Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77EFBE38F29A11EF90610A93762E951A.roa
File: 77EFBE38F29A11EF90610A93762E951A.roa (raw, json)
Hash identifier: r1sQBSI85ncHhddhfTcmw7CVsYJ7ThABcJAiIFiX1MY=
Subject key identifier: 4C:F1:C0:A9:D3:D4:26:45:62:E3:A3:79:CC:DB:AE:36:8A:CF:2C:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015BB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77EFBE38F29A11EF90610A93762E951A.roa
Signing time: Mon 24 Feb 2025 10:31:12 +0000
ROA not before: Mon 24 Feb 2025 10:31:09 +0000
ROA not after: Wed 26 Mar 2025 10:31:09 +0000
asID: 21859
IP address blocks: 154.94.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89010 (0x15bb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:31:09 2025 GMT
Not After : Mar 26 10:31:09 2025 GMT
Subject: CN=67bc4a70-cd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:5b:db:4a:28:41:bb:52:ab:bc:15:11:0f:
90:ef:38:e4:e2:58:d2:68:2b:b7:87:cc:f8:9d:7d:
73:fb:b6:84:d5:af:8a:79:87:2f:df:57:f5:7b:cd:
de:c1:e7:b3:2c:0f:79:8b:57:86:53:f8:a7:47:b5:
38:e4:e4:7a:39:c6:97:8e:1d:82:dc:c8:1e:0a:b9:
c0:6c:fb:93:4b:c8:69:00:b7:26:3b:05:17:2d:20:
07:d8:5f:48:31:a9:f2:9f:d0:7c:aa:0e:e2:6e:67:
12:76:c7:d5:bc:ed:78:26:d6:ee:f0:a3:e7:38:9e:
26:d3:51:23:db:6c:d5:04:7d:cc:2e:06:5d:5c:95:
e3:3b:59:e0:e1:6d:37:c1:34:62:18:d5:6d:f7:ae:
2a:5b:a3:26:58:4c:1c:fe:01:86:59:f1:4c:05:0e:
a1:86:cd:30:0e:5e:84:07:04:7d:09:23:5b:0d:b5:
25:49:39:a8:ed:5c:b0:d7:1d:3e:23:46:42:0e:bc:
82:3d:02:b8:63:ba:3c:1e:61:2f:c6:b7:44:7f:2c:
60:da:33:c5:af:20:e7:a5:f6:a0:d0:be:31:cf:4c:
eb:f3:bf:69:15:7b:de:62:80:f8:d7:d2:43:dd:4a:
fb:81:8c:b1:bb:73:9b:6c:9c:53:35:6f:06:fd:97:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F1:C0:A9:D3:D4:26:45:62:E3:A3:79:CC:DB:AE:36:8A:CF:2C:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77EFBE38F29A11EF90610A93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.35.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3e:dd:59:71:6d:7e:3f:d9:f1:65:11:05:99:38:8e:7c:2b:
7a:4b:75:f8:9d:d9:7c:41:a5:23:d8:7f:96:72:61:bc:ea:0c:
36:55:a7:8f:4d:d5:80:a2:a3:11:28:37:e5:95:05:ad:e2:31:
01:9c:00:df:98:a6:42:ee:12:2b:19:9f:d8:23:bb:3e:31:d5:
02:2c:27:aa:66:3f:ac:bb:68:42:21:b2:0f:7c:b7:1d:d5:33:
f9:83:8d:0e:b8:9c:6f:c4:e7:ad:8c:4c:b4:60:4d:38:d1:f5:
62:21:b5:8e:f9:7f:f1:0a:86:13:38:20:a2:bd:28:70:4e:ea:
62:35:86:b4:42:be:78:20:41:37:e2:b7:8b:eb:ae:fe:2c:ba:
3c:57:b6:e0:0e:3d:6b:77:fa:41:0e:42:96:1a:85:fe:56:83:
24:da:76:56:61:6d:4a:7e:20:82:25:28:8c:2a:39:03:4f:27:
dc:ac:20:73:4a:d1:0c:bc:0f:51:1e:f7:bd:40:b8:a7:48:56:
bf:58:c7:09:98:99:a5:f5:dc:9a:e7:86:9a:5c:2d:f1:44:a0:
a4:c3:56:dd:63:4e:d5:89:d0:e3:17:95:94:72:6d:71:b7:13:
57:f7:c2:30:1f:03:b7:22:1b:00:f0:6b:11:f4:a5:3f:15:4e:
d6:8b:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:23:02 2025 by rpki-client