Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54CDBD3EF35211EFB9DE5F6B762E951A.roa
File: 54CDBD3EF35211EFB9DE5F6B762E951A.roa (raw, json)
Hash identifier: z44pYiuE2sNL051mb3+ofmjEImU115NsTBa4ldX0Hd4=
Subject key identifier: 1B:BE:3C:EC:AA:48:1B:3A:B3:C9:27:7D:E6:18:0B:28:8F:92:A4:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54CDBD3EF35211EFB9DE5F6B762E951A.roa
Signing time: Tue 25 Feb 2025 08:27:21 +0000
ROA not before: Tue 25 Feb 2025 08:27:17 +0000
ROA not after: Thu 27 Mar 2025 08:27:17 +0000
asID: 395793
IP address blocks: 154.200.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89503 (0x15d9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 08:27:17 2025 GMT
Not After : Mar 27 08:27:17 2025 GMT
Subject: CN=67bd7ee9-e474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:da:a1:4a:40:aa:3c:5b:e6:47:db:9c:c6:
fb:1e:58:ea:c4:a0:be:12:c2:5d:33:5a:9a:97:46:
bb:91:ed:b2:db:03:de:34:e4:7f:8c:7d:5d:5e:7f:
8d:05:3d:54:e9:5e:de:3c:5a:7e:d1:0c:44:30:49:
f8:2b:2b:35:74:2b:4d:a5:77:eb:e2:a2:32:b3:bc:
5e:dd:ec:48:59:e2:07:c3:c7:66:ff:51:35:14:34:
98:ee:28:13:e3:86:12:d0:ab:bd:16:c8:60:ff:71:
fe:28:38:65:b0:c0:b9:3c:31:b6:87:2f:92:c6:3f:
c1:3c:9a:ac:e8:0f:48:e2:98:c2:6c:51:6e:b1:6b:
47:e5:a8:90:bd:39:14:74:22:a4:21:67:ee:c6:cd:
92:71:89:c8:73:f5:38:5d:4e:2a:d1:a5:75:18:c1:
49:ac:d0:94:7d:c8:87:6e:57:51:a7:a5:d4:bc:e4:
ae:9d:68:d2:71:3f:46:32:c3:56:43:df:81:d6:8c:
b3:e8:83:ea:8b:5b:9d:7d:43:3a:ad:1c:bf:35:72:
67:6a:ea:4a:1b:f1:67:76:64:04:22:ca:75:96:8e:
34:d8:6d:23:ed:97:c8:ca:7f:67:78:22:5a:f3:8b:
eb:cd:3f:32:62:3f:bc:1e:df:1e:d6:d9:0c:bc:69:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:3C:EC:AA:48:1B:3A:B3:C9:27:7D:E6:18:0B:28:8F:92:A4:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54CDBD3EF35211EFB9DE5F6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:1b:0e:cc:b4:4b:3e:b1:53:f7:ea:e8:ed:9a:5b:22:8d:44:
c3:63:93:08:94:24:eb:76:3a:c3:fb:e2:6b:c6:b7:05:85:e5:
3e:e5:55:ef:c6:38:ed:32:a7:0a:46:91:09:8c:27:9e:a6:d2:
09:5d:be:ea:14:b4:b2:71:c8:3c:04:01:2f:cb:6f:79:ea:eb:
8c:52:30:b6:d6:ab:94:5c:64:1e:06:94:a4:b1:0b:eb:a1:28:
9b:aa:ff:76:68:cb:70:d9:30:8d:c6:9a:97:59:32:02:21:4b:
d5:c1:bc:86:63:cb:0e:3b:90:20:13:ab:cc:0e:c2:84:9d:89:
90:b1:ec:12:8e:8d:28:c1:bd:b1:49:9b:ca:8f:77:41:ee:fe:
a1:a5:a3:91:67:73:7d:05:f8:b7:c2:bc:a9:cc:14:4a:41:bd:
48:1e:63:e0:1e:a5:99:c5:04:7a:b3:9f:f3:db:9e:73:59:87:
ec:34:58:6b:24:a9:60:08:46:c9:84:c8:19:bb:14:ed:e5:7e:
fe:f6:d2:5b:a8:7c:54:b8:b7:1d:f5:a3:ba:f9:db:3c:65:e9:
05:1e:c4:22:e6:d2:0f:64:10:94:95:e2:31:78:8b:c3:7e:73:
e7:ab:ac:07:fe:ab:75:48:15:77:45:e2:df:a2:c4:4d:89:d5:
9d:da:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:16:12 2025 by rpki-client