Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90431BCCF4D111EF989167BE762E951A.roa
File: 90431BCCF4D111EF989167BE762E951A.roa (raw, json)
Hash identifier: IFe61tkVaLXgnkR9mAeVTYTAlGh3jHjnm7crNywMwK8=
Subject key identifier: 81:DF:2F:57:01:C3:87:61:14:78:11:5A:CF:E6:E6:9D:72:BF:28:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016649
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90431BCCF4D111EF989167BE762E951A.roa
Signing time: Thu 27 Feb 2025 06:10:38 +0000
ROA not before: Thu 27 Feb 2025 06:10:34 +0000
ROA not after: Wed 26 Mar 2025 06:10:34 +0000
asID: 62240
IP address blocks: 154.195.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91721 (0x16649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 06:10:34 2025 GMT
Not After : Mar 26 06:10:34 2025 GMT
Subject: CN=67c001de-ffd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:16:ef:53:ab:96:5c:cb:43:bb:4a:e3:7d:
3d:06:71:4f:97:77:ef:30:19:93:c2:57:ee:eb:dd:
b2:8a:84:00:21:ba:bd:77:b2:a5:6e:11:4c:8d:2a:
f3:29:69:32:6e:b6:42:7b:14:53:ef:e5:31:45:c5:
b9:65:af:63:82:2a:f1:87:c5:0f:81:71:2a:74:fc:
a5:fb:f0:76:1a:5f:91:03:b0:91:dc:c1:b6:b1:a0:
b4:a7:46:74:bd:f1:77:34:1e:07:22:07:a2:15:35:
6b:d6:6a:b2:70:ef:cf:ea:70:17:fd:7c:cb:05:ec:
ae:c2:82:3c:85:af:57:3f:65:ec:16:d4:03:bf:a7:
47:77:9d:bc:ca:3b:b8:fd:4e:19:72:c0:9f:1d:c7:
55:d1:66:7b:b7:4c:35:0a:eb:ef:d5:ee:54:97:e1:
b4:da:f8:b0:6b:90:7f:c2:18:4f:5a:c4:53:c3:80:
10:80:ab:9e:c7:97:69:9f:38:7b:dd:4e:e2:c7:f4:
d4:e9:03:aa:60:51:ec:ac:e9:5e:14:8a:2c:e2:23:
3c:b6:49:9a:71:0f:5c:cd:e9:f8:6c:0d:dc:5e:ba:
fc:1c:7a:f6:32:53:ca:fa:b1:a6:7d:0c:51:07:70:
42:e3:38:f0:2c:ee:21:b2:1f:51:76:1d:ed:6e:bb:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DF:2F:57:01:C3:87:61:14:78:11:5A:CF:E6:E6:9D:72:BF:28:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90431BCCF4D111EF989167BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.139.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:b9:a1:87:b4:44:b9:9c:42:29:29:27:b3:db:d6:3d:e9:b1:
c9:28:d5:4e:4b:06:3f:db:d0:86:e1:a8:42:27:f4:4c:4d:a1:
1a:78:1e:87:ae:48:74:85:c8:f8:87:f3:d1:4a:0a:f4:4e:45:
ad:a4:42:e1:25:a1:c2:b5:c7:8a:5e:0d:30:9d:55:53:d9:7e:
93:84:7a:56:f1:32:92:30:a7:6f:92:14:ed:d4:d9:0c:1a:20:
a3:0e:83:f4:fe:af:97:4f:5c:53:40:20:a0:30:b9:9b:df:4e:
4c:9f:9a:6d:a4:35:29:95:53:46:fe:21:9f:db:94:d8:a8:0e:
79:8d:ec:39:48:fa:3f:19:5b:71:e8:d9:c2:47:8e:85:0f:e9:
c7:f4:e7:32:c1:b9:90:52:fe:90:7c:11:82:48:d5:04:2d:e6:
d3:a2:79:06:20:be:a6:26:90:8b:6e:0a:0c:1c:7c:8c:1e:17:
aa:0f:a6:4f:dc:f5:a2:7b:3c:db:29:60:7b:a9:c9:ff:0d:8a:
83:1a:c3:f8:6b:b7:26:78:4f:e0:db:f2:a9:a5:43:64:74:84:
82:ca:bb:3c:6f:37:0f:c6:30:58:92:39:b6:7c:86:50:23:79:
a3:f8:10:a8:1e:ad:e1:42:f0:03:a5:f0:c1:9f:f9:e4:98:12:
62:ef:84:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:42:18 2025 by rpki-client