Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97536874F62811EFBA98BE64762E951A.roa
File: 97536874F62811EFBA98BE64762E951A.roa (raw, json)
Hash identifier: ccJrBCW42hVYGME0AoiuCOVRVmMrSWnF0G9zBOpR9uY=
Subject key identifier: 52:61:36:72:2F:23:E9:56:C3:B4:C4:7B:8E:25:AE:E0:06:D3:99:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97536874F62811EFBA98BE64762E951A.roa
Signing time: Fri 28 Feb 2025 23:06:07 +0000
ROA not before: Fri 28 Feb 2025 23:06:03 +0000
ROA not after: Wed 26 Mar 2025 23:06:03 +0000
asID: 62240
IP address blocks: 154.194.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93361 (0x16cb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 23:06:03 2025 GMT
Not After : Mar 26 23:06:03 2025 GMT
Subject: CN=67c2415f-81a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:9f:b8:99:df:ee:a9:91:1d:32:ef:90:3f:
83:36:0a:cc:63:51:ad:e5:fc:7b:76:b2:41:8b:56:
63:ae:94:bf:f7:e5:86:ea:86:ea:aa:60:eb:be:95:
58:b0:d3:8f:e0:0c:a1:b6:0f:ed:7d:4c:d2:3c:15:
f0:8f:80:24:7d:7c:17:09:dd:2b:66:9a:81:ce:94:
b7:33:4d:75:8f:56:ef:5e:55:03:25:a2:12:2a:db:
8a:d3:10:73:a4:9f:5b:f7:1c:9c:a6:64:8c:5e:c5:
f4:1a:cc:41:a7:a7:d8:d4:b9:7f:0c:5f:5e:c3:43:
4a:17:d0:a1:f5:42:ee:37:e5:e3:eb:cb:68:82:1f:
38:3b:43:92:a6:89:71:c7:49:db:ff:d4:06:a2:3a:
b1:f5:13:96:dc:59:97:a0:4e:c0:ea:83:93:5c:67:
f6:a1:8e:c2:3d:b4:20:a6:67:7a:9b:9b:0a:6c:dc:
00:0e:85:4e:b1:99:a4:e5:87:63:91:c1:82:b5:ad:
e3:78:6b:62:8c:0b:e4:84:30:e8:96:23:b5:14:a8:
0a:dc:06:4b:71:d5:1e:37:f0:46:90:f0:bb:57:50:
49:fe:fd:df:5f:86:d2:46:80:b1:58:b1:80:0b:bd:
3c:c8:15:a0:be:26:15:58:aa:10:78:4c:75:f7:20:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:61:36:72:2F:23:E9:56:C3:B4:C4:7B:8E:25:AE:E0:06:D3:99:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97536874F62811EFBA98BE64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cf:9b:ec:e5:4f:e6:6f:ad:26:0f:2d:6b:e4:80:31:84:2c:
a7:63:f6:36:d7:ac:61:25:4f:a4:be:8c:ae:dc:9f:65:e1:65:
91:82:3e:44:18:61:67:13:07:55:d5:81:9e:9e:29:64:46:4f:
4a:3d:6b:83:02:1b:1d:6d:53:a3:64:dc:50:8c:1b:17:6e:3c:
58:0e:8e:2c:c6:e3:08:b3:2d:11:e7:4e:a4:85:20:4c:e0:9f:
66:69:e3:c2:a5:c5:e8:b9:ee:c9:3f:ec:d2:70:f0:64:7f:82:
72:a1:fc:fa:ce:1d:27:00:c8:71:5a:89:5f:ed:4f:33:a5:0c:
0a:f8:c2:b1:ff:7b:fc:31:40:19:b7:1d:71:58:f0:5e:55:17:
f7:fe:9d:f4:77:4c:0f:b7:b3:fc:61:5c:3c:b9:40:33:10:f3:
cc:d8:f4:71:c9:7e:9d:56:e7:8a:dd:bc:fe:b2:41:b9:1c:38:
6f:78:6f:b6:66:d4:ea:fd:e2:06:b9:f4:50:da:9c:63:cc:0b:
cd:72:3a:77:01:f4:91:1c:89:bf:89:30:ba:ed:4f:d9:ef:80:
4e:d0:f5:10:78:13:bf:df:d8:6a:8b:28:e8:72:a3:cf:e2:43:
81:b1:0a:51:c9:f1:21:8c:e3:04:a0:f3:02:5d:2d:bd:f0:8f:
b2:a0:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:53 2025 by rpki-client