Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98EBBC58F81D11EFA5F0F0BC762E951A.roa
File: 98EBBC58F81D11EFA5F0F0BC762E951A.roa (raw, json)
Hash identifier: 7AWGlmh/NcNPJrw8MYLmy8/zBf9OpLQ3f/ENvvWWiLo=
Subject key identifier: 72:C9:A2:F2:17:04:23:36:CC:D7:6E:52:21:70:BB:3A:78:27:92:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01703F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98EBBC58F81D11EFA5F0F0BC762E951A.roa
Signing time: Mon 03 Mar 2025 10:52:27 +0000
ROA not before: Mon 03 Mar 2025 10:52:23 +0000
ROA not after: Mon 31 Mar 2025 10:52:23 +0000
asID: 202656
IP address blocks: 154.219.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94271 (0x1703f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:52:23 2025 GMT
Not After : Mar 31 10:52:23 2025 GMT
Subject: CN=67c589eb-7054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:a4:95:93:b6:d2:08:95:b2:16:1e:55:50:
da:ef:8c:a0:a2:f5:cb:cd:5c:86:55:e5:74:e9:92:
b7:7f:a9:02:d5:e4:9c:8e:55:34:ea:14:e2:4b:8b:
60:e7:aa:26:52:12:63:f8:4b:61:72:c7:cd:a4:22:
c2:9c:ef:e0:23:f6:ff:b2:6a:8a:6c:87:36:71:9c:
fa:c1:c5:9a:0f:ff:74:5b:96:74:03:f9:a2:94:49:
85:2c:39:7d:c6:a9:bc:ff:d0:dd:bc:92:e7:68:a8:
a0:4c:3f:e5:c5:5a:cc:1d:f7:5b:3c:83:3a:41:25:
2f:8b:08:0c:a1:ad:2d:c3:93:0b:3d:b9:c8:ec:3b:
08:c7:8a:9b:44:f0:1c:6f:48:88:21:ef:ed:ec:ff:
da:de:f1:2b:69:dd:6c:bb:59:0d:eb:5d:f7:1c:87:
98:67:1f:eb:f3:c6:1f:8a:c1:84:26:69:c8:8d:dc:
67:92:53:6b:22:ff:d4:b8:e8:4f:b6:a4:e0:09:ca:
12:8e:0e:f9:77:b2:63:6b:96:63:99:66:7c:37:23:
1a:d8:b5:83:0a:f6:bf:82:9a:20:83:f0:3d:41:bd:
3c:da:5b:a9:2d:f3:8a:05:3f:9d:01:b4:f0:54:37:
8b:b4:ac:3d:54:18:60:3c:99:58:7b:f7:94:ff:3c:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C9:A2:F2:17:04:23:36:CC:D7:6E:52:21:70:BB:3A:78:27:92:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98EBBC58F81D11EFA5F0F0BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.29.0/24
Signature Algorithm: sha256WithRSAEncryption
71:12:5e:91:56:53:fd:3f:28:e1:92:fe:51:c7:c4:c3:d1:45:
2a:f3:c9:08:78:65:d6:e3:7c:89:d7:d6:27:aa:77:e4:11:49:
b7:81:02:36:6f:c0:e7:00:04:08:37:ce:ff:8e:fa:ae:24:09:
1e:86:07:f0:b7:6f:47:3b:b0:2d:e8:8b:5a:e2:4b:56:ec:c4:
ed:34:de:9c:ec:8f:a8:28:34:03:bf:1e:6b:27:0e:13:73:8e:
1e:34:fa:1d:43:7e:61:f1:95:6b:bc:6a:bf:aa:68:49:20:f9:
e2:7d:a8:90:a3:6d:50:1f:77:f6:3e:2f:0f:f5:22:bb:36:cc:
f0:e3:da:20:5f:71:7f:4c:a8:db:20:f9:80:b6:9b:f7:05:0f:
74:54:10:2c:12:c9:f0:f5:e7:69:b2:06:23:63:a8:01:36:ad:
37:df:48:77:4b:91:d1:41:2b:a9:3d:52:07:e9:71:d8:a3:08:
27:85:d6:13:9c:d5:f5:d5:71:94:68:a0:82:e4:10:41:78:34:
28:89:c4:7f:27:97:31:9c:97:a4:3c:3c:15:60:c0:e4:a5:03:
3e:87:9c:2b:9f:ec:8e:53:a4:79:c1:53:6c:ae:01:b4:1b:df:
8e:61:79:23:c2:bd:10:b5:2c:7a:64:f4:92:a2:40:f8:4c:08:
86:ae:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:43:44 2025 by rpki-client