Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/892D7230F2C211EF91143C94762E951A.roa
File: 892D7230F2C211EF91143C94762E951A.roa (raw, json)
Hash identifier: UVkZxTIKHYZTFlwlYQRQ/STfxdFbFtvKpy1c2+FyA6U=
Subject key identifier: F5:35:87:39:2B:DF:22:44:3F:E0:DB:5B:7D:3E:8C:4A:0D:29:5C:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/892D7230F2C211EF91143C94762E951A.roa
Signing time: Mon 24 Feb 2025 15:18:01 +0000
ROA not before: Mon 24 Feb 2025 15:17:57 +0000
ROA not after: Sat 29 Mar 2025 15:17:57 +0000
asID: 203020
IP address blocks: 154.223.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89156 (0x15c44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 15:17:57 2025 GMT
Not After : Mar 29 15:17:57 2025 GMT
Subject: CN=67bc8da9-b074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:20:55:17:49:b2:3d:3e:bf:f7:fe:c6:ab:
15:9a:82:15:e0:d5:3b:4f:7c:52:d6:b3:a6:1b:f0:
54:72:ac:7c:03:d6:5a:64:05:4f:20:d9:ac:9f:76:
58:36:fb:34:d9:ea:68:0e:3a:af:8c:a3:b0:11:47:
d4:72:71:b3:8a:fa:dd:1c:9c:ef:9a:02:63:2c:df:
22:05:b0:0e:84:9c:89:17:91:0a:fc:19:26:93:a8:
c6:f2:ff:45:5c:97:05:2d:4c:1e:ad:ff:30:93:62:
cc:d3:5e:e8:30:e0:8a:ab:33:e8:a4:ab:ff:ef:53:
1e:07:a0:c8:72:a2:a2:34:11:2a:1a:4f:02:ec:cf:
4c:20:41:31:2b:cf:e5:e4:d5:30:4e:83:98:88:92:
e4:8c:f5:e5:16:bb:a6:cb:29:68:83:0b:7a:c8:c2:
70:fe:8c:ea:32:4f:41:a2:98:44:5d:1c:de:b0:cc:
21:5e:a1:63:74:8a:9f:91:13:fd:3f:ee:2e:9f:3a:
86:28:9b:5a:d5:3b:79:71:74:41:78:e3:1a:a4:57:
6e:c0:5f:e8:fa:fd:22:99:8d:23:2e:0e:12:55:6d:
55:3c:90:65:8e:04:bf:d5:4c:f9:92:09:ae:5f:e1:
4d:75:c2:5c:99:27:5f:75:b2:59:09:ae:75:69:c1:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:35:87:39:2B:DF:22:44:3F:E0:DB:5B:7D:3E:8C:4A:0D:29:5C:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/892D7230F2C211EF91143C94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.138.0/24
Signature Algorithm: sha256WithRSAEncryption
07:75:ec:28:27:49:34:ee:89:49:cf:df:61:e0:c1:fb:50:02:
3b:ba:6b:ba:5f:d6:50:04:2c:92:9c:00:30:0e:bc:1e:0b:e4:
5e:eb:8d:92:ce:82:dd:71:50:7d:c0:c1:24:8b:c3:b9:99:18:
d5:90:ea:c8:98:c5:0e:00:83:53:f8:6b:45:63:d1:c5:24:d5:
be:24:32:a3:d6:27:b9:44:9a:55:18:33:1d:63:ca:af:8c:a3:
47:c3:9f:66:04:27:e8:0c:98:12:da:56:a1:37:0a:fa:d5:b5:
7a:30:12:4a:81:7c:72:2c:8f:c5:2e:20:26:26:11:55:36:d5:
dc:f4:f8:cc:f1:ed:6b:b4:b1:2c:aa:aa:c0:25:d2:c4:3b:3b:
b2:7a:37:6e:d7:5a:3a:18:1b:87:07:57:b3:6e:b3:c8:6a:88:
9a:2d:21:7e:19:4b:e9:da:57:2b:ec:05:50:4e:08:28:04:54:
81:bd:56:c5:7c:f7:9f:21:e0:00:45:04:69:59:64:fc:a1:23:
57:a6:59:76:90:ee:45:66:a4:ab:d1:61:c2:19:7f:20:bb:93:
44:2e:fe:cb:38:89:b7:4f:93:03:1f:87:aa:6c:c3:bc:1c:75:
ea:16:5c:b9:73:e3:f9:1c:29:2d:af:3e:8d:72:29:4c:0e:ad:
81:3a:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:08:34 2025 by rpki-client