Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7E0698F33211EFB65C0095762E951A.roa
File: 5D7E0698F33211EFB65C0095762E951A.roa (raw, json)
Hash identifier: x7nsgonu8jNiI/iFdwUu02pfc7wHZ0o4w5s+CpgvfqQ=
Subject key identifier: AE:B3:3F:13:D2:9D:CF:B4:3D:AF:DA:B5:BA:31:97:52:58:62:04:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7E0698F33211EFB65C0095762E951A.roa
Signing time: Tue 25 Feb 2025 04:38:31 +0000
ROA not before: Tue 25 Feb 2025 04:38:28 +0000
ROA not after: Wed 26 Mar 2025 04:38:28 +0000
asID: 5065
IP address blocks: 154.94.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89389 (0x15d2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 04:38:28 2025 GMT
Not After : Mar 26 04:38:28 2025 GMT
Subject: CN=67bd4947-99f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:fa:e8:7c:5d:eb:9e:76:ec:f1:3d:1c:49:
8f:b5:07:87:89:42:4d:d4:97:08:95:18:fd:3a:3c:
25:a9:c2:20:5b:96:ef:3a:aa:7f:fe:db:7f:34:cb:
21:c1:97:30:08:b0:7e:c6:15:25:5d:ca:2c:e8:45:
63:71:88:bc:e2:83:20:5b:2d:dc:32:92:e2:4c:18:
39:ce:d8:81:8c:9a:e4:ba:c5:48:85:83:ed:e7:bd:
66:5f:f1:8a:10:58:bc:8c:9d:fb:33:b5:3f:a3:64:
d5:06:42:38:de:8f:b2:1e:18:79:b6:b9:9f:be:da:
82:a8:a4:d1:c3:6e:de:82:35:9a:86:aa:2d:89:2f:
cb:94:1e:93:5f:ee:e4:c8:50:d8:53:c9:f4:06:55:
8e:1f:61:d9:db:7f:b7:42:bf:58:f7:ca:76:62:6b:
ee:38:d3:a5:80:48:f3:7e:e9:95:48:50:37:f1:b1:
32:1d:3f:e5:20:dc:7c:4f:6f:cb:97:ca:95:47:c1:
f4:04:34:ad:79:2f:2e:10:d6:5a:75:70:93:79:6b:
49:a0:aa:75:d4:52:d5:db:56:0c:ae:2d:47:b6:24:
f3:ad:7f:b8:41:96:7b:26:7b:57:ca:c1:0b:28:f5:
63:80:0c:71:00:b7:cf:b2:b3:b8:25:c3:d1:67:ba:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B3:3F:13:D2:9D:CF:B4:3D:AF:DA:B5:BA:31:97:52:58:62:04:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7E0698F33211EFB65C0095762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:98:be:7b:a2:04:75:8a:9f:da:56:bd:5a:40:0c:fe:47:09:
c2:56:97:86:be:6c:b4:11:53:ce:72:fe:dd:e4:e5:bd:e9:e7:
de:42:7d:37:75:94:db:65:b7:67:8a:ff:08:b4:c8:87:14:46:
e6:2b:b8:ad:fd:b5:16:60:9d:31:c3:b8:62:12:06:14:9a:e6:
cc:6e:dc:d4:de:6e:3b:32:6e:e9:89:6c:d4:00:12:48:ab:32:
ad:7e:c9:de:4b:3d:c0:4f:b4:6e:d9:89:7c:cb:00:79:73:9b:
8a:d1:e2:4b:0c:7f:ec:8f:06:bd:cc:35:33:71:7d:3e:da:bd:
e0:b4:f8:7d:99:ac:a5:a0:70:2a:6b:9a:81:c8:3a:b9:26:ac:
e1:5a:9f:30:e6:a8:9d:c1:ea:b9:87:d8:1c:42:11:11:77:9a:
c9:2b:dd:b8:84:9e:c7:21:73:07:ff:aa:2c:17:3a:7d:06:5b:
d3:3f:8b:b2:01:40:55:89:66:56:39:b7:bd:c0:cb:fe:65:df:
c1:e0:45:99:49:c5:28:c2:33:e7:73:d5:d1:be:75:bb:b0:f9:
65:d5:b8:ce:55:27:c0:3d:0b:4c:1f:9f:d2:c5:49:b3:29:d1:
00:ab:5c:da:2c:56:6f:25:a9:ff:8d:48:a7:a8:f7:2e:0a:4f:
99:9a:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:26:19 2025 by rpki-client