Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86FC14E0F2E411EF8EC88277762E951A.roa
File: 86FC14E0F2E411EF8EC88277762E951A.roa (raw, json)
Hash identifier: q0/BRLRdTha3nQdmz+vAUwkxbL50yOFPgLla8iV0ozU=
Subject key identifier: 08:5D:1B:8C:48:E1:EC:CC:3C:E7:9A:33:2E:87:68:17:02:B5:A8:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86FC14E0F2E411EF8EC88277762E951A.roa
Signing time: Mon 24 Feb 2025 19:21:20 +0000
ROA not before: Mon 24 Feb 2025 19:21:16 +0000
ROA not after: Wed 26 Mar 2025 19:21:16 +0000
asID: 39600
IP address blocks: 154.94.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89324 (0x15cec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 19:21:16 2025 GMT
Not After : Mar 26 19:21:16 2025 GMT
Subject: CN=67bcc6b0-8273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:7c:0c:aa:62:f3:ee:38:fa:8b:30:c9:d2:
2a:3f:e7:ef:dd:7d:91:01:77:ae:1a:e5:fe:c1:67:
d0:40:bd:ae:dd:ce:fb:55:47:f9:ab:91:09:08:0c:
7e:0f:01:8c:8a:93:05:00:42:96:a4:98:ca:ab:6c:
a9:a2:bb:cf:7a:c3:4d:5e:24:70:10:5a:d9:cb:cf:
36:6c:60:86:eb:cb:5a:30:36:2d:48:82:44:38:a9:
5c:27:55:30:4c:62:f2:36:f7:51:6c:1b:b2:97:1b:
75:f9:83:ec:49:af:3a:8c:e2:8c:5d:53:24:25:97:
5b:e1:ca:14:5a:78:29:5c:37:29:30:2f:ad:6e:a3:
d2:74:49:70:a6:d5:04:bd:1b:86:e3:85:80:f1:8f:
8d:97:83:19:fd:77:0f:a5:47:57:43:32:48:38:b1:
ac:49:83:47:4d:00:9d:db:a1:15:ca:63:6b:4b:63:
a6:70:3c:88:8b:3f:a8:39:fa:d0:2d:55:28:80:28:
56:cf:dc:eb:f8:1b:b5:21:b4:ef:13:e1:6f:03:fb:
2c:9d:57:4e:50:91:74:ff:e6:e3:87:39:6b:62:4b:
cc:d3:69:88:a7:b0:aa:78:9a:3a:8d:fa:48:d2:1f:
ce:62:a7:b2:a2:b2:c7:a8:47:3b:fc:25:20:99:46:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5D:1B:8C:48:E1:EC:CC:3C:E7:9A:33:2E:87:68:17:02:B5:A8:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86FC14E0F2E411EF8EC88277762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:90:e9:8e:8e:3f:a8:0d:80:48:3f:d1:b1:9c:d7:15:89:09:
e9:6a:8c:c6:1d:99:1c:b5:89:52:d6:1a:e4:f7:55:57:78:6b:
91:4c:aa:3f:32:45:31:c1:66:20:ff:1f:4a:8a:c5:42:73:de:
c3:ee:dc:b9:30:31:bc:a4:e8:54:6c:32:38:df:60:94:8f:07:
02:c6:63:03:97:fa:e7:c0:3e:cb:37:e3:f0:b5:a5:af:d2:0f:
d4:60:a4:f4:73:9c:3b:21:1c:44:eb:9f:18:28:71:9c:ca:fa:
55:23:99:8c:13:b9:15:6c:7c:64:c7:98:c4:71:61:2d:44:c5:
1a:34:85:19:79:c6:12:73:b8:21:b8:5a:c8:31:9f:46:ce:62:
56:88:c9:3a:d9:20:e2:ca:71:f6:fa:6f:11:a0:af:2c:e0:40:
2b:42:a7:59:b7:d2:9b:14:a9:6c:6a:8d:d7:27:4f:d5:ac:5d:
a5:ef:ab:96:58:85:ad:14:77:20:de:d4:c6:49:ee:07:9d:c8:
ff:a5:9f:af:9d:3f:8c:be:81:1e:23:27:d2:5f:46:0b:fe:77:
d9:dd:78:24:78:1b:65:1a:bc:3b:61:25:75:9c:42:97:0c:96:
44:9b:4d:74:ce:4e:03:96:65:63:a2:91:69:3a:a3:a7:a2:66:
ba:97:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:06:09 2025 by rpki-client