Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70735AA6F8E011EF9743FE6D762E951A.roa
File: 70735AA6F8E011EF9743FE6D762E951A.roa (raw, json)
Hash identifier: eNDcYRfh1ELi0jpig4sa0g3QM7q/O3DN6D87xaUKBq0=
Subject key identifier: 97:46:C1:60:F3:E5:44:CE:80:0E:78:0C:D1:EF:0A:E1:96:8D:A9:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70735AA6F8E011EF9743FE6D762E951A.roa
Signing time: Tue 04 Mar 2025 10:07:11 +0000
ROA not before: Tue 04 Mar 2025 10:07:07 +0000
ROA not after: Mon 31 Mar 2025 10:07:07 +0000
asID: 202656
IP address blocks: 154.218.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94634 (0x171aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 10:07:07 2025 GMT
Not After : Mar 31 10:07:07 2025 GMT
Subject: CN=67c6d0cf-23a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:a0:6c:bd:6e:bc:5c:f3:ec:5e:3d:dd:55:
8a:97:23:09:15:8b:08:6b:c3:0a:78:17:ab:44:e7:
cb:d8:87:dd:98:ba:d0:42:ef:58:28:35:68:5c:3c:
24:f2:1f:cd:03:39:3f:1d:bc:7b:4f:d9:74:93:82:
39:f1:d6:4e:18:58:94:cd:56:07:cb:42:7d:bd:34:
c3:79:bb:6f:67:3f:2c:bd:f6:3d:8c:27:bf:76:38:
41:87:10:0f:3f:d3:62:b4:24:f0:c9:07:3d:76:8a:
4a:62:f7:84:f2:0b:be:ec:be:fe:2c:3d:09:7a:2b:
04:ea:54:b5:5e:d7:b3:c0:d2:7a:e0:1e:c6:ba:9e:
15:e8:0d:64:c2:b5:bc:3b:f7:73:c0:e7:7e:5e:05:
64:74:6a:b2:f4:79:03:13:70:f4:39:1a:26:cc:2e:
52:6f:ac:74:2d:60:b9:70:27:69:06:57:b4:3f:96:
db:66:d5:62:19:50:51:81:e1:b6:71:81:e3:f3:1e:
7d:76:d7:64:80:da:0f:95:a1:bf:fc:b7:0e:8a:81:
e3:ee:48:89:d5:09:de:e8:11:36:79:4f:4b:6c:4b:
fd:c8:28:3e:81:ba:8a:14:e5:b9:31:76:24:66:77:
e4:51:16:24:4f:a0:ed:de:d6:61:73:fd:bb:46:ea:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:46:C1:60:F3:E5:44:CE:80:0E:78:0C:D1:EF:0A:E1:96:8D:A9:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70735AA6F8E011EF9743FE6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c8:8f:3f:8c:ec:84:71:fa:84:54:9c:d2:f1:75:f6:35:91:
bc:ed:a3:96:a1:b7:1e:9d:c6:2a:f5:29:af:a4:1e:1f:c6:22:
49:c1:f3:9b:2b:60:9c:5d:f5:50:ef:e4:95:a8:b0:92:2c:2a:
f2:29:7f:a0:f1:d0:d3:d5:41:8b:f7:f1:20:21:23:04:98:85:
1d:93:0b:59:b9:27:69:c2:b0:09:e5:2a:62:18:6a:7d:35:63:
a6:02:a5:b1:bc:10:33:76:b7:36:a4:dc:d9:76:83:99:dd:56:
23:1a:a4:1c:f7:25:eb:04:55:61:dc:0a:c2:89:f0:55:1f:56:
f2:f7:c2:2c:2a:ed:b1:d4:4a:de:99:5d:f8:28:fa:b9:e1:0e:
cc:8b:ca:48:e1:cd:9a:ae:14:4b:c1:e4:a5:cf:e1:e9:15:a0:
35:d8:c6:c3:f4:ea:5d:18:11:d0:1a:7e:48:fd:68:81:ba:99:
19:63:d0:93:bf:51:18:e8:d9:dc:db:89:a7:60:c3:fd:37:92:
50:ec:50:af:94:c8:7b:24:c6:cd:1e:e9:41:f5:ff:a3:b0:8c:
b0:f6:85:c7:ec:33:96:df:a2:b2:4f:8c:39:f6:f3:bc:48:27:
37:8a:30:80:22:ee:00:3f:fe:cc:27:46:7d:a8:63:c1:f3:5a:
94:33:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:13:51 2025 by rpki-client