Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D3A717EF2BF11EFAFB5237E762E951A.roa
File: 7D3A717EF2BF11EFAFB5237E762E951A.roa (raw, json)
Hash identifier: QUsC9XXjneZ+ZF9Cc6RP3cUtWTBn/mf0vk8sU2U+gmk=
Subject key identifier: 92:06:C2:D5:A0:82:25:D4:F1:93:0C:3D:77:90:2A:23:98:12:AD:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D3A717EF2BF11EFAFB5237E762E951A.roa
Signing time: Mon 24 Feb 2025 14:56:13 +0000
ROA not before: Mon 24 Feb 2025 14:56:09 +0000
ROA not after: Sat 29 Mar 2025 14:56:09 +0000
asID: 203020
IP address blocks: 154.223.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89148 (0x15c3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 14:56:09 2025 GMT
Not After : Mar 29 14:56:09 2025 GMT
Subject: CN=67bc888c-1b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:ba:00:e2:39:42:a2:fc:46:78:23:f3:8a:
15:c9:97:db:f5:92:fc:3f:18:66:dc:b7:b0:84:99:
91:a0:2d:98:69:86:ce:6e:5e:32:e9:c7:70:76:f9:
43:b2:1e:79:0a:cf:40:0c:b8:7d:48:31:80:e8:4d:
5d:59:57:d2:d9:ea:b0:e1:cb:dd:2d:d6:43:b7:d9:
89:af:10:ef:96:d0:eb:c7:dd:8e:dd:f5:47:33:95:
4c:65:0c:5d:81:12:7c:6a:2f:ca:8c:8f:83:40:ff:
17:93:f2:1a:08:ce:31:14:cb:67:91:9b:1b:13:04:
12:1c:53:19:09:3a:96:68:32:90:ad:e8:0f:2b:45:
8f:86:81:4b:5f:ad:cc:66:14:f6:e8:8d:72:93:0d:
0f:b5:ed:69:db:1a:68:2b:dc:bd:4e:4c:36:35:79:
f3:0c:22:15:f8:2a:86:f0:43:39:c5:93:db:0c:c4:
53:5a:65:ab:cc:8b:4d:84:ad:63:ae:2b:56:80:25:
20:9e:5a:65:96:7e:bb:26:29:0b:29:13:07:0e:2d:
22:14:ed:ad:a4:08:53:01:dc:92:4c:d5:4f:95:e5:
93:ba:66:83:ff:6e:9c:12:59:fc:f9:34:5a:d8:4d:
a6:de:df:94:9d:8d:8d:12:d4:d1:b3:28:e6:00:52:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:06:C2:D5:A0:82:25:D4:F1:93:0C:3D:77:90:2A:23:98:12:AD:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D3A717EF2BF11EFAFB5237E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.184.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e9:ad:35:0f:19:4e:18:20:6c:45:a6:0f:19:2a:75:76:1e:
f3:26:8c:cc:8e:d3:05:1e:a7:5b:a0:b6:50:aa:57:1f:50:8b:
13:96:30:d4:32:e9:9c:90:3c:a2:2b:55:b6:cc:17:06:65:a7:
1d:9d:60:09:4b:d5:cb:56:94:49:65:1a:cf:58:4d:7c:5d:f0:
66:d6:f0:bd:a4:73:eb:68:28:ac:95:82:f0:40:c6:9f:74:01:
ca:5e:2d:03:11:bb:83:a4:bb:0d:79:60:18:ef:b9:20:7b:1b:
c5:6b:0b:a1:34:e5:4f:1a:94:a4:34:51:df:db:8d:b4:4e:58:
f5:eb:2a:3a:44:c2:d0:52:87:1b:37:3c:d5:56:75:89:af:b4:
63:86:79:86:69:95:53:ee:5e:00:77:7d:9a:c4:4b:cb:a5:0f:
9b:4f:ca:63:8f:ad:77:33:e4:7d:52:7b:28:6f:aa:03:18:41:
d6:28:bc:ed:ba:21:ab:89:22:d0:02:ea:b5:38:50:cf:f3:46:
64:15:74:23:21:f8:30:ec:91:25:93:9f:32:50:de:0b:0d:3e:
61:b3:da:4f:29:17:aa:27:26:36:c4:46:8d:5b:2c:1c:8b:e3:
97:82:6c:3d:e5:af:a6:e4:90:af:28:c2:f9:43:5a:b9:e9:00:
a2:07:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:48 2025 by rpki-client