Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92A99F74F16811EF81EF1947762E951A.roa
File: 92A99F74F16811EF81EF1947762E951A.roa (raw, json)
Hash identifier: JvkE6MulXYFc3WOwi6VVv64mEhkxSOPOOOr1/j/eFR4=
Subject key identifier: 17:95:04:54:09:47:9E:2E:DA:AB:09:FB:3B:64:13:22:8F:9B:66:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015AA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92A99F74F16811EF81EF1947762E951A.roa
Signing time: Sat 22 Feb 2025 22:01:31 +0000
ROA not before: Sat 22 Feb 2025 22:01:27 +0000
ROA not after: Wed 26 Mar 2025 22:01:27 +0000
asID: 395886
IP address blocks: 154.201.92.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88739 (0x15aa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 22:01:27 2025 GMT
Not After : Mar 26 22:01:27 2025 GMT
Subject: CN=67ba493b-1c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:83:29:2d:99:92:20:8b:9f:f0:21:23:c8:
fe:03:5d:90:65:69:cd:48:2d:8a:9f:a7:71:96:78:
94:33:db:77:d6:1b:a4:f2:7b:b0:62:3d:5e:88:9e:
d1:08:2b:1d:d1:19:75:bd:fe:1f:36:f5:42:7c:c9:
57:85:45:38:a6:e1:a3:8f:04:c0:0c:4a:f1:40:e8:
49:61:cf:8a:08:6c:16:4b:b2:57:78:b9:91:70:e1:
b9:8a:34:3d:25:6b:f6:c0:35:b6:ff:ae:92:c2:68:
8a:f1:42:38:ac:31:f6:25:a6:a5:47:34:67:54:c1:
cc:ce:74:67:6b:ec:45:7c:64:51:e1:8c:da:d4:c9:
3d:3a:63:a6:18:0f:70:8e:4b:04:9c:28:2b:9f:a4:
cb:66:30:7a:7f:d4:14:58:82:e4:e7:12:b0:5f:fc:
1e:07:82:5f:40:ac:e7:84:57:b5:4f:eb:35:cf:d2:
a0:76:2e:35:6f:30:20:87:c0:05:4a:fc:35:42:9e:
ef:67:e7:52:96:22:b7:5e:61:ca:c7:cd:e1:b8:b0:
9e:f6:52:35:c4:ca:1d:32:28:15:a9:0c:91:27:c9:
4f:52:be:aa:75:9f:4e:03:2c:ca:df:f3:93:31:29:
3a:b4:d4:2d:d2:24:6f:25:f8:8a:c6:e0:9d:9a:bf:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:95:04:54:09:47:9E:2E:DA:AB:09:FB:3B:64:13:22:8F:9B:66:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92A99F74F16811EF81EF1947762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.92.0/23
Signature Algorithm: sha256WithRSAEncryption
04:56:13:b1:3c:33:ec:15:8f:06:0d:60:b7:c3:11:81:ce:76:
4e:fc:eb:1e:25:9f:fe:85:1b:95:37:34:3a:0a:c1:d1:fe:bb:
2a:d4:e7:eb:4d:cd:6b:8e:f1:4a:8b:9f:05:f3:f1:12:87:c0:
3e:82:a0:34:64:42:73:0f:59:bf:99:0f:4a:df:6b:22:8f:9f:
32:6c:10:94:68:0c:61:65:56:9d:86:9c:f8:cb:15:ef:b6:b5:
b7:9a:33:e8:1b:0a:4e:60:e0:21:42:62:46:fb:0e:00:be:14:
48:0e:c2:6b:cf:96:bb:b4:18:90:99:6b:99:61:b0:1e:9a:00:
47:13:7b:80:ea:e1:5a:6b:c5:d9:f8:a6:4f:6b:f6:9f:2d:07:
a2:8c:7c:9d:b5:87:41:cd:6b:07:80:2a:4a:5f:aa:dd:cc:21:
4d:99:5c:f7:f0:25:a8:7a:ef:3c:e0:c9:11:c1:7f:c2:63:6d:
27:ec:09:c7:43:7d:9a:6d:d9:cf:12:c5:fb:60:c2:e3:71:9b:
25:0f:98:1c:3b:99:45:bd:d6:7e:c7:a5:fa:c6:be:b4:5f:ce:
07:c3:a8:8d:49:dd:23:04:a4:9e:28:27:4c:ff:cc:f9:ac:dd:
c0:e8:e6:fd:2f:31:2c:b6:5b:e1:5a:00:9f:ed:95:67:ca:94:
ee:0e:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:07:51 2025 by rpki-client