Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7BE766F69111EFAD9BEFBA762E951A.roa
File: 5D7BE766F69111EFAD9BEFBA762E951A.roa (raw, json)
Hash identifier: oS2nSHw/IttUpUtv/V6AGB45NzvM8z3WOC+QbJtgxIs=
Subject key identifier: 24:D1:BE:5F:0A:81:FC:85:22:C4:56:E1:D6:01:02:AF:92:C0:2F:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7BE766F69111EFAD9BEFBA762E951A.roa
Signing time: Sat 01 Mar 2025 11:36:07 +0000
ROA not before: Sat 01 Mar 2025 11:36:03 +0000
ROA not after: Mon 31 Mar 2025 11:36:03 +0000
asID: 202656
IP address blocks: 154.222.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93709 (0x16e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 11:36:03 2025 GMT
Not After : Mar 31 11:36:03 2025 GMT
Subject: CN=67c2f127-7431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:2e:14:fc:91:90:c3:09:3e:4a:98:a5:37:
ad:3b:9b:d5:2d:77:6d:99:81:2d:60:8d:f8:2c:28:
08:5c:b7:c5:5d:29:4c:76:08:c2:d2:e2:ea:58:71:
d1:88:db:c3:93:97:70:97:29:49:b8:04:f3:80:f8:
62:33:4f:d2:90:00:8b:de:7e:4d:29:3a:b7:bc:8d:
a8:0b:eb:25:eb:ad:79:14:46:94:12:d2:ce:70:5a:
69:dc:b7:19:0a:16:96:54:d7:42:81:0c:a3:31:33:
13:3d:48:da:67:37:39:0a:02:f6:ed:b8:38:7c:98:
0a:86:5f:1c:57:d8:97:06:97:4b:03:6f:98:cf:ab:
f9:d4:4b:88:6a:bf:e7:48:6d:3c:3c:ac:af:f9:38:
fb:2c:80:7c:8b:e7:b1:fc:9d:e2:bc:eb:e3:c6:97:
a4:80:c2:af:a8:2a:dc:90:17:e5:31:f9:37:5b:b5:
e5:f8:09:ec:82:ff:f6:e3:dd:e5:56:8f:bb:56:8b:
b2:52:14:0e:6b:45:76:af:1c:9d:30:8f:46:2c:a8:
3e:e5:21:ce:5a:10:07:b7:81:bc:a7:67:da:c5:ff:
fc:26:79:73:d3:28:bd:d1:3a:c3:b4:bd:eb:78:8d:
9d:bd:94:31:db:fe:8e:7e:38:67:6f:20:78:65:73:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D1:BE:5F:0A:81:FC:85:22:C4:56:E1:D6:01:02:AF:92:C0:2F:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7BE766F69111EFAD9BEFBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.15.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:ad:18:8d:09:0e:6c:c7:0e:62:79:e4:80:71:96:b8:a7:6c:
ce:c7:e2:60:4e:7b:ed:6d:9a:30:85:90:10:d0:d4:88:2c:77:
76:74:c4:51:6b:5b:15:ab:fa:13:cd:c7:4b:65:bd:59:c5:b0:
ed:51:f1:96:5d:01:e7:ba:2c:bf:dc:ec:9c:73:f3:41:b3:ca:
1b:85:bb:b9:f3:20:87:1b:98:c9:11:06:a5:14:04:26:97:4f:
d5:72:e7:10:84:12:30:89:43:22:f8:90:e5:47:b1:4d:d1:02:
f4:58:42:63:9c:9b:1a:49:20:b3:ce:a5:60:11:89:f9:c9:b1:
e5:d7:02:8e:c3:5e:73:46:40:7d:94:cb:2d:8d:6c:ff:87:b2:
05:4e:4d:24:75:05:f5:0d:77:b5:fd:3a:7f:e9:49:25:4b:62:
c2:e7:9e:1e:ec:4c:f5:74:77:33:6f:1c:29:07:60:25:cd:6a:
78:da:e6:a9:cf:d4:c1:b1:18:72:8b:72:3d:81:26:1c:b5:d3:
58:d8:24:0c:5b:06:d8:e2:44:fa:70:c0:df:c3:42:56:4e:1c:
58:6b:41:9a:ab:dc:09:8d:3e:a0:2a:8a:03:62:d6:0a:32:91:
8a:79:77:71:37:87:a5:32:e2:f8:db:79:07:37:cb:52:5c:50:
51:6a:17:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:17:11 2025 by rpki-client