Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A041560A1411F0AC27CB51762E951A.roa
File: 62A041560A1411F0AC27CB51762E951A.roa (raw, json)
Hash identifier: 0L/WFIFlOY4NarhlDEGBsyXzfSwNoKrMOVfOwMOXHNo=
Subject key identifier: CD:C1:15:32:EE:41:11:44:15:3F:F1:4C:7F:E1:2E:49:7E:E0:52:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017653
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A041560A1411F0AC27CB51762E951A.roa
Signing time: Wed 26 Mar 2025 07:31:52 +0000
ROA not before: Wed 26 Mar 2025 07:31:48 +0000
ROA not after: Fri 04 Apr 2025 07:31:48 +0000
asID: 7018
IP address blocks: 154.207.152.0/23 maxlen: 24
154.207.154.0/23 maxlen: 24
154.207.156.0/23 maxlen: 24
154.207.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95827 (0x17653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 07:31:48 2025 GMT
Not After : Apr 4 07:31:48 2025 GMT
Subject: CN=67e3ad68-9977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:5f:22:f9:6a:26:fd:ca:a6:fc:9c:1e:9e:
cb:3c:c2:c6:98:f0:da:75:82:b4:cd:96:df:4e:7a:
0e:70:f1:57:a4:69:c0:8a:a5:98:44:8c:a7:fb:99:
7b:95:e4:02:e3:50:f2:12:01:90:9d:51:e8:32:56:
2b:15:78:2d:58:9d:73:3b:4e:67:c6:0a:62:2c:71:
94:9e:b7:7e:65:f8:7f:20:7a:59:63:24:d7:e6:4f:
2e:4a:6b:76:a6:f6:73:0b:06:b2:3c:e3:2b:be:2d:
48:1d:30:c3:b7:5b:18:15:70:7f:e5:7f:be:aa:dd:
3f:a8:5d:43:2c:e1:ad:0d:30:3d:e1:60:d6:77:7d:
b6:b3:9f:b2:8d:00:b6:4e:7e:83:bb:c3:5b:a2:bb:
7f:4e:a7:50:31:2b:73:e7:82:a0:9d:23:6a:bb:23:
75:9b:84:69:2e:57:3f:25:b8:dc:d8:0c:b6:f6:49:
5e:b8:50:b6:01:87:f6:9f:46:09:78:4a:d7:a1:e7:
61:57:e2:d2:61:0b:f2:35:50:d1:0b:23:18:ec:3e:
00:38:23:8c:3f:e2:f0:c0:dd:01:d5:0d:67:2d:04:
21:46:f4:96:cf:a9:a9:34:a6:27:de:31:f0:6b:27:
d6:24:15:2a:e3:82:4a:1f:a5:a2:e5:35:81:16:a8:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:15:32:EE:41:11:44:15:3F:F1:4C:7F:E1:2E:49:7E:E0:52:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A041560A1411F0AC27CB51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.152.0/21
Signature Algorithm: sha256WithRSAEncryption
77:48:5a:ad:8d:06:62:70:ae:ee:50:7e:1d:17:8e:25:ed:d6:
73:98:fe:66:dd:02:bd:53:e9:a7:70:d3:b0:9c:d7:9d:15:33:
2a:34:dd:8e:02:3b:61:06:8a:e0:e1:94:8b:00:5b:b5:38:82:
b2:05:35:17:ff:1c:03:f7:65:17:92:97:81:55:67:78:dc:86:
f7:a7:ff:4b:01:82:dd:51:f2:e9:3c:eb:be:b9:17:97:5f:e9:
af:fb:6b:7e:97:1c:2c:d6:b6:56:98:49:11:dc:a2:66:e8:a4:
8f:10:3d:46:03:1b:66:99:2e:9c:f5:18:a3:3a:d0:0e:5d:80:
13:51:8b:9a:15:37:7c:79:f6:6b:ad:1c:6f:87:63:15:9c:9c:
a3:af:b6:14:a4:d3:12:d1:bf:7d:35:65:37:99:13:57:08:cd:
86:de:7e:01:ef:5e:0a:67:ef:93:32:3d:8e:1b:18:04:db:90:
6c:4e:f6:4f:ff:89:f9:7d:12:91:bd:72:29:b4:14:90:ec:49:
01:62:94:ec:d0:4f:32:d3:06:af:06:6d:2a:ce:76:87:fd:81:
1a:3c:7c:af:28:32:6d:81:46:47:8e:d0:3d:68:ca:51:d3:3d:
67:c5:35:ec:ed:be:78:e4:92:20:11:2f:7c:e3:84:e1:fa:ea:
f7:d3:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:36 2025 by rpki-client