Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8244F714F81B11EF9BB2FDAE762E951A.roa
File: 8244F714F81B11EF9BB2FDAE762E951A.roa (raw, json)
Hash identifier: JrsnJIXh+C/Gle1kgRUeX/YnqwnZzxTkNvWGpTww59c=
Subject key identifier: ED:A3:4D:94:19:1B:5A:5D:CE:C6:9B:7F:99:14:13:78:F6:67:AE:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017027
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8244F714F81B11EF9BB2FDAE762E951A.roa
Signing time: Mon 03 Mar 2025 10:37:31 +0000
ROA not before: Mon 03 Mar 2025 10:37:27 +0000
ROA not after: Mon 31 Mar 2025 10:37:27 +0000
asID: 202656
IP address blocks: 154.219.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94247 (0x17027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:37:27 2025 GMT
Not After : Mar 31 10:37:27 2025 GMT
Subject: CN=67c5866a-ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:4f:ce:ca:c4:b4:eb:da:2a:93:7a:90:eb:
11:9b:d4:1c:d5:1e:a1:3c:c4:3b:af:bf:9b:93:5a:
30:69:ee:21:6d:f7:fb:64:66:e1:3b:5d:a0:fc:73:
bf:4c:73:19:12:a2:b5:0b:09:61:cd:b4:6a:4b:4a:
e4:63:4b:9e:ec:39:c9:c5:34:a5:37:18:63:69:16:
39:d0:ce:2d:11:90:27:35:8f:d4:50:84:40:1f:c3:
2f:c6:f6:7d:ec:c4:1b:d0:ff:af:f5:d6:23:f0:ec:
16:4f:36:09:a0:cb:91:de:92:fd:06:5e:9b:eb:18:
a5:c6:e4:79:7b:a3:d9:9d:21:7e:a6:21:b5:ea:fa:
f6:37:68:77:47:12:c9:73:08:c2:11:e9:be:ac:d7:
2c:54:ac:e3:ca:2a:7e:0d:71:96:0a:3f:3a:b0:fe:
9b:e8:c3:8f:7b:c1:9a:f8:3c:56:a4:a4:bf:96:37:
48:0d:32:76:2e:4c:21:05:b0:3c:2a:65:39:77:74:
36:43:66:14:eb:e4:57:be:b4:8f:99:43:46:6b:9e:
00:04:4c:3b:cc:70:2e:26:c4:3d:3e:96:21:c8:60:
ab:c4:12:7c:1e:c4:51:bf:bb:77:42:e7:38:bf:6d:
d4:21:6f:9c:f7:e0:89:a3:47:3d:5f:4f:0c:7a:5f:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A3:4D:94:19:1B:5A:5D:CE:C6:9B:7F:99:14:13:78:F6:67:AE:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8244F714F81B11EF9BB2FDAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.25.0/24
Signature Algorithm: sha256WithRSAEncryption
60:10:c6:61:3d:45:17:e2:48:da:cd:9b:b3:b1:1f:04:c5:0d:
ef:84:c4:05:5b:a1:42:d0:c6:d0:c5:1b:f6:aa:6d:c7:a8:67:
ca:b1:76:3d:d1:24:7e:4b:68:68:7c:25:64:fb:2b:a1:7c:f7:
f0:2d:98:59:f9:01:17:d5:82:2d:39:a5:61:95:70:dd:cf:06:
02:10:92:c7:a6:f9:cb:83:8c:d1:3b:b7:15:e3:66:b7:0a:ce:
89:1f:c8:f3:1e:53:ae:56:16:1b:7e:4d:b8:bc:89:b5:35:a6:
65:04:1d:be:c2:10:01:f6:81:e8:f3:a1:21:ed:93:b0:de:a5:
1c:b8:2f:5a:68:f4:11:d3:e9:09:d3:9a:4f:59:f6:ea:b3:31:
07:21:47:e6:11:6f:a0:c2:cd:07:91:6e:74:54:b1:79:3e:e9:
4e:f0:e5:48:94:3b:8c:de:91:5b:9b:d4:76:5d:af:c8:b1:e4:
8f:bd:39:ae:9c:39:48:fa:bb:92:67:7f:7e:96:65:b4:aa:6d:
84:6b:11:dd:d3:5b:6d:a9:92:f8:cd:d0:c4:96:87:8b:5e:3f:
8f:26:e7:62:06:54:42:88:b0:2b:9a:9d:ea:89:d2:73:e0:0c:
2d:3c:a7:6d:9e:17:92:7b:5a:0e:f3:84:7a:08:9a:86:e6:71:
60:f6:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:09:30 2025 by rpki-client