Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9526EB6AF5E311EF92AA6D95762E951A.roa
File: 9526EB6AF5E311EF92AA6D95762E951A.roa (raw, json)
Hash identifier: tI8BSbhao3b6s0Myatg8pLHglVc/sVSo4wsrJyFTcgs=
Subject key identifier: 4C:F7:E1:91:E9:4D:CC:5F:F7:AF:4B:80:05:8F:99:EB:4B:FA:A8:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9526EB6AF5E311EF92AA6D95762E951A.roa
Signing time: Fri 28 Feb 2025 14:52:08 +0000
ROA not before: Fri 28 Feb 2025 14:52:04 +0000
ROA not after: Wed 26 Mar 2025 14:52:04 +0000
asID: 62240
IP address blocks: 154.194.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93052 (0x16b7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 14:52:04 2025 GMT
Not After : Mar 26 14:52:04 2025 GMT
Subject: CN=67c1cd98-7f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:4d:e2:2d:15:4d:68:ac:21:1c:79:18:50:
57:94:a9:bb:6c:66:a9:18:10:62:86:f3:7a:d7:3d:
e7:69:00:3d:6c:b7:c7:47:64:a8:b2:e8:2e:d6:f5:
f2:9b:9a:f0:67:d2:84:99:40:ac:8c:70:09:ce:e6:
4d:1d:a6:36:02:83:77:f0:65:0c:3a:b6:08:a5:08:
7c:b5:00:18:39:38:e4:d4:fd:48:11:10:69:9e:af:
da:69:5a:42:df:fd:ac:b4:2b:82:21:06:51:2b:64:
f6:d6:6e:ee:5c:3a:d2:03:7d:2f:4c:eb:9b:88:cb:
0f:5f:8b:94:ff:5a:59:1c:97:12:83:f9:32:6f:23:
ad:85:01:64:aa:b3:d9:77:85:9c:9b:7c:d3:71:50:
64:35:08:e7:cc:02:e5:63:53:af:57:0d:c4:0e:16:
0b:e9:09:db:2c:40:09:d1:87:75:2d:e9:ba:6f:cc:
88:d7:61:38:fd:f7:aa:79:17:59:7f:44:21:89:65:
18:52:6d:6f:51:10:9a:ec:ce:93:13:1b:65:90:be:
dc:7c:8c:83:ba:f1:11:f9:bf:43:c8:d4:a2:d1:7c:
a4:13:d0:7f:19:06:a0:5e:5d:49:ec:c6:5c:92:a4:
cf:a2:85:d7:04:82:48:71:0f:3d:c1:d5:f7:70:8c:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:E1:91:E9:4D:CC:5F:F7:AF:4B:80:05:8F:99:EB:4B:FA:A8:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9526EB6AF5E311EF92AA6D95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.89.0/24
Signature Algorithm: sha256WithRSAEncryption
09:93:f3:6b:ca:25:6b:97:11:14:03:18:fe:03:38:ed:08:05:
24:96:26:10:8b:ae:41:26:14:66:ee:7c:da:4a:27:08:37:3c:
11:c6:59:73:97:80:cb:c1:a1:bc:8b:b2:ed:b7:9d:2c:5b:6f:
bf:e2:41:b1:68:c8:da:21:9f:dd:25:1d:f4:37:33:87:43:92:
c0:cd:43:bf:62:32:9c:d2:04:78:0e:36:02:73:fd:c6:75:2a:
ab:41:a5:29:b0:2a:63:6c:fe:d8:c1:db:68:71:3b:02:ea:98:
4c:67:f8:83:8b:c0:95:35:58:35:ba:41:37:6c:35:79:d5:57:
20:c7:8f:bd:7a:51:4e:b6:0a:dc:d5:96:d2:08:44:e1:2f:c6:
c7:13:09:d1:b6:b8:b9:bc:96:33:a2:22:03:5f:fd:24:16:88:
28:c0:68:b8:ea:fb:38:94:25:63:0f:69:89:a0:32:94:94:0f:
d6:1c:6e:e3:0f:a6:a1:b3:28:8e:35:e7:6a:7a:61:92:0b:d1:
4d:16:55:5c:40:52:7c:14:cb:b3:32:fd:0a:24:65:db:5c:b0:
53:ad:44:72:d9:d8:5a:89:e6:b2:42:25:a3:ad:13:ce:72:ed:
27:0a:b4:23:c8:50:19:d1:e6:87:6d:79:71:af:25:02:3e:06:
cf:e7:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:49:56 2025 by rpki-client