Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/712D907EF61511EFAE146364762E951A.roa
File: 712D907EF61511EFAE146364762E951A.roa (raw, json)
Hash identifier: 6IAdFOwYGWfhbEKxv/eKRylH+LxWCYQJ+4Tp+/PuaUw=
Subject key identifier: 75:0D:27:C5:AA:C4:66:FC:88:69:A5:CA:37:2D:EA:A1:AC:D9:42:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/712D907EF61511EFAE146364762E951A.roa
Signing time: Fri 28 Feb 2025 20:49:03 +0000
ROA not before: Fri 28 Feb 2025 20:48:59 +0000
ROA not after: Wed 26 Mar 2025 20:48:59 +0000
asID: 62240
IP address blocks: 154.194.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93193 (0x16c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 20:48:59 2025 GMT
Not After : Mar 26 20:48:59 2025 GMT
Subject: CN=67c2213e-10f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:39:50:f0:4d:e7:fe:29:f5:7f:4e:26:74:
8b:71:e6:6a:0f:d8:60:2d:c9:9b:bd:13:99:0d:b5:
a0:7b:81:58:0c:ed:9e:06:ea:6a:40:42:75:48:72:
4c:23:6e:84:f0:34:ad:64:58:9c:09:f8:43:81:d4:
d5:92:0c:16:cc:cb:20:de:09:50:c2:86:07:ee:ca:
73:16:a0:5d:5d:e3:65:f7:2d:f4:b0:04:0c:5e:53:
07:ee:30:06:1e:63:98:1f:a8:5b:1e:33:0c:7c:fe:
ec:83:36:81:9a:21:34:60:95:3b:45:82:f0:5d:9a:
be:06:5c:b9:cf:62:d0:b5:94:ae:bd:27:51:5c:89:
fb:3d:bb:da:21:83:f4:b2:ec:19:f0:cf:48:d6:2b:
98:e8:9b:e3:f1:8d:3e:90:19:8e:74:85:f7:7f:fb:
2d:d2:65:8f:f5:4a:bf:bc:5c:a4:17:61:5d:95:85:
a7:eb:08:67:c8:7f:e9:c7:70:f8:a0:5f:38:e0:5c:
80:3c:22:e7:43:d7:fc:c1:69:ae:9e:e1:38:d7:c0:
cf:3b:b0:d8:32:88:e7:5d:44:a0:99:6b:38:e8:7d:
e5:7e:d7:cd:ed:46:9b:21:82:00:ca:f6:63:ca:b4:
6c:23:40:a7:db:be:5f:ec:94:82:81:ce:9a:ea:e0:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:27:C5:AA:C4:66:FC:88:69:A5:CA:37:2D:EA:A1:AC:D9:42:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/712D907EF61511EFAE146364762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.89.0/24
Signature Algorithm: sha256WithRSAEncryption
82:76:a1:dd:43:2c:77:3e:0f:8d:09:77:03:3f:3c:04:3d:ed:
ef:2f:e7:78:d7:ce:db:ac:cf:61:2e:87:11:ea:46:00:44:03:
3d:ee:6a:67:9d:71:02:8e:0a:d6:98:a1:94:5d:af:58:8c:c4:
bf:8e:ba:c7:8e:ba:b4:0e:78:82:0e:37:f5:62:ef:f0:f6:50:
03:24:0d:88:0a:a6:83:ad:5a:3a:83:c7:a4:41:6b:90:6c:24:
6e:7b:03:4e:6c:1d:6c:f6:77:cc:14:17:75:c9:58:ff:65:0a:
20:ad:f4:c7:13:1e:04:69:5b:da:20:fd:18:78:32:a5:90:dd:
2f:56:7e:48:87:27:91:53:7e:5c:92:03:97:42:f3:e7:cd:b1:
fe:69:d2:3f:94:07:84:3d:76:ee:39:64:f2:56:c5:4a:b1:81:
e7:0c:7d:21:76:7b:56:da:7c:79:3d:05:ec:76:ea:40:a1:1e:
89:bc:1e:1c:4e:38:9d:ef:12:26:bc:df:b8:25:c7:3a:f6:0a:
e1:2f:95:61:4f:7d:b0:48:5f:a6:24:1a:e0:ed:c4:9d:37:0f:
c0:98:af:a2:70:ac:f9:ef:0d:08:3e:75:bb:a6:e2:ec:54:e7:
2d:bf:1e:1c:71:33:bf:e6:08:09:7b:4c:06:a3:06:6c:90:85:
22:80:0c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:50:04 2025 by rpki-client