Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7D534AF6C411EFA5B8A191762E951A.roa
File: 5B7D534AF6C411EFA5B8A191762E951A.roa (raw, json)
Hash identifier: U6WmDh0+eG4Ylgx4Wkd72A34drHfvOhHScULojDooWo=
Subject key identifier: 3D:36:C3:EB:89:33:AF:D5:FA:57:B3:C0:96:ED:AE:18:D3:12:F0:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7D534AF6C411EFA5B8A191762E951A.roa
Signing time: Sat 01 Mar 2025 17:41:08 +0000
ROA not before: Sat 01 Mar 2025 17:41:05 +0000
ROA not after: Mon 31 Mar 2025 17:41:05 +0000
asID: 202656
IP address blocks: 154.219.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94017 (0x16f41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 17:41:05 2025 GMT
Not After : Mar 31 17:41:05 2025 GMT
Subject: CN=67c346b4-a4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:7e:7c:ea:66:09:ae:fc:b2:c0:6b:b2:07:
80:03:f8:a2:19:79:0b:03:98:d6:01:12:b8:31:3f:
84:5a:41:f5:49:a1:20:36:75:39:d0:b5:cc:51:29:
d3:a5:d5:2b:22:40:f9:a0:3a:c9:ae:2d:2b:ed:f8:
6e:38:8e:87:16:a1:bc:23:6e:97:45:d6:77:c4:a2:
db:a7:ed:4c:a4:99:80:96:7e:af:a9:77:56:6e:f4:
2d:69:43:a6:39:61:0e:9c:08:aa:84:df:65:b9:3f:
2b:9a:71:70:a4:f4:64:1e:e9:a6:dd:42:a6:ec:1b:
67:06:86:e9:f8:98:f7:32:cb:4d:1c:74:77:c2:96:
47:d2:06:04:a2:da:e9:0a:8c:71:28:6b:bf:95:fb:
da:bd:23:f5:c3:e3:24:fe:ca:07:45:50:69:7d:4e:
8a:2a:3d:60:a9:dc:3f:9f:7f:94:1c:6e:cf:8f:d7:
f0:16:0f:1c:3e:0e:dd:59:9f:41:4e:72:3e:24:0f:
ef:09:7c:93:ff:f8:a8:f9:a0:8a:45:87:0f:f1:e1:
d7:15:b2:e5:90:74:8b:f9:fd:7f:8c:c5:be:60:54:
f5:75:ed:41:f4:fc:4d:19:fb:03:df:f0:f6:a0:a7:
d2:e8:13:19:08:88:e8:b5:de:56:02:d8:a3:94:73:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:36:C3:EB:89:33:AF:D5:FA:57:B3:C0:96:ED:AE:18:D3:12:F0:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7D534AF6C411EFA5B8A191762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.243.0/24
Signature Algorithm: sha256WithRSAEncryption
75:25:1f:44:0f:87:46:f2:d9:5d:18:2d:da:80:71:42:46:90:
4b:b2:9b:5d:6a:4e:7d:14:b3:22:eb:06:ca:b5:75:dd:6a:77:
2d:8b:8b:f8:42:fb:48:8c:5c:74:02:3c:f6:73:d3:5f:81:f2:
63:63:3d:c7:7e:c4:98:ef:0a:22:4e:ce:46:56:99:62:54:62:
7e:d2:aa:d7:cc:a5:cd:a4:82:77:ec:14:07:6f:4c:82:93:1c:
7b:11:53:48:f0:31:9c:6c:b9:56:69:bc:39:a6:22:d7:39:27:
49:3e:b2:7d:cc:87:99:53:18:8f:06:53:bf:68:8a:ee:a8:67:
b5:0d:76:0f:38:4e:7d:2c:d1:85:e9:ee:16:36:47:63:37:24:
4e:43:c4:53:25:f2:ed:f3:ef:b3:cd:e4:b7:f9:f6:1a:0f:cd:
8f:22:98:6d:b1:29:2a:8a:47:05:69:4f:60:93:38:54:d2:25:
ec:70:13:9b:d7:cf:44:98:64:35:25:1c:ad:8d:55:b5:26:0d:
c8:21:a5:99:84:49:5d:38:13:d2:35:38:9b:e8:4c:13:8c:a7:
a4:c7:1a:f2:de:72:26:b7:eb:df:58:c7:76:e7:29:74:b6:3c:
de:7c:e4:4a:b4:15:e4:36:0e:dc:5a:70:c9:3f:5a:1c:9b:13:
df:0f:45:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:01:44 2025 by rpki-client