Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F296962F4F111EF816CC298762E951A.roa
File: 6F296962F4F111EF816CC298762E951A.roa (raw, json)
Hash identifier: RLFKFlfp64E3RzBom0K0D0RPZjWyvl31I3xxcpYoScg=
Subject key identifier: 1F:F7:21:35:87:CD:51:D5:45:7D:E2:F8:1E:9D:31:8A:79:31:3E:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016776
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F296962F4F111EF816CC298762E951A.roa
Signing time: Thu 27 Feb 2025 09:58:46 +0000
ROA not before: Thu 27 Feb 2025 09:58:42 +0000
ROA not after: Wed 26 Mar 2025 09:58:42 +0000
asID: 62240
IP address blocks: 154.195.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92022 (0x16776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:58:42 2025 GMT
Not After : Mar 26 09:58:42 2025 GMT
Subject: CN=67c03756-52f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:9b:42:83:a1:a8:23:f9:aa:a9:8b:80:48:
65:b9:f8:0e:1b:26:6c:7c:33:f5:6f:70:0e:98:30:
ce:fc:62:ad:dd:1e:7b:46:a5:7b:35:2b:94:cc:c9:
b4:c1:23:d5:45:e6:59:04:de:7b:1b:4e:43:13:af:
16:86:e2:f9:33:75:8c:5c:85:46:44:be:67:17:e9:
63:8e:4f:cc:4b:75:fe:2c:3a:5b:09:f8:ec:cb:3b:
e7:d5:bb:26:ae:bf:0a:ef:88:ed:99:4b:8d:20:f9:
82:47:24:0a:dc:61:81:96:63:86:33:5f:12:8f:fe:
b7:bf:85:a2:ad:d9:93:cb:ca:d7:b8:a7:2f:82:92:
65:61:4f:8e:de:bb:b2:e6:ea:12:13:e3:58:e2:c1:
63:51:bd:e6:e8:f0:15:78:0c:0f:f2:75:84:51:96:
6d:de:37:78:20:60:32:26:5c:8d:f4:5a:a9:0f:34:
de:f2:22:eb:1e:b4:d6:0d:3d:d4:b5:d3:a7:98:59:
37:c8:12:21:79:20:79:83:21:2f:04:d2:03:27:35:
3b:92:d2:e5:1d:f3:5a:5b:4f:fd:02:93:48:1b:25:
a3:a3:b9:2f:ff:b6:ea:e1:bb:74:c3:e4:4d:a1:0b:
51:37:6b:c1:ad:ac:b3:38:60:75:b0:e9:aa:60:30:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:21:35:87:CD:51:D5:45:7D:E2:F8:1E:9D:31:8A:79:31:3E:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F296962F4F111EF816CC298762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:24:77:34:85:b7:9e:63:5a:b8:ac:26:9c:a8:1c:ee:1c:0f:
e6:2f:f1:9a:d2:7c:7f:94:06:d3:95:d7:8b:93:d4:4d:d5:ee:
7f:56:ee:0b:e4:e0:45:1e:9b:01:fc:db:a1:69:e4:8c:00:17:
4c:8c:b1:61:ee:29:cb:c7:98:7f:db:b8:6f:f7:cd:41:31:e0:
36:2a:92:67:6e:74:72:ca:02:37:55:b2:e9:8d:72:e0:81:de:
3c:f4:78:2c:fb:c2:34:69:ab:50:23:7a:03:2e:5d:61:43:79:
a6:f6:f5:96:3b:1e:86:b1:0b:59:21:b4:ac:24:93:00:e5:ee:
c2:b2:bd:24:db:56:a0:22:d3:69:c1:ea:3c:5e:d2:27:44:88:
29:f3:a8:cc:72:f9:d2:c3:bc:bd:25:73:0d:05:0e:2b:59:ef:
95:79:56:4c:bb:b5:27:2f:5b:ea:07:e0:06:c2:63:c2:5e:bd:
3d:9c:c5:97:56:86:d3:ee:6a:0f:cc:26:22:5e:28:bf:c9:e4:
87:fb:4e:15:f8:23:a6:6f:1a:d8:0b:81:39:c7:60:0e:01:db:
26:b3:a4:6c:44:2d:30:38:9a:8e:60:ea:29:3f:83:11:33:77:
ae:db:ca:96:6b:df:75:d9:cc:03:f8:3e:97:13:6b:85:70:4a:
33:88:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:08:23 2025 by rpki-client