Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54B58D92F61611EF99F1A169762E951A.roa
File: 54B58D92F61611EF99F1A169762E951A.roa (raw, json)
Hash identifier: OxxDfGSUOgoFEJhv8TJhlZODy99v9KMZ26o2Axwv2JU=
Subject key identifier: 47:8F:BE:7A:FF:7D:0F:5A:3E:BD:E4:B5:52:D0:4A:9E:E4:ED:92:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54B58D92F61611EF99F1A169762E951A.roa
Signing time: Fri 28 Feb 2025 20:55:24 +0000
ROA not before: Fri 28 Feb 2025 20:55:20 +0000
ROA not after: Wed 26 Mar 2025 20:55:20 +0000
asID: 62240
IP address blocks: 154.194.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93201 (0x16c11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 20:55:20 2025 GMT
Not After : Mar 26 20:55:20 2025 GMT
Subject: CN=67c222bc-6b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:4c:1e:c7:1e:dc:83:ee:0f:5b:91:b9:5f:
0a:bf:78:c6:16:86:ad:b1:29:5a:fb:5a:83:23:92:
b0:09:e5:94:0c:e2:87:47:6b:48:54:18:89:9c:a3:
a5:f7:68:85:6c:f1:db:65:06:48:55:0c:f6:f6:fe:
70:71:72:14:01:bd:60:34:1e:2a:49:37:5c:30:6c:
8b:c1:98:d8:d9:31:7b:4d:66:7b:24:8e:f2:56:26:
58:b9:eb:ba:0a:dd:54:2b:f6:0f:f9:f2:6a:84:e3:
75:4e:92:a8:54:b8:85:3b:1f:7c:d0:52:63:81:a6:
88:a1:35:1e:da:49:6c:d5:06:f0:8e:e6:45:45:4a:
1f:4d:86:3a:ef:c0:99:20:63:fe:06:43:f5:7d:d9:
ea:c2:2d:94:34:8d:31:f2:19:47:0e:64:23:37:78:
d7:1e:a8:93:1b:18:3b:30:61:1d:06:5d:08:b6:68:
95:28:6e:66:48:e3:46:39:ce:52:38:5c:8b:6b:3d:
e8:2d:6c:e4:20:38:53:82:89:aa:be:fe:53:d2:a9:
54:6a:a8:db:14:40:8c:d8:df:c2:4b:07:7b:46:a0:
1f:71:04:07:75:9e:5d:ba:3a:9d:0b:d8:5f:53:03:
a4:b1:01:80:f4:5c:dd:c9:b3:a6:03:27:9d:fb:33:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:BE:7A:FF:7D:0F:5A:3E:BD:E4:B5:52:D0:4A:9E:E4:ED:92:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54B58D92F61611EF99F1A169762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.93.0/24
Signature Algorithm: sha256WithRSAEncryption
82:83:b3:59:75:39:0c:58:0b:99:0c:e3:dc:75:5c:5b:a7:78:
0f:f2:4d:e6:76:59:56:cd:fa:8a:1c:54:d6:e1:c1:62:6e:56:
0a:91:ea:d5:d6:e8:86:8f:60:b7:06:fc:ec:cf:6d:c6:1d:1c:
45:0d:9b:5e:8a:eb:f4:93:9a:b7:95:c8:12:c9:b0:49:b9:fe:
54:04:4e:9a:ad:d9:7e:74:27:76:8e:6b:9b:b0:f7:f3:9b:68:
0b:3e:65:c6:71:58:2e:67:e9:70:65:63:82:60:97:3d:3c:1e:
c3:c9:1c:15:a6:2d:69:a6:70:48:12:0b:5f:af:01:7b:cb:bf:
b6:dc:82:29:a3:e4:89:7f:3b:7c:d9:93:b1:ee:cc:a3:16:25:
51:47:8c:0a:cd:71:f3:65:9d:a3:17:f5:a5:6f:75:47:30:2b:
5e:26:ff:b1:7c:dc:a4:0b:c6:20:59:f1:eb:85:03:15:36:b7:
91:a4:79:54:98:ef:5c:06:35:b0:c9:fd:e7:76:20:a2:95:98:
f0:cc:25:04:49:94:de:eb:aa:b4:70:d1:5b:33:1b:b8:5c:9a:
30:dd:8d:a9:9c:b4:16:40:5a:d6:1f:6a:1f:8f:57:c4:78:5b:
24:c9:b7:d2:ad:c9:98:59:da:4f:7b:d1:db:9e:33:d9:d8:71:
76:3e:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:10:31 2025 by rpki-client