Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/742A034AF4D311EF9345CA4D762E951A.roa
File: 742A034AF4D311EF9345CA4D762E951A.roa (raw, json)
Hash identifier: HwksvSzE/LkF1hu4V98bhXVLViadKvhGF3vbjADV93k=
Subject key identifier: A1:7C:80:6D:03:05:F9:B3:E1:5E:05:57:8B:DB:16:7B:8F:4C:5F:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016661
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/742A034AF4D311EF9345CA4D762E951A.roa
Signing time: Thu 27 Feb 2025 06:24:10 +0000
ROA not before: Thu 27 Feb 2025 06:24:06 +0000
ROA not after: Wed 26 Mar 2025 06:24:06 +0000
asID: 62240
IP address blocks: 154.195.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91745 (0x16661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 06:24:06 2025 GMT
Not After : Mar 26 06:24:06 2025 GMT
Subject: CN=67c00509-e8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:bf:ee:87:59:82:a0:8a:b1:4e:a9:d3:ab:
a6:be:19:79:53:89:c7:f5:cd:fd:d6:12:1c:07:8a:
7a:e3:ba:60:5e:49:fe:5d:ef:e9:7b:e3:a8:24:26:
01:78:54:33:64:a3:a0:1f:28:f5:b8:fb:44:05:18:
a6:9f:07:4f:d8:95:36:63:cd:83:64:f0:0d:27:db:
fd:6a:2c:1d:34:72:d2:f7:50:48:63:9a:a8:a7:02:
15:ab:89:01:c8:9a:15:10:cd:a1:ba:10:77:b1:c1:
de:8b:51:3d:10:72:9b:2e:f4:9c:8c:fd:71:f6:4f:
6e:aa:8d:19:16:78:2c:ce:d4:96:88:7d:9f:c0:85:
cd:1e:72:e0:e4:15:e4:33:fa:e1:bb:37:6c:02:a1:
73:42:fc:00:7d:ae:85:14:38:b6:3e:96:4b:b0:49:
c4:82:aa:58:a6:44:8a:be:9c:7c:97:02:5a:3d:22:
c1:4c:1a:62:be:f8:cf:70:b5:0e:d3:1a:c7:61:8c:
ec:59:4e:c3:79:a2:7e:4f:95:5d:0c:e1:9e:26:82:
f1:13:60:68:8e:ec:5b:f7:20:28:ca:32:89:32:f7:
bd:a7:be:03:cd:2e:85:c4:48:22:9b:08:74:b2:2c:
56:be:78:bd:91:ae:ac:0b:a6:f9:9e:b4:23:d8:b4:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7C:80:6D:03:05:F9:B3:E1:5E:05:57:8B:DB:16:7B:8F:4C:5F:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/742A034AF4D311EF9345CA4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.150.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a1:fa:af:e8:d0:ee:c6:25:02:fc:c9:ee:f1:cd:40:b1:c8:
ec:3f:2f:e8:c6:ca:0e:be:fd:28:d9:eb:30:67:fc:78:e0:dd:
d2:85:3b:02:f3:78:00:31:a3:5c:ba:85:6a:c0:d2:6e:12:83:
eb:49:a4:b5:22:1d:9a:2c:2d:28:53:b0:f4:ac:c9:2a:45:33:
6b:ce:00:87:2a:8e:6a:13:0f:5d:a9:b1:c4:ab:94:eb:ba:a8:
86:82:62:c8:81:d9:3f:83:18:03:19:e2:a8:05:e8:1e:a2:e6:
7d:8b:82:1e:4a:b0:ea:20:e7:9e:a7:60:96:02:e6:b0:89:28:
c1:d3:f4:1f:78:26:82:47:1c:9b:82:ff:1d:9b:d8:a6:98:35:
a5:a8:4f:0a:a5:ca:cd:03:4d:20:28:ff:25:e4:d5:5b:02:c9:
e6:eb:26:66:12:55:5a:24:61:7c:72:65:d1:66:49:68:4a:a6:
3b:e4:f8:9a:81:5b:c9:52:70:8b:7c:86:37:4d:93:c0:b9:36:
7a:4f:b6:60:32:f3:e8:f6:a1:5d:29:3d:5d:5d:7f:59:1f:15:
5a:d0:ed:40:e7:4a:11:8f:b8:a3:cb:c9:af:0e:75:3c:49:d9:
bb:7b:2b:12:90:09:43:14:06:1d:ae:09:6e:c7:63:79:bd:45:
c0:a8:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:28:30 2025 by rpki-client