Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/659DDE0EF67D11EFB4F0B4B5762E951A.roa
File: 659DDE0EF67D11EFB4F0B4B5762E951A.roa (raw, json)
Hash identifier: 4URFiN7lNJju+pH0ULzn7+CVSJT9qKV6EtILXCpjm+E=
Subject key identifier: 38:86:DA:BD:31:5C:9B:39:C3:0B:A1:03:BC:71:86:FD:8B:3C:8E:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/659DDE0EF67D11EFB4F0B4B5762E951A.roa
Signing time: Sat 01 Mar 2025 09:13:11 +0000
ROA not before: Sat 01 Mar 2025 09:13:07 +0000
ROA not after: Mon 31 Mar 2025 09:13:07 +0000
asID: 44559
IP address blocks: 154.209.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93573 (0x16d85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 09:13:07 2025 GMT
Not After : Mar 31 09:13:07 2025 GMT
Subject: CN=67c2cfa7-3bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:89:de:99:80:13:7f:84:6e:9a:d6:b2:c5:
aa:53:02:4b:5a:c6:e3:46:bf:7c:b6:16:e4:05:e9:
ee:28:f9:a4:84:21:b3:fb:cf:ec:e4:98:4f:8e:e4:
d7:81:cf:1d:3e:26:ca:d4:3a:0c:17:65:49:52:0b:
32:13:dc:21:fe:75:64:88:ce:e5:39:01:bf:00:e1:
24:a1:7d:80:5b:e1:0b:7a:fc:c6:46:e1:eb:07:7d:
52:47:72:1a:90:24:2d:99:76:34:1e:40:8e:87:3a:
92:41:43:21:65:0b:93:65:35:f1:a5:fa:f8:1c:26:
5c:dc:c0:5d:a3:fa:75:57:94:8e:7a:19:7b:5b:d2:
ad:26:55:d5:16:13:d3:6b:3b:e1:53:85:32:d5:fd:
56:72:d6:88:33:b0:b3:32:d2:88:93:01:87:7d:e9:
09:c2:37:fb:48:59:2b:47:7c:27:59:e2:6d:eb:43:
12:28:3e:e7:12:4d:b9:2d:13:ae:ed:9b:fb:21:2c:
41:4d:ec:7b:45:bd:ff:55:37:ae:ee:f3:93:99:02:
f5:bc:70:1a:ca:41:33:e6:49:d2:00:f2:ba:2f:6f:
03:b1:5d:0c:fa:21:cf:74:f7:78:ad:01:b1:8a:f3:
6c:58:32:2e:49:98:5b:d7:c8:99:82:3a:3c:43:cd:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:86:DA:BD:31:5C:9B:39:C3:0B:A1:03:BC:71:86:FD:8B:3C:8E:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/659DDE0EF67D11EFB4F0B4B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.156.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:15:ad:cc:91:c9:4d:19:ad:e2:b9:d1:da:8e:0f:9a:b7:70:
3b:23:15:4b:32:f1:e9:9a:8c:80:1a:bb:53:f4:0a:ec:cd:ac:
55:fb:c2:e0:4b:ba:be:b7:77:52:16:c8:e5:65:bd:21:af:38:
cf:c7:c3:5f:84:4f:d4:f7:94:65:1e:b4:70:ce:45:c9:81:02:
51:4d:7b:db:fb:f5:53:ac:86:08:49:85:a1:ea:6e:db:8a:4a:
00:46:f8:3a:8e:63:51:d3:bd:95:a8:52:21:17:4f:d4:66:80:
ff:04:87:ca:1b:c6:b9:27:c6:99:f8:02:00:28:e8:8b:92:29:
ef:b6:10:15:a2:40:d9:19:17:bf:3e:a1:fc:6a:8d:2d:ee:70:
f6:eb:c6:cf:26:e9:3e:d1:f4:b8:a6:15:e5:78:bc:69:07:a6:
dc:2e:fc:3a:ed:7f:dd:c9:ae:bc:bc:66:a8:f0:57:0f:22:8d:
78:94:8b:9b:b9:c5:91:37:9b:32:7a:fc:d6:1e:43:48:3e:57:
a0:ed:63:3d:46:d9:a4:61:04:ca:eb:8e:9e:a4:1f:1c:fa:5e:
8d:ca:46:6c:cb:da:f9:3a:9b:c3:ae:fe:fc:bf:3b:ac:d0:5f:
43:4c:f4:ef:aa:c7:bc:09:fe:7e:1e:bd:07:a2:e1:90:2c:36:
e8:91:70:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:18:01 2025 by rpki-client