Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8850CDC8F59F11EFA2237044762E951A.roa
File: 8850CDC8F59F11EFA2237044762E951A.roa (raw, json)
Hash identifier: FUy8AfjV1UsrdmIOUyuKYEaFWjHnqNZURGYTZPmQup0=
Subject key identifier: C8:8E:9E:0A:7A:1F:CA:4F:A7:2F:A1:D9:33:08:F4:F6:1D:3E:0C:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8850CDC8F59F11EFA2237044762E951A.roa
Signing time: Fri 28 Feb 2025 06:45:01 +0000
ROA not before: Fri 28 Feb 2025 06:44:57 +0000
ROA not after: Sat 29 Mar 2025 06:44:57 +0000
asID: 174
IP address blocks: 154.88.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92635 (0x169db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 06:44:57 2025 GMT
Not After : Mar 29 06:44:57 2025 GMT
Subject: CN=67c15b6d-7019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:45:5a:b6:ba:b5:9f:09:f5:12:a8:8e:56:
7f:cb:d7:2f:10:e1:ed:aa:8b:62:70:63:5d:36:36:
dc:6c:21:9c:1d:2a:e2:a0:db:10:60:2d:38:92:bc:
e0:22:93:67:79:12:63:fd:98:6a:94:6e:f0:7d:a9:
df:2d:e6:d3:41:85:0a:3a:be:ae:0d:b0:54:3f:c2:
57:ad:03:fc:fb:24:c4:9f:ee:b5:6f:fd:a5:46:b4:
5f:b2:0d:f4:07:58:14:ae:f2:4a:33:8a:8e:79:29:
25:c4:b1:dd:1c:eb:01:60:90:86:c2:c9:27:cc:bd:
96:cf:f8:b4:98:fb:75:11:d2:63:84:46:fe:83:93:
b7:e1:ec:c5:99:bc:75:b0:03:94:c2:f3:96:21:0a:
af:2c:bf:b4:d8:64:d6:f6:b1:7a:14:15:dd:ad:0a:
06:e8:09:43:cb:2e:06:4f:b2:a5:11:a7:28:12:38:
6e:5e:28:53:96:04:78:0b:84:54:4a:35:a5:c8:1a:
e6:73:8d:09:4d:a2:81:01:5e:8d:e7:bf:54:2f:25:
c9:fd:c8:51:5c:90:5d:6d:b4:84:d0:0b:1d:42:0c:
c4:cd:cc:c2:dc:eb:6d:c0:f5:bc:33:d3:e6:d1:b6:
dc:60:fb:da:04:f6:91:e6:64:81:d8:bd:6b:3f:bc:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:9E:0A:7A:1F:CA:4F:A7:2F:A1:D9:33:08:F4:F6:1D:3E:0C:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8850CDC8F59F11EFA2237044762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:97:98:87:ba:9f:09:0b:ee:8a:ad:a1:64:8a:ea:f6:32:b1:
ec:43:e6:94:cd:80:52:cf:0b:fd:21:9b:ad:b2:1e:1f:7f:73:
b2:bc:87:bb:6d:13:1c:d4:b1:23:21:29:b4:e6:32:71:66:b0:
fc:dc:54:3d:9d:33:4a:ae:c5:2c:89:28:9d:6b:cf:a5:d2:2b:
38:fd:61:8e:8a:f2:55:b8:9d:1f:ae:09:d9:41:a1:bb:95:6d:
2a:19:d1:7e:11:a4:71:ee:ec:c5:42:d8:62:02:3d:47:fe:5f:
95:17:6d:7b:db:44:4b:bc:40:51:ed:79:a8:da:ee:a4:5e:db:
9b:6d:38:db:21:2a:70:de:dc:46:64:13:85:0f:ec:c6:86:bc:
94:be:1c:b5:b0:11:db:32:af:08:0d:e3:9a:6d:74:fa:4f:09:
db:48:bd:1b:7a:39:0e:03:74:b3:c3:d6:20:67:b8:78:84:ad:
0a:3b:6d:28:72:62:98:a1:bd:00:b9:37:71:90:63:5e:c9:71:
0a:a0:e4:dd:f8:0f:80:57:07:a4:6b:e1:b6:c6:ee:a8:6e:e1:
92:9f:23:00:db:e8:83:cb:0d:c2:a4:61:af:fc:3d:1c:bc:5f:
06:a5:c0:95:03:47:35:30:04:93:9d:dd:f4:e9:c1:b5:0b:bd:
cc:19:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:25:06 2025 by rpki-client