Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9449F7FEF62A11EF90D67072762E951A.roa
File: 9449F7FEF62A11EF90D67072762E951A.roa (raw, json)
Hash identifier: Uanyt1w1GPfLznJXEXGp8ad1sU6VeFMdltH7Kz7tOes=
Subject key identifier: D2:C1:A6:34:FF:25:F2:33:45:92:80:E3:11:C3:81:F7:5E:C4:83:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9449F7FEF62A11EF90D67072762E951A.roa
Signing time: Fri 28 Feb 2025 23:20:21 +0000
ROA not before: Fri 28 Feb 2025 23:20:17 +0000
ROA not after: Wed 26 Mar 2025 23:20:17 +0000
asID: 62240
IP address blocks: 154.194.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93381 (0x16cc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 23:20:17 2025 GMT
Not After : Mar 26 23:20:17 2025 GMT
Subject: CN=67c244b5-fca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:38:5b:3d:f2:4f:fb:f4:c6:b8:52:71:a1:d8:
1a:27:77:3a:77:e4:49:80:cf:f0:0d:23:b0:4c:33:
86:28:8c:ec:4f:30:ef:cf:6b:98:f4:9e:1a:7a:98:
b2:44:06:9b:9a:57:d9:f9:36:39:19:84:84:97:4b:
16:b4:32:a6:a0:99:8e:85:1a:7c:72:3f:4b:8c:0c:
bb:82:9a:da:56:ac:1d:27:e4:69:2d:23:94:5d:84:
bc:ca:de:d1:62:6c:c0:ce:85:ce:c1:74:0e:50:12:
48:a3:6e:7b:8b:90:2f:d9:d5:83:2a:c7:86:5c:9f:
f7:e0:05:b4:3e:86:c5:d5:6c:d0:3e:1d:5e:17:ac:
9c:b5:67:ba:77:12:46:06:4d:02:29:8e:eb:5a:38:
68:ad:31:ba:b7:d6:95:a4:5c:6e:b5:44:fb:55:f8:
6e:e9:7d:67:20:ad:63:58:a3:52:6a:83:99:1c:4c:
c9:67:40:80:dc:49:a1:bb:73:93:4b:36:50:7a:cf:
03:40:33:08:5b:0e:fb:62:c5:f0:19:4f:c5:67:62:
a3:19:86:ab:47:8b:1e:42:6b:74:ff:cf:05:c9:84:
cb:fb:dc:cd:a5:76:52:5e:14:41:67:a3:06:1e:69:
b6:58:94:ce:aa:9e:f0:55:fb:4f:57:35:6a:9c:7d:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:A6:34:FF:25:F2:33:45:92:80:E3:11:C3:81:F7:5E:C4:83:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9449F7FEF62A11EF90D67072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.126.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:03:86:2c:18:b3:70:3f:1b:fe:5a:26:05:8e:6e:df:57:1e:
ef:9d:86:f4:c9:44:40:4f:88:23:37:2a:b1:b1:02:d0:7c:f8:
75:d8:0e:55:d0:de:56:7f:c5:90:2c:7d:59:6b:27:e6:83:b6:
85:77:cc:79:ca:17:72:99:b3:42:d0:05:ca:a9:23:01:43:5f:
a7:30:3d:00:db:a5:3a:a5:9c:ed:9e:f2:d2:cf:36:90:b1:e9:
f4:21:f6:fb:2f:0b:50:17:31:bf:28:29:de:72:5c:80:a8:43:
66:00:3f:d1:56:b4:5b:10:47:e7:12:b0:99:27:9d:11:c1:21:
5d:f0:a8:d1:b0:ff:3b:cd:60:0f:f4:ac:a6:38:e2:09:92:04:
69:2c:9d:36:98:1d:74:82:b9:e8:93:03:93:69:87:5c:bc:fe:
c8:0c:4d:75:97:b8:5a:ac:c7:95:a4:92:63:d1:1c:29:f0:62:
9d:dd:c0:98:7e:c8:67:28:12:6d:c2:48:23:93:d7:37:ba:1f:
f1:0e:02:a6:c7:4f:83:b9:f4:90:34:53:ae:60:27:7b:57:43:
ca:63:8c:0e:2e:41:d7:af:be:cf:86:fd:7d:40:0b:51:fa:bb:
40:06:b4:c9:f4:56:ae:04:f0:b4:a5:d0:19:6b:be:54:ed:0f:
db:8e:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:05:21 2025 by rpki-client