Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83AEB0FAF4DC11EF93A5228A762E951A.roa
File: 83AEB0FAF4DC11EF93A5228A762E951A.roa (raw, json)
Hash identifier: YGXqh7yYEa1GW3eZTh7kJHz3pU50kCbjdpMhdFk7nT8=
Subject key identifier: 21:AA:C5:17:F1:2B:DF:E8:05:28:DE:F6:31:9F:DE:84:66:55:24:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83AEB0FAF4DC11EF93A5228A762E951A.roa
Signing time: Thu 27 Feb 2025 07:29:01 +0000
ROA not before: Thu 27 Feb 2025 07:28:57 +0000
ROA not after: Wed 26 Mar 2025 07:28:57 +0000
asID: 62240
IP address blocks: 154.195.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91819 (0x166ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:28:57 2025 GMT
Not After : Mar 26 07:28:57 2025 GMT
Subject: CN=67c0143d-6ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cf:08:8f:a8:ce:cf:c1:ce:fa:10:63:18:6e:
7c:8d:81:7b:cd:26:1c:c0:1c:4d:57:fc:be:23:70:
af:29:35:cf:0b:03:7c:5a:06:11:fa:59:32:88:c3:
e4:44:f0:b2:e8:c0:22:90:15:a9:09:9f:35:7d:7d:
93:e5:2f:3d:b3:c6:c8:b1:68:9a:ec:82:fc:c9:9b:
11:08:a6:a1:95:5f:b2:b8:00:da:3a:cf:7b:a7:4c:
fb:f2:60:f3:1e:2c:37:6e:83:37:2c:e0:ec:13:8f:
18:72:5a:c9:4d:06:88:e2:13:a2:13:d1:a8:75:2e:
3a:39:77:34:bb:37:cb:d8:d0:92:7f:a2:b8:da:38:
03:50:fd:32:56:5a:ca:6f:44:26:c2:98:e5:86:18:
3e:84:e3:d3:74:c9:16:57:60:57:b3:24:f3:ad:0c:
54:c2:f7:67:e4:91:d7:bd:c6:a0:5f:42:48:e0:c7:
e8:60:09:8f:c8:c9:60:61:4f:44:65:d8:a7:d6:5b:
e0:01:65:2c:98:29:12:9b:f8:83:42:bb:a6:e7:44:
75:b0:55:f3:58:c2:b5:53:c7:c4:a0:00:e2:ac:d4:
52:f4:77:5f:21:d4:8f:05:ab:a2:47:1c:93:c9:5e:
6e:03:a2:b7:7c:a0:99:a1:b8:3a:1e:99:60:ac:71:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:C5:17:F1:2B:DF:E8:05:28:DE:F6:31:9F:DE:84:66:55:24:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83AEB0FAF4DC11EF93A5228A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.163.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7e:1e:e7:38:53:14:de:a7:c0:e1:77:3f:5f:dc:59:3d:77:
3d:b2:b8:1a:af:b9:ea:af:24:e9:b7:84:5a:d3:6c:6a:63:e8:
ad:f6:f4:6f:8f:cc:5d:3b:4a:c8:81:b7:ed:66:2a:30:51:cb:
aa:34:5e:bd:9c:44:41:26:1e:6e:73:e9:48:4f:ad:97:1e:53:
40:0f:28:9d:f0:ee:a5:ac:dd:48:87:19:3e:f5:a4:d6:4b:60:
5c:da:df:35:f1:fd:1b:e1:82:33:d8:52:aa:09:10:29:a2:58:
45:ba:2b:b7:90:56:cc:8a:91:b0:ab:0a:41:28:fb:0e:60:50:
63:0d:b8:2f:cc:49:4e:f1:1e:16:88:21:74:ad:dc:a8:66:c7:
48:5a:c9:66:52:ed:5b:31:41:18:63:ec:3a:19:01:78:01:39:
be:6c:11:18:1f:11:54:fc:55:41:1b:b0:95:0f:82:e0:13:b6:
54:cd:54:c3:3c:ca:4f:ff:d7:8d:db:64:0b:45:65:87:59:3e:
33:64:e1:a8:74:4d:55:09:4c:e8:8a:7e:f5:52:ab:9d:61:22:
7a:93:e5:0f:7e:71:b9:28:87:14:19:46:68:95:8b:8b:55:2a:
97:89:07:bf:2a:5f:0a:0f:25:41:cc:80:03:89:2f:c3:ac:b2:
8a:39:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:16:20 2025 by rpki-client