Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70D8CFB0F1D511EFA6E7C267762E951A.roa
File: 70D8CFB0F1D511EFA6E7C267762E951A.roa (raw, json)
Hash identifier: ubNCvG7WWaZUU5dDvpZG+kCkbyCPGWSXFlhjJ/J9W18=
Subject key identifier: 40:E9:31:56:71:8F:60:65:77:35:47:8F:37:67:F4:D1:5D:DD:C2:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70D8CFB0F1D511EFA6E7C267762E951A.roa
Signing time: Sun 23 Feb 2025 11:00:49 +0000
ROA not before: Sun 23 Feb 2025 11:00:46 +0000
ROA not after: Wed 26 Mar 2025 11:00:46 +0000
asID: 149513
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88901 (0x15b45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 11:00:46 2025 GMT
Not After : Mar 26 11:00:46 2025 GMT
Subject: CN=67baffe1-5ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:4a:ab:a0:51:ca:01:6b:63:9b:ea:23:7a:
2f:2b:b4:de:63:54:32:95:49:27:e2:28:c2:e0:f5:
73:4c:31:55:b1:99:f0:c3:6c:29:70:ae:93:17:0f:
a2:c2:75:9d:3e:c6:64:3f:e7:e4:92:e4:40:f6:26:
21:e8:95:4e:77:db:c4:67:ed:56:35:0a:f2:9b:9c:
f9:54:6d:8d:ca:32:8e:67:8e:00:1f:88:bb:61:2c:
c2:62:91:7e:07:24:61:2d:cc:47:10:fb:d3:42:67:
4f:a6:27:c3:4a:13:3f:ef:1f:98:c1:88:8c:b7:dd:
b5:2f:2e:b0:94:2b:6c:30:40:ba:6a:42:20:48:9e:
cb:2b:86:dc:4e:c2:4a:cf:41:87:4b:33:dd:51:5c:
1f:10:d7:d1:b6:a5:6b:83:e4:9d:9f:d7:62:83:8b:
c2:d8:b1:f6:53:e3:3d:07:3e:ed:35:30:53:57:a0:
bd:bd:d1:01:be:b1:a6:90:7a:54:65:87:53:ab:e1:
70:2a:46:97:1e:7a:87:20:26:e1:77:e8:b7:f7:12:
be:96:cd:83:23:78:d9:79:4f:d0:1b:bd:62:90:78:
ac:87:f4:e5:dd:f6:ce:70:0d:38:ae:c4:59:6a:ce:
83:8f:87:5e:ca:bb:30:85:07:4b:ba:c2:91:5b:8a:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:31:56:71:8F:60:65:77:35:47:8F:37:67:F4:D1:5D:DD:C2:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70D8CFB0F1D511EFA6E7C267762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:3d:54:4f:6d:11:49:5e:27:46:a1:af:de:a0:d8:3f:a4:7c:
3d:da:00:80:63:13:b5:44:29:64:8f:86:84:fe:fb:57:95:c7:
36:9b:ee:36:0a:78:17:f0:e0:e5:11:be:d3:2a:37:93:7d:30:
f1:67:67:92:02:37:d5:52:fa:3b:0d:2d:2d:e2:1c:e3:7a:33:
f6:2d:68:58:0a:c1:a1:ca:c5:c1:a3:35:3f:2a:4f:bd:ea:cb:
7d:b8:9e:f8:61:6b:85:1a:8b:8f:7c:09:6c:08:be:f3:8e:6f:
71:6e:a6:2d:fd:8c:c2:d1:d8:85:25:5a:f6:8a:da:ad:90:28:
af:9b:35:36:96:05:72:2b:62:20:a7:34:5e:e2:c6:82:00:0f:
93:a7:1a:6f:69:a7:d7:20:8e:eb:4b:cc:5f:c0:5a:d9:44:a5:
3c:19:f1:32:d2:3c:c8:04:e0:20:dc:3d:53:a9:c3:78:3d:31:
d5:9d:56:79:bf:ee:0a:ca:14:bb:ae:55:9c:36:a2:41:01:03:
a2:fa:c1:15:7f:e0:3e:f9:2f:11:00:85:b3:35:6a:d2:ec:16:
70:f1:39:64:ea:20:29:83:7f:65:07:07:ce:cb:3f:2a:3f:6f:
44:da:10:36:76:75:c0:72:83:56:ee:23:ed:4c:17:e2:f9:e5:
3b:a9:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:48 2025 by rpki-client