Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62294342FA6211EFAF67549C762E951A.roa
File: 62294342FA6211EFAF67549C762E951A.roa (raw, json)
Hash identifier: VIyaag0KJrsGAebzwt+9Ch86m1l6PVt2/uMidxkaSn4=
Subject key identifier: 2C:2F:B8:FF:42:A7:6D:24:75:1C:10:7B:B9:16:2E:D2:AF:23:D6:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017292
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62294342FA6211EFAF67549C762E951A.roa
Signing time: Thu 06 Mar 2025 08:09:54 +0000
ROA not before: Thu 06 Mar 2025 08:09:49 +0000
ROA not after: Wed 26 Mar 2025 08:09:49 +0000
asID: 61112
IP address blocks: 154.204.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94866 (0x17292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 08:09:49 2025 GMT
Not After : Mar 26 08:09:49 2025 GMT
Subject: CN=67c95851-d3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b2:0a:79:dd:51:1d:f9:13:ba:64:20:9f:32:
d9:de:a8:c4:3b:3a:8c:1c:58:f3:88:19:c5:a4:8a:
09:9d:2d:7b:90:1b:33:66:92:7d:c6:63:35:07:3d:
8d:19:42:7e:cb:13:1d:c4:53:ea:1c:61:7e:14:c3:
44:2d:4a:f2:8c:e1:13:3b:54:98:03:a4:5f:2a:d6:
85:b5:da:fe:d1:ab:d9:20:bf:9b:11:24:b3:5e:e4:
3b:b5:93:9d:9f:9c:cf:76:cd:1a:37:54:b0:13:16:
ed:32:55:7d:d8:18:0c:ce:cc:36:6a:b9:d6:84:b3:
61:ed:ec:e6:32:cf:9b:06:94:54:9b:40:b1:a8:65:
fd:55:58:89:ff:f4:d7:d5:0d:ad:db:93:49:85:c2:
cd:b3:97:a1:76:f1:32:48:ac:35:cd:48:75:ae:b4:
58:e9:3d:60:36:12:fd:4c:e3:c1:63:22:17:db:30:
cc:1b:61:e4:91:bc:25:2c:2d:cc:f6:04:6e:41:b9:
01:88:b1:9e:e2:13:98:dd:e4:c3:8a:d7:18:25:29:
19:66:17:7a:cf:44:a2:16:73:61:7e:c4:39:fd:fa:
56:61:4b:af:ea:d3:75:1d:ca:a0:99:18:a7:2b:8c:
d7:64:b2:28:14:a8:78:31:eb:5a:6b:7b:95:1f:46:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:B8:FF:42:A7:6D:24:75:1C:10:7B:B9:16:2E:D2:AF:23:D6:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62294342FA6211EFAF67549C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.183.0/24
Signature Algorithm: sha256WithRSAEncryption
be:72:6b:74:86:fe:b2:02:11:58:e7:e2:c1:7e:6a:42:c5:ed:
f8:4e:5d:64:5c:6c:a9:15:96:44:c8:e0:c3:0e:a3:4b:ac:a6:
07:b4:f5:20:55:f2:4a:37:e7:e7:88:66:34:bf:6c:77:49:8d:
56:6f:6f:df:56:32:d3:7c:81:b1:73:7c:03:ab:5f:a6:a8:69:
c3:c9:2e:27:54:05:fb:d3:ed:5a:b7:f3:75:f8:92:59:3b:fc:
69:16:14:76:cc:2b:d0:69:43:4a:de:a5:5b:4c:b0:10:8a:2e:
39:3a:fd:0a:91:b1:cf:3d:72:b2:76:af:a3:3d:fd:87:01:ad:
0f:5f:fe:2c:36:3d:0d:dc:df:57:92:8e:e7:46:81:af:ea:e5:
b2:a4:2c:9f:b5:fe:77:64:9e:88:68:50:25:8e:f9:5c:00:12:
78:24:90:cf:6c:8f:7f:de:f8:01:bd:74:5f:e6:2d:66:e5:67:
df:44:61:1b:24:c5:cb:b1:0f:e4:fb:26:2f:52:12:78:2d:4c:
26:db:0d:d0:73:ff:15:d7:02:4f:1b:11:ec:fc:b2:67:a8:3c:
d7:fb:7b:9f:4e:83:a8:7a:5e:31:83:3f:a3:46:bd:ef:07:f6:
91:f0:0d:93:cc:19:c3:ac:df:35:05:6e:0b:f6:f1:24:6a:6c:
e1:64:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:53:18 2025 by rpki-client