Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A759922F67611EF90513A86762E951A.roa
File: 7A759922F67611EF90513A86762E951A.roa (raw, json)
Hash identifier: 0wykFq3TDIinXYf1SDKBSf6cn3/KUvSaVRrj1aau5KU=
Subject key identifier: 80:CB:F1:06:F1:94:76:14:01:46:55:DB:9E:93:A5:E0:43:C6:DB:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A759922F67611EF90513A86762E951A.roa
Signing time: Sat 01 Mar 2025 08:23:39 +0000
ROA not before: Sat 01 Mar 2025 08:23:36 +0000
ROA not after: Mon 31 Mar 2025 08:23:36 +0000
asID: 202656
IP address blocks: 154.219.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93522 (0x16d52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 08:23:36 2025 GMT
Not After : Mar 31 08:23:36 2025 GMT
Subject: CN=67c2c40b-43ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c0:2d:f0:0d:95:f0:ea:44:a6:f5:d2:2d:7f:
f0:de:2d:f7:ec:0a:79:4e:3d:37:0f:37:44:d0:00:
7b:58:45:59:9e:d0:fd:01:1d:e7:e5:f5:a9:be:19:
43:2a:17:31:ca:2a:7f:04:67:b1:3a:c3:d0:da:5f:
1d:ad:e5:df:ec:56:1b:b7:ef:e6:8c:08:74:b2:5d:
08:1c:16:af:5e:f2:4f:45:a0:31:27:c0:a7:ce:fc:
c0:9f:fa:d6:59:e5:2e:48:6f:35:68:b6:08:12:90:
79:79:c8:ef:40:1b:fc:b0:5b:b6:21:c6:79:e7:38:
a8:e3:8f:cc:65:5f:4f:b6:ea:ec:b8:bb:52:a0:ff:
83:b9:4f:92:55:2e:99:e1:44:ce:ba:c5:f8:00:25:
74:06:b7:34:00:ab:a6:14:b1:10:0f:ad:19:8e:7c:
5c:04:7f:05:13:2b:73:72:15:92:05:01:c7:d4:11:
61:4e:1d:61:ff:13:ee:bb:f2:8b:6c:73:d5:88:d5:
a8:10:13:7c:f7:aa:56:e2:e0:f1:7d:e9:f1:41:bd:
a8:10:79:72:f1:52:11:90:f8:a1:ab:49:6f:2f:53:
b4:92:f9:a8:53:2a:2a:11:df:43:4a:96:00:c0:3a:
95:f0:80:f2:94:45:ea:bd:4d:90:2e:b3:06:56:f1:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CB:F1:06:F1:94:76:14:01:46:55:DB:9E:93:A5:E0:43:C6:DB:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A759922F67611EF90513A86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.222.0/24
Signature Algorithm: sha256WithRSAEncryption
76:87:c7:5d:2d:94:cd:23:83:0d:f2:67:84:19:ac:03:79:cc:
69:5f:3d:d4:01:d4:e5:b7:26:9c:4a:f3:6c:fc:9b:56:f5:0c:
5b:cc:ec:aa:dd:84:8e:1e:53:23:fd:13:ea:45:34:34:48:53:
35:d6:b1:ea:e7:e2:23:84:fc:1c:f0:fa:15:f7:58:ee:ed:85:
d6:74:0e:2e:a7:f3:4d:43:52:d9:bb:a5:61:1d:45:8c:1b:f1:
ee:fc:9b:35:cd:c3:25:48:fd:38:e0:17:57:bd:24:9f:23:3a:
62:13:f0:bf:18:f2:e8:d2:9f:39:c7:ea:1a:70:04:c6:2e:51:
4a:8f:49:0a:4a:72:af:a7:c7:eb:97:54:66:f8:ba:2f:a7:1b:
88:e0:f9:35:c6:f7:07:b2:e2:27:17:9c:49:b3:66:44:a3:42:
d4:2b:70:98:ac:30:c9:65:9e:73:e9:e8:9d:0b:c5:20:9d:ef:
e9:2f:74:50:19:69:b5:97:ee:0f:75:c4:44:b0:0a:ff:07:c0:
4a:96:86:9a:72:4a:84:5a:e8:26:66:eb:7e:c9:c9:18:ed:06:
ec:34:8c:60:5a:fe:67:fe:d8:f2:32:28:04:4a:53:0e:f6:84:
76:03:66:e3:54:83:66:24:12:a0:57:c0:54:ca:2e:d2:86:06:
a9:2f:1d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:44:24 2025 by rpki-client