Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E55DFD4F4E711EFBABF2E57762E951A.roa
File: 6E55DFD4F4E711EFBABF2E57762E951A.roa (raw, json)
Hash identifier: wIimZAWYH0XyhZt/aaqKAJ6fQCBis5pxBTJlVsc9rRs=
Subject key identifier: F1:4A:2B:8B:87:9D:BE:94:12:28:E3:39:EE:0F:79:B0:A2:E5:74:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016701
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E55DFD4F4E711EFBABF2E57762E951A.roa
Signing time: Thu 27 Feb 2025 08:47:10 +0000
ROA not before: Thu 27 Feb 2025 08:47:06 +0000
ROA not after: Wed 26 Mar 2025 08:47:06 +0000
asID: 62240
IP address blocks: 154.195.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91905 (0x16701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:47:06 2025 GMT
Not After : Mar 26 08:47:06 2025 GMT
Subject: CN=67c0268e-9dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:18:9d:a0:a8:27:cb:df:5c:34:ba:ab:bd:
55:56:a4:93:4e:06:8b:26:65:d9:29:b8:92:e0:c6:
33:7d:73:a6:c9:48:7b:2c:9a:18:e8:fb:c3:77:80:
ee:0e:b3:0b:d3:7c:5f:4b:ce:5a:93:9f:70:22:97:
76:fb:85:6c:66:8f:51:d2:38:bb:1b:eb:12:bb:c6:
4c:90:8d:0b:72:cf:12:45:76:a4:58:d9:77:7d:90:
c4:75:fa:51:2c:86:61:59:de:ab:f9:69:5a:e0:eb:
bb:4e:4f:b7:f7:70:00:04:99:47:e2:89:f4:76:38:
b7:d2:41:b2:1e:e5:07:03:0d:e8:8e:96:8e:9a:98:
59:59:50:b0:66:c1:1d:bb:b1:04:29:ec:4f:56:11:
fd:02:9a:60:69:3b:14:30:dc:23:e4:5b:bd:87:52:
3c:d4:eb:90:64:a1:eb:59:69:30:d9:ad:9e:8c:d2:
5b:58:25:74:4c:12:fd:6e:d9:a0:ea:68:a4:51:be:
05:d5:ee:52:15:3e:26:f9:18:30:41:ac:64:82:bc:
01:bb:e5:9e:68:5c:47:dd:2a:4c:7b:51:53:6f:5e:
b3:2e:94:cf:27:2b:97:3d:79:35:25:a1:7f:13:a5:
b2:76:12:17:06:28:c4:f5:65:ad:35:27:5e:75:11:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:2B:8B:87:9D:BE:94:12:28:E3:39:EE:0F:79:B0:A2:E5:74:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E55DFD4F4E711EFBABF2E57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.191.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1d:47:d3:1b:53:24:e2:3d:20:75:0f:98:43:15:0b:7a:b5:
3e:2a:48:dc:f5:cb:14:c1:57:eb:5f:e8:4b:9c:88:2a:c9:df:
24:1a:19:7f:23:df:d3:41:29:52:4d:30:bf:3d:22:d0:68:b6:
e7:f2:36:11:1a:17:0e:5d:9a:49:d2:fb:bc:a6:c1:ab:07:4a:
6d:f1:cc:bc:45:21:41:1e:ad:8c:5c:d8:10:e3:08:e1:37:b0:
c5:26:79:8a:82:d9:c2:01:5b:14:08:50:99:ed:86:05:a8:f2:
10:a0:3d:30:d5:2f:6a:e8:7e:28:82:11:09:24:58:8f:02:f9:
2e:42:89:a7:dc:3b:3c:64:18:4e:01:d1:d0:06:e0:89:19:be:
93:a8:b0:28:97:01:44:cb:27:55:54:99:2d:f4:8d:03:ea:99:
4e:d6:04:95:e3:38:61:d5:06:41:f5:ce:4a:c4:bb:95:aa:94:
8b:56:94:17:0c:5f:4d:fd:c8:10:a2:fd:21:ea:36:f5:ff:e6:
53:84:63:12:72:c8:ef:e2:32:6f:aa:91:6e:4d:6a:de:4d:c9:
8b:0c:f0:31:d3:43:38:44:51:17:16:7f:9c:0d:ba:75:6e:7f:
f5:71:d6:7d:33:4d:e7:ec:0e:da:24:a9:06:f5:ba:34:6e:9e:
2f:56:73:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:17:13 2025 by rpki-client