Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/626C13B2F40D11EF89EE9B64762E951A.roa
File: 626C13B2F40D11EF89EE9B64762E951A.roa (raw, json)
Hash identifier: 5QCCZn6Dl+KIkl0/Ug0KfJvmv92re5E2Po2Sel6iuXg=
Subject key identifier: 87:80:D1:92:58:41:84:B0:76:BE:16:D0:9E:FE:5E:F5:E6:C0:8B:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/626C13B2F40D11EF89EE9B64762E951A.roa
Signing time: Wed 26 Feb 2025 06:46:19 +0000
ROA not before: Wed 26 Feb 2025 06:46:16 +0000
ROA not after: Fri 28 Mar 2025 06:46:16 +0000
asID: 214413
IP address blocks: 154.193.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90367 (0x160ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 06:46:16 2025 GMT
Not After : Mar 28 06:46:16 2025 GMT
Subject: CN=67beb8bb-1876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:0a:13:3a:b2:54:1b:76:e6:86:70:78:21:
f0:fb:8b:b9:0f:d3:03:9f:21:76:c9:3d:f0:ba:11:
04:f6:a8:fc:b4:cb:7c:51:f4:25:33:24:7d:a5:2f:
41:86:fc:34:57:07:32:b9:4e:45:a6:bd:a4:ff:e8:
6d:30:a5:e5:98:e7:f2:c0:08:e1:ab:30:ae:19:4a:
eb:a6:c2:7a:24:bc:4f:ae:69:49:27:26:40:d7:49:
01:a3:b6:54:d3:6a:f2:74:72:99:c2:e7:f2:d7:64:
4a:48:ff:1d:42:a4:f3:42:1d:bc:09:67:db:a5:1c:
84:8e:78:7a:35:f2:21:91:53:97:05:6a:40:27:e7:
83:22:26:ef:1d:9a:66:04:d5:81:70:f0:95:11:92:
20:9a:e3:b9:39:88:82:43:ea:cf:0d:73:cb:7c:c3:
29:03:15:ac:b3:bf:19:9d:09:e6:e8:6d:bd:2f:fa:
0c:0b:75:1f:32:73:22:38:57:38:da:69:cc:3f:7b:
6e:23:c3:9f:a6:a4:39:e7:76:8b:a5:7b:1b:89:cc:
4f:6d:2b:4e:f8:eb:75:f4:28:28:13:ba:35:07:8f:
3d:f4:b9:d8:c3:27:54:b1:9b:ea:5a:1f:c0:61:e0:
98:44:f2:aa:17:55:e9:5c:4e:84:0a:d1:52:91:aa:
d1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:80:D1:92:58:41:84:B0:76:BE:16:D0:9E:FE:5E:F5:E6:C0:8B:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/626C13B2F40D11EF89EE9B64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:1b:b9:d8:3a:dc:f1:15:57:ef:ae:4d:01:75:22:86:19:f4:
80:62:c8:b1:9c:34:2c:71:a0:cb:a2:47:bb:72:43:95:9c:44:
d4:22:ae:22:80:4a:b4:be:91:83:e1:00:87:46:b4:df:e6:a0:
85:56:1f:05:dc:52:f9:db:3e:29:6d:29:b1:63:52:69:c7:6b:
97:42:6e:57:90:1f:3d:c4:dc:ab:7b:cf:3e:c8:a4:b1:20:d1:
39:6d:41:35:26:5e:6f:ce:6e:71:d0:49:47:0e:48:1b:49:31:
73:f8:0d:14:38:58:a1:1b:c0:6e:0d:4a:1d:5c:3d:66:d7:f3:
e6:f7:6d:4d:aa:a4:ce:2f:9d:6d:3b:b5:b3:65:2c:b4:61:29:
30:f7:71:4d:d1:4b:5b:18:5d:5c:a2:5b:ef:3f:51:b1:d4:fd:
fa:12:f5:84:94:ca:c9:51:ed:2a:68:3a:2c:60:74:0c:44:27:
f9:2a:6a:cd:59:10:77:ff:ba:fb:db:8a:83:67:14:10:63:c5:
4e:61:91:da:b3:f9:a5:3b:d2:6e:3f:db:ed:e1:42:49:91:a0:
67:b5:3a:28:48:fb:f8:54:b8:16:ff:b0:7c:bc:62:37:3d:8f:
33:08:95:b8:e0:55:94:02:69:78:fd:6d:09:28:f4:56:65:fb:
dd:20:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:06 2025 by rpki-client