Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7420F624F5D211EFBF30869E762E951A.roa
File: 7420F624F5D211EFBF30869E762E951A.roa (raw, json)
Hash identifier: rFu4jXt9hH7k7/Jiqz+ixxWvEbs+pYxvsrEiDvmx+x0=
Subject key identifier: 7D:D9:61:06:94:DF:61:C8:B3:B7:AE:CD:2C:4C:53:01:4A:78:D6:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B3B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7420F624F5D211EFBF30869E762E951A.roa
Signing time: Fri 28 Feb 2025 12:49:31 +0000
ROA not before: Fri 28 Feb 2025 12:49:28 +0000
ROA not after: Mon 31 Mar 2025 12:49:28 +0000
asID: 398993
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92987 (0x16b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:49:28 2025 GMT
Not After : Mar 31 12:49:28 2025 GMT
Subject: CN=67c1b0db-3121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:ff:2a:95:36:e7:78:58:b8:c6:c6:9a:15:
e2:9e:75:72:45:01:2d:60:19:91:4d:58:bb:c0:76:
f0:fe:81:aa:8d:0c:cd:f2:ef:4f:c0:b2:7e:09:2a:
b1:39:cf:00:58:1b:84:1b:05:0f:6b:cb:b3:d5:b4:
60:5c:9e:2c:c6:62:fd:fe:b0:04:73:09:84:60:2d:
df:59:2a:22:82:71:89:74:8c:ba:e6:9b:4e:a1:e2:
9d:ac:65:dd:fb:5e:25:4a:7b:d1:ec:6a:41:44:38:
4c:43:d2:d4:73:24:56:17:e4:c7:16:fc:6b:06:95:
3b:51:fc:be:8e:14:ea:d8:c7:d0:bb:57:e4:3e:fd:
7e:eb:e9:70:df:34:54:13:2b:1e:03:90:f8:df:7c:
52:b9:e3:5d:6f:80:d4:2c:27:27:5c:bc:9f:4c:ab:
0a:b5:52:67:64:10:70:4d:f3:13:a4:2e:10:a1:be:
25:64:e9:57:91:89:0e:4b:5a:a2:92:48:6d:78:73:
8c:f9:f3:c8:1b:af:de:ba:75:7f:ee:d9:84:8e:6f:
eb:d7:ae:82:29:4c:12:a6:68:40:d6:bf:ba:f7:dd:
22:72:b1:4d:9e:0d:e1:7c:55:82:8d:f6:ef:6d:c3:
70:75:b6:38:24:fc:31:a7:d8:70:69:b5:97:bf:02:
07:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D9:61:06:94:DF:61:C8:B3:B7:AE:CD:2C:4C:53:01:4A:78:D6:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7420F624F5D211EFBF30869E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
61:fd:cb:69:91:68:ac:f1:5f:2d:69:a1:91:93:b6:ff:6a:81:
91:a9:82:43:d6:a9:30:2c:d9:ea:d8:b6:b1:cf:18:70:a2:50:
49:0e:8f:86:9d:3f:73:f7:ac:4f:c5:63:15:c0:d9:15:56:ac:
49:cb:df:62:1c:73:b2:a3:3f:e6:69:c6:a6:34:5f:ec:f3:47:
fb:26:46:62:12:77:09:a7:cd:7a:a9:81:cc:b4:2f:35:3d:56:
20:26:20:9b:db:7d:8a:8f:de:7e:b7:2c:92:6b:52:4b:52:e8:
9c:53:ca:67:ee:f0:25:66:91:f3:c1:e0:e9:bd:e2:b9:b4:aa:
c0:f8:71:7f:0c:35:f9:1d:7d:99:83:43:f5:3f:74:ec:fd:70:
3d:d1:6a:96:32:3c:42:c7:c9:20:d3:18:a6:4e:66:b4:7f:39:
7e:cc:95:97:e6:5f:64:69:c8:20:59:b9:be:8c:93:34:2e:8a:
47:d9:ba:8a:68:d4:84:4b:37:84:aa:d7:68:a5:20:fa:ba:7b:
30:84:30:cb:86:04:0a:8b:60:0c:c4:71:eb:b3:1c:5a:de:6c:
20:d0:d5:cf:ff:6a:1b:9d:d9:ca:b1:83:4b:7e:9c:99:38:76:
d8:88:a8:4b:af:3e:0d:42:9a:fc:d2:db:5e:93:65:e5:a7:31:
96:02:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:03:28 2025 by rpki-client