Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ADE90FEF62B11EFA5C42A77762E951A.roa
File: 6ADE90FEF62B11EFA5C42A77762E951A.roa (raw, json)
Hash identifier: KleZuVV+EQL+Mg+YDBvkR+ZmbDwkZhtJ/e+uVeylCvU=
Subject key identifier: 61:82:C6:04:AA:E7:F0:28:E7:C7:FB:D4:C8:23:39:23:D6:BD:0E:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ADE90FEF62B11EFA5C42A77762E951A.roa
Signing time: Fri 28 Feb 2025 23:26:21 +0000
ROA not before: Fri 28 Feb 2025 23:26:17 +0000
ROA not after: Wed 26 Mar 2025 23:26:17 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93389 (0x16ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 23:26:17 2025 GMT
Not After : Mar 26 23:26:17 2025 GMT
Subject: CN=67c2461d-a83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:75:fc:a3:c0:81:b7:28:f7:9d:76:f3:bb:
f4:4a:2c:b3:5e:3d:19:20:57:10:76:d5:6a:2f:7d:
41:6f:06:3a:60:72:cf:6a:3f:f8:7a:ab:f3:af:36:
73:09:c7:5a:77:c9:3e:92:13:65:07:31:2e:e3:9b:
25:c3:1c:4a:4c:56:f0:d4:0b:da:b9:57:25:f5:dd:
e6:6b:68:0a:d6:75:51:cb:c4:ba:29:e3:9f:3d:94:
a0:b6:92:57:e4:b6:a0:70:48:a5:0f:22:69:48:e9:
38:a9:3d:c9:a5:20:0f:07:12:c3:8e:54:f0:1a:15:
b3:19:09:83:53:6d:7e:29:6a:6f:93:7b:6b:da:be:
79:30:ba:79:6b:8f:b3:b6:fc:24:bf:bb:d4:14:fe:
ff:ae:d5:5b:24:bf:81:cc:16:85:23:c3:d8:c8:ed:
b6:b6:97:c1:67:6c:bf:f3:54:44:d3:71:59:0f:2d:
41:1c:7a:fd:2c:e2:a0:8d:47:2e:d6:d2:e4:7e:db:
a2:d4:dc:18:d4:57:1f:d2:90:06:73:5a:a7:c8:ed:
a5:76:cd:94:38:1b:c4:51:14:7a:30:0c:06:dd:34:
59:76:eb:d1:24:71:a9:c6:79:9a:8c:46:23:1c:85:
15:75:11:50:66:94:69:e6:79:d4:fa:98:80:e5:d4:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:C6:04:AA:E7:F0:28:E7:C7:FB:D4:C8:23:39:23:D6:BD:0E:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ADE90FEF62B11EFA5C42A77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ee:c9:9d:f4:13:86:6c:1a:c2:87:5e:0d:32:ff:6b:fd:36:
86:24:6f:ca:a6:91:c4:8e:ca:1a:0b:87:b7:c3:95:78:95:18:
85:e4:21:9d:e7:31:d4:18:8c:b3:65:fe:62:a5:9e:f4:88:76:
1c:b5:ef:66:80:2a:37:ba:00:2d:67:fd:28:01:30:3a:6b:df:
58:f4:bc:f9:06:c8:ef:5f:8e:16:9a:d7:8f:85:fb:26:38:96:
51:ee:cb:6d:f6:37:e1:90:2e:00:09:65:fc:cd:8a:b1:37:bd:
50:58:5e:29:ca:bb:43:a8:71:13:6a:86:40:79:c6:5c:05:4a:
36:18:b2:bb:42:8e:22:f2:87:e7:54:6f:c7:52:91:b0:78:ac:
ce:98:2c:5c:4c:1e:5a:2a:3d:16:9d:35:af:d0:29:b7:9d:00:
a8:b7:97:b6:b1:6f:ea:59:06:43:1a:4f:4d:c3:91:78:c0:ce:
a0:04:3e:4e:f6:e8:a2:86:8d:34:c1:e9:9b:f5:c5:42:2f:a4:
21:b3:08:5a:c0:ff:9e:cd:61:7f:b8:95:25:8d:e2:7e:af:5f:
b3:3f:62:93:b7:d0:37:be:04:1f:10:69:df:3b:fb:0c:49:ff:
b7:ba:fe:bb:5b:7f:02:bd:20:ea:96:3c:c2:cc:7d:95:ca:06:
7c:8c:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:24:44 2025 by rpki-client