key identifier: F2:2C:2C:95:B7:8D:46:AE:3B:94:9F:A0:A6:74:E1:36:7B:82:AE:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53AAAFE0F4E011EFBA9B12A2762E951A.roa
Signing time: Thu 27 Feb 2025 07:56:18 +0000
ROA not before: Thu 27 Feb 2025 07:56:15 +0000
ROA not after: Wed 26 Mar 2025 07:56:15 +0000
asID: 62240
IP address blocks: 154.195.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91843 (0x166c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:56:15 2025 GMT
Not After : Mar 26 07:56:15 2025 GMT
Subject: CN=67c01aa2-e47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:fe:00:cf:a0:b6:d5:ec:fb:38:f4:c9:23:
f4:99:10:6f:36:b7:59:d8:7e:25:ac:44:fa:a5:ca:
4f:a2:df:26:f7:26:25:38:39:a0:34:55:c1:5a:7e:
86:dd:d1:1d:87:2b:56:36:71:d6:3c:5e:5b:77:7f:
83:ee:47:ee:00:27:db:e3:77:a8:87:2f:1e:e4:e6:
ed:8d:c5:81:ed:0a:85:82:e4:07:fd:27:13:71:e7:
db:de:b4:b5:9d:b1:a7:e5:f3:48:07:13:2d:5a:39:
cb:a7:6b:15:c6:58:7a:69:63:7a:04:b4:84:ba:17:
5d:c8:15:f4:ee:dc:30:9a:62:ed:fc:39:88:a8:6b:
b8:de:5c:5b:92:6a:13:d5:19:27:70:2e:c9:f3:2d:
1d:7f:27:d7:d9:de:c9:bb:39:14:7f:13:7a:55:6a:
bf:02:8e:c8:c9:f2:07:26:70:5f:a0:b5:4e:62:02:
54:cd:80:4a:39:20:b4:7e:7b:f4:76:90:92:bf:c4:
69:c1:87:91:c9:08:f5:b0:6d:e7:ed:38:82:3b:9d:
7d:3e:fc:8f:0d:59:7b:57:fa:f7:ce:07:ae:8a:51:
49:31:b6:c3:55:55:63:05:02:58:fd:21:bf:86:61:
b4:c1:29:cd:ec:31:ab:74:12:9f:50:45:ef:4e:c6:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:2C:95:B7:8D:46:AE:3B:94:9F:A0:A6:74:E1:36:7B:82:AE:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53AAAFE0F4E011EFBA9B12A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.173.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:3b:98:6d:9a:0c:e1:e9:83:21:bd:63:af:5d:00:e5:a5:42:
62:13:64:5b:86:ca:eb:cb:0e:87:76:2d:b5:b4:5d:82:4a:c9:
e1:6d:0a:b7:cc:8e:d7:34:76:7b:c9:27:7b:82:73:1b:a9:bf:
e1:6d:56:2c:91:d0:9c:0a:f7:08:87:3e:66:f2:a2:0a:b0:e7:
09:3e:c2:fc:7a:32:5e:5c:dd:06:86:ac:80:80:62:c2:98:6f:
7b:0c:22:f9:9d:77:48:9f:5b:30:b8:bd:51:16:c8:9d:f0:af:
dd:e3:88:1a:a8:fa:f3:15:60:0c:fb:61:93:f9:82:1a:b1:fa:
cb:53:94:c4:b4:85:03:a3:14:d0:32:de:7e:96:41:a4:e6:9c:
93:af:8b:a2:a3:64:80:6b:a8:ef:4f:43:8b:2e:e3:62:ef:40:
1c:0b:1b:f5:92:cd:52:55:57:92:81:0c:f4:2e:ae:30:6c:95:
4f:66:9b:c8:7e:ed:bc:2b:c5:a8:21:c4:e4:95:8c:06:80:3e:
e3:ff:ad:71:fa:5e:05:4c:54:ca:18:cc:9d:9b:af:fa:7d:56:
c4:b7:61:f4:f4:af:58:54:02:2b:fd:ab:34:40:b7:96:af:c0:
21:a4:28:b5:47:c6:8c:2b:c2:44:8a:77:36:3c:08:ec:a7:67:
82:28:99:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:22:25 2025 by rpki-client