Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B626848F4DA11EFA096277C762E951A.roa
File: 8B626848F4DA11EFA096277C762E951A.roa (raw, json)
Hash identifier: R2pxd6CxDjxZxd7u68nmkA5HQXk7nhkiw23edo6OUxw=
Subject key identifier: 36:89:15:FE:9C:8E:82:BD:81:2A:77:32:33:C3:4B:D1:E7:90:21:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B626848F4DA11EFA096277C762E951A.roa
Signing time: Thu 27 Feb 2025 07:14:55 +0000
ROA not before: Thu 27 Feb 2025 07:14:51 +0000
ROA not after: Wed 26 Mar 2025 07:14:51 +0000
asID: 133180
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91809 (0x166a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:14:51 2025 GMT
Not After : Mar 26 07:14:51 2025 GMT
Subject: CN=67c010ef-9bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:9b:e3:68:f4:69:6e:9c:85:b9:f9:52:87:
15:e1:e6:d7:4e:16:6d:c4:89:fa:19:1d:14:01:62:
25:49:a1:bc:da:3c:9a:a9:c2:80:11:97:a9:68:e8:
11:c4:dc:5b:10:1d:26:ac:2f:83:3d:f2:a1:93:cc:
d9:6f:57:3e:4a:8f:ea:4f:e2:f8:97:de:f3:5d:7d:
9a:14:77:f8:c1:c0:2e:8c:62:99:4e:a3:32:26:70:
dd:fd:5b:3f:e9:02:8a:56:be:d7:63:8b:af:0f:4d:
81:d5:5c:c0:a7:1a:19:83:be:f9:3f:a1:47:cc:05:
98:2f:79:76:40:91:0a:b1:b2:f2:ba:b7:c9:b2:97:
bd:6f:ce:23:5b:ef:f0:b2:2f:83:54:e7:4f:32:3a:
e7:1d:88:ef:cc:a7:14:31:bb:8b:63:88:8d:b9:d5:
72:c9:a2:46:2b:76:b0:80:81:a0:83:e9:a4:3b:24:
31:c2:8a:98:5d:67:54:12:d0:e3:39:0b:21:31:b3:
f8:b2:35:98:4c:4d:66:7c:8b:2f:e6:03:06:a5:3d:
0b:86:28:d3:7d:b0:ed:c0:ed:e7:f5:a2:d3:72:03:
db:f8:7a:82:ee:e1:e3:7b:24:69:a8:ab:59:e8:1c:
f1:31:81:41:db:8c:56:43:98:04:46:ca:e0:10:17:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:89:15:FE:9C:8E:82:BD:81:2A:77:32:33:C3:4B:D1:E7:90:21:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B626848F4DA11EFA096277C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
74:b8:52:a9:ed:ea:e7:9a:84:fb:85:fe:33:65:3d:2d:94:31:
ef:1a:22:c6:67:43:3b:3b:40:b7:f5:b1:11:54:9f:2b:e5:70:
7a:ac:91:98:77:16:09:c7:71:59:34:10:29:14:4e:41:b5:f5:
25:fb:d2:d6:89:67:2e:15:89:3f:89:f2:4c:7c:e9:c9:bc:b9:
00:2c:d1:6f:42:c2:82:e5:fd:b5:0c:fa:91:0d:ba:a2:64:03:
e9:66:87:3b:4b:03:48:5c:35:da:2c:f1:a3:84:a9:b3:33:3f:
7d:80:61:15:a8:b9:64:de:3a:f7:14:b4:d6:6e:fe:ad:9e:39:
46:66:d5:f1:59:90:02:94:3a:14:45:e6:d7:38:7e:c8:b6:49:
cc:13:cd:f5:9b:71:3c:0c:e8:f3:c3:eb:12:7b:f4:aa:65:d4:
6d:d3:45:d5:cb:43:01:de:e9:d1:66:9b:18:ab:b6:d0:2c:5a:
8a:9b:35:b5:47:b4:43:b1:eb:5c:4c:b3:0c:5e:74:c4:f2:3c:
dc:49:35:b0:95:e4:8f:eb:29:d7:48:5b:df:d8:e9:93:e9:9d:
c0:33:45:38:9a:89:09:76:21:96:49:98:9b:4e:1a:f9:b8:c3:
60:20:02:7b:cc:a8:e2:66:cb:68:9e:ed:eb:17:25:2e:67:46:
13:e0:e8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:58:26 2025 by rpki-client