Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F7FF59AEF9511EF84989264762E951A.roa
File: 6F7FF59AEF9511EF84989264762E951A.roa (raw, json)
Hash identifier: nEzkSdbAiK/OoiWJ9my68s5EaCEohhc1ezdJ9tqV61c=
Subject key identifier: 92:58:5D:92:5D:80:D0:E4:44:93:29:7C:73:11:4B:60:30:D6:0C:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015921
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F7FF59AEF9511EF84989264762E951A.roa
Signing time: Thu 20 Feb 2025 14:17:37 +0000
ROA not before: Thu 20 Feb 2025 14:17:34 +0000
ROA not after: Thu 20 Mar 2025 14:17:34 +0000
asID: 54600
IP address blocks: 154.89.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88353 (0x15921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 14:17:34 2025 GMT
Not After : Mar 20 14:17:34 2025 GMT
Subject: CN=67b73981-ccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:40:21:de:32:b3:5a:53:10:92:ef:4e:ed:89:
c8:06:08:82:0b:51:e5:05:4e:ec:e0:13:d5:59:d5:
bc:80:49:58:45:23:7c:b4:a8:aa:66:94:a0:ed:68:
f6:f9:1b:3f:7f:d8:6e:87:0a:f7:d0:26:cc:bc:31:
df:de:2c:17:62:a9:2d:63:7e:7d:5f:49:82:0a:24:
6d:01:b5:ed:b8:6f:70:80:9a:b3:ab:2b:5b:c6:21:
ac:ee:0f:e1:d3:0a:39:48:fb:fd:0a:9a:f7:b6:9f:
8c:ee:5e:ff:c8:60:2c:77:fe:9f:98:a7:e3:a9:25:
70:70:31:42:b1:bc:d2:2f:fd:bd:d7:5e:ba:49:8d:
88:95:c7:3b:e9:f4:c3:6b:ac:3b:37:6a:96:ba:ed:
4e:98:0e:81:03:51:9e:4b:47:07:4d:fb:50:a4:2c:
eb:14:cb:44:4e:68:4f:c9:13:b2:cf:3a:1d:08:3d:
03:67:d6:f2:7d:4b:69:ef:04:9c:5b:8e:e2:63:15:
a4:5a:22:2b:5e:dc:b4:c7:45:2d:24:7d:f5:c7:61:
6e:ed:cb:33:e0:8d:60:04:ff:f6:50:16:54:cc:90:
d8:0e:ca:43:35:7c:be:35:49:51:2e:97:16:31:a1:
03:b6:7f:cf:ca:7f:57:08:48:0d:3a:8f:d3:f7:3c:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:58:5D:92:5D:80:D0:E4:44:93:29:7C:73:11:4B:60:30:D6:0C:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F7FF59AEF9511EF84989264762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:5d:38:55:b7:3d:e1:29:59:f1:4a:91:49:d5:79:6b:44:37:
5a:36:56:e0:49:0f:d0:48:25:90:5f:c9:81:0a:89:bf:c2:d0:
16:a7:a0:0b:f0:90:ac:de:51:b4:6f:8a:e0:d2:01:1e:62:1f:
9c:9d:09:83:c6:b6:17:db:7e:af:6b:59:6e:33:d0:ea:32:bc:
5f:03:71:5b:ff:31:53:c4:f4:94:fe:64:cb:8d:07:5b:74:eb:
5a:cd:8e:41:b7:d9:4b:12:a7:98:2b:41:21:e7:2c:e1:c5:e4:
df:6d:29:88:58:e7:9f:00:d3:3e:79:d3:aa:82:ac:a4:e2:79:
2f:77:fc:4d:53:d6:a6:b2:85:2e:5b:12:dc:cf:f7:39:d5:8d:
a5:a8:01:b6:b6:a8:d4:04:e8:84:02:55:d8:c1:f2:fa:36:b4:
40:21:a4:aa:c5:52:11:6f:d6:85:32:87:0c:12:0e:e5:b5:1e:
6c:c8:60:66:ae:71:4a:27:97:28:85:94:3b:7f:71:e0:fa:78:
c8:93:38:18:98:1f:fc:01:f5:c2:29:5f:54:a2:a5:88:72:9b:
3d:a2:29:91:47:db:78:58:78:a9:86:07:0d:95:e7:96:95:51:
c0:6f:04:f9:53:a2:e3:60:bb:43:3a:13:0e:f0:f4:c8:ce:eb:
b0:00:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:44:36 2025 by rpki-client