Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60B8EC5EF6B311EF91338C9F762E951A.roa
File: 60B8EC5EF6B311EF91338C9F762E951A.roa (raw, json)
Hash identifier: INiI/v1hV+9XhXtQYLgN4b4IAhtPsKott2znsVUsdnU=
Subject key identifier: 4F:61:C5:C0:B9:13:0F:2A:B1:99:49:A2:2E:58:02:3F:53:97:15:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016EB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60B8EC5EF6B311EF91338C9F762E951A.roa
Signing time: Sat 01 Mar 2025 15:39:35 +0000
ROA not before: Sat 01 Mar 2025 15:39:32 +0000
ROA not after: Mon 31 Mar 2025 15:39:32 +0000
asID: 202656
IP address blocks: 154.219.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93877 (0x16eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 15:39:32 2025 GMT
Not After : Mar 31 15:39:32 2025 GMT
Subject: CN=67c32a37-5ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f9:0f:37:66:04:22:ad:10:dc:1e:0e:76:2a:
73:11:5f:56:62:c3:b8:5e:34:9e:c7:63:a1:fa:68:
0b:f1:14:ef:d1:9e:ab:08:8c:ee:fe:bf:fd:19:f4:
ed:4c:55:b5:8e:16:5e:db:f2:c5:b6:d4:69:6e:68:
2a:3c:03:83:db:83:e7:0d:2b:9b:5a:42:63:90:1d:
4c:67:4d:81:48:a3:40:74:61:61:48:9d:9e:4d:3a:
2d:59:4e:5d:6a:1d:47:f8:00:de:2b:20:02:00:67:
c5:47:2e:83:6d:1e:20:5c:a1:7d:5b:6e:2f:94:8d:
24:34:9a:ba:6d:f3:6f:3e:b5:a8:2b:b4:67:d1:92:
1c:7a:3d:b6:5d:b3:36:bc:10:00:37:d3:61:6b:23:
e3:9e:80:e2:a4:be:e4:43:c1:a5:63:73:ed:13:49:
fb:c6:99:24:ba:78:b0:00:bd:80:8b:1e:f1:36:4d:
9e:2d:9c:40:b7:f9:ce:6c:ee:24:5a:4b:78:85:eb:
d7:13:6d:1e:d4:b3:49:74:24:92:0e:9f:a9:12:0d:
79:3a:49:9d:e7:27:9a:ad:7c:59:41:ff:f9:5a:8c:
15:37:99:5e:bc:5f:05:24:64:34:9d:ac:1a:c3:71:
ad:4c:f9:bc:9a:cc:47:fb:e8:da:27:45:ae:a6:a0:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:61:C5:C0:B9:13:0F:2A:B1:99:49:A2:2E:58:02:3F:53:97:15:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60B8EC5EF6B311EF91338C9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:44:71:53:a4:e6:c5:84:78:08:52:dd:f4:6d:16:69:4a:9c:
92:50:88:26:ac:46:2a:57:44:e0:be:2c:5b:f4:7e:95:cf:0e:
c5:68:8e:7c:03:bf:56:6d:96:42:23:b3:d3:9f:c5:4c:6d:61:
a1:59:33:4e:91:78:91:f2:42:f6:14:33:59:bc:4f:e4:55:cc:
ac:1e:70:0c:2d:58:71:b2:0d:34:76:a3:cb:a3:f1:6d:99:59:
e6:6c:86:31:0c:29:da:7a:94:4a:e6:44:be:9b:4d:be:73:c1:
ab:1d:e6:3f:26:62:f8:ad:3d:6d:cc:14:be:f3:ec:5e:a6:88:
64:fd:95:6c:1a:a2:e4:43:b4:01:0a:40:f4:71:f2:a7:0b:93:
9f:78:ae:44:1c:35:03:be:06:2e:92:2c:da:9e:a7:e5:d0:52:
47:75:32:8c:75:ce:71:99:53:24:28:2f:94:78:74:82:c1:7c:
d4:47:1f:f0:d5:33:c9:1c:a4:27:ce:10:22:50:f8:b1:e8:0d:
cd:b8:4d:35:c7:63:ba:91:0d:b0:4c:0a:fb:e4:47:4e:ff:4a:
8e:30:42:8b:30:7b:b0:91:bd:1f:3b:d1:59:17:eb:ff:19:49:
fd:fb:96:63:f8:f8:d2:a3:71:2f:6a:d3:83:f7:26:d5:1a:9a:
b3:92:5b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:17:10 2025 by rpki-client