Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/636A5F98F52611EF86C71D82762E951A.roa
File: 636A5F98F52611EF86C71D82762E951A.roa (raw, json)
Hash identifier: 1HKHaiTLLIRT9c8VVO+7BcEvIJq67sXlcaCuqQ1ADGM=
Subject key identifier: 86:3B:AD:AE:9E:BB:14:76:E1:DC:75:78:54:72:3B:3C:2B:94:8C:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01694A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/636A5F98F52611EF86C71D82762E951A.roa
Signing time: Thu 27 Feb 2025 16:17:50 +0000
ROA not before: Thu 27 Feb 2025 16:17:46 +0000
ROA not after: Fri 28 Mar 2025 16:17:46 +0000
asID: 395793
IP address blocks: 154.193.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92490 (0x1694a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 16:17:46 2025 GMT
Not After : Mar 28 16:17:46 2025 GMT
Subject: CN=67c0902e-ed3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:3f:33:49:7f:8c:a0:93:ad:98:7a:49:1b:
08:29:52:eb:81:00:20:82:4e:fc:ba:4c:15:6e:45:
c2:c7:a5:98:d5:3a:ab:9c:a9:6c:31:00:41:bb:c9:
f2:68:5b:12:4e:b0:7e:05:1f:24:ef:04:2e:2a:3e:
e8:55:5c:fa:4f:5e:50:a8:8f:6d:fb:71:79:00:44:
f3:79:0d:d4:30:72:88:14:70:af:ef:0c:11:a6:e2:
0b:e4:00:4a:54:e2:87:d0:27:f7:df:5c:9a:eb:85:
ad:a2:27:60:fc:89:1b:a7:af:0c:e0:82:a8:18:51:
16:1d:75:e6:27:6c:92:94:6f:db:25:34:75:5d:fa:
02:14:86:b0:15:8a:e4:e0:da:e8:77:57:b3:b4:1d:
29:2f:89:fe:ed:57:0c:26:10:54:95:59:89:52:f9:
1c:d0:7d:71:b7:38:bd:1a:66:72:e0:6f:8f:e8:ac:
0b:c1:e7:a7:08:d0:0b:ba:32:6b:b0:4a:ff:2f:01:
09:2a:bd:8d:12:79:b5:93:e1:d0:e1:be:55:0e:bc:
66:34:6b:23:d8:7d:3c:9d:af:18:95:39:57:7a:5d:
7a:09:a3:f8:f9:fa:e3:21:70:dd:be:6f:c8:1e:87:
65:8b:0f:fa:29:ef:6f:13:e0:c6:3d:7a:99:bd:f9:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3B:AD:AE:9E:BB:14:76:E1:DC:75:78:54:72:3B:3C:2B:94:8C:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/636A5F98F52611EF86C71D82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.105.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:d0:d3:2b:59:d5:fd:f5:89:10:6e:1d:96:3c:db:56:da:43:
1f:ce:fe:d9:a3:a5:af:fa:24:4c:48:f1:6b:22:e1:06:71:79:
c4:aa:d2:4e:d3:d3:68:58:14:1e:b2:66:43:95:9c:da:b4:01:
31:61:d1:55:a5:6a:05:4f:d2:a7:c6:7f:77:43:2b:8c:8c:7a:
11:24:7f:74:92:f9:44:86:f5:e3:e4:44:07:a1:77:93:08:0b:
c4:e5:2f:ed:ce:94:f1:88:63:bd:01:fb:3a:27:a2:50:61:3d:
e3:8d:76:3a:74:71:98:0b:17:d6:8d:63:f3:fb:e1:57:bb:fc:
e7:44:67:d4:f0:a7:de:48:c8:f1:f7:c1:95:24:20:c2:eb:b5:
ca:a6:f3:80:fa:4f:d0:75:d6:90:40:5f:ce:df:c7:fa:cc:0b:
7f:c4:38:73:6c:82:b3:f0:ed:30:b0:ae:dd:24:14:26:fe:7d:
ee:7f:c3:3d:6f:53:2c:c1:95:9a:5d:af:a7:8e:76:2f:bd:51:
af:68:59:93:1e:59:40:da:a2:25:ba:84:ae:22:4d:31:53:85:
20:c3:8c:74:80:08:c3:92:c2:be:ba:b3:12:e5:2a:34:7a:c4:
6c:c7:9d:d6:cc:f1:4e:23:f1:17:2d:0d:23:54:24:6b:ec:b6:
dd:c2:1c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:11:07 2025 by rpki-client