Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7A80D4F16711EFB9CE00BF762E951A.roa
File: 9A7A80D4F16711EFB9CE00BF762E951A.roa (raw, json)
Hash identifier: n5v2HPfZgbeZgti+/naIr5By6t84wIuSz/KNEWVY07E=
Subject key identifier: 99:9B:90:5C:16:C2:50:48:5A:44:42:CA:14:54:FC:9E:47:A5:40:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015A9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7A80D4F16711EFB9CE00BF762E951A.roa
Signing time: Sat 22 Feb 2025 21:54:35 +0000
ROA not before: Sat 22 Feb 2025 21:54:30 +0000
ROA not after: Tue 25 Mar 2025 21:54:30 +0000
asID: 135983
IP address blocks: 154.200.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88733 (0x15a9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 21:54:30 2025 GMT
Not After : Mar 25 21:54:30 2025 GMT
Subject: CN=67ba479b-cfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:d0:3a:4e:98:b5:ab:4c:1c:6b:4d:ec:d6:
b6:ea:69:6e:42:9c:41:54:29:51:c5:08:fe:59:55:
fd:82:7a:69:0f:f4:12:0e:bf:16:ba:6f:ad:ba:f2:
e0:e0:aa:c7:0e:42:28:8a:af:f4:91:d6:1a:31:4d:
ea:e4:d5:45:ee:18:a8:55:52:21:76:07:42:69:34:
29:72:03:b0:6a:99:12:83:c6:3d:fb:c3:9e:60:01:
79:f9:a6:9c:ad:52:17:71:ca:2f:d0:24:d4:6f:2f:
4d:33:19:ed:f2:58:c1:3f:fb:c0:1e:8a:88:64:2e:
7f:80:ac:a5:14:4a:39:16:3e:06:0d:20:5a:25:e6:
a5:eb:5c:64:34:dc:b8:fa:69:43:5f:38:4f:a3:c8:
3a:b0:a7:11:c2:50:1a:a8:74:b4:c2:df:ad:67:11:
6b:a4:cc:77:44:e0:47:93:2a:2a:da:40:3e:eb:e8:
3d:b7:7a:97:45:f9:ed:44:ee:0a:70:c1:2a:bd:6f:
39:7e:3a:7a:73:36:20:58:fb:5d:c8:f0:80:59:8a:
fe:27:12:e6:4b:e5:6b:72:7c:4c:f9:28:70:ef:7e:
ff:ac:bd:d1:cf:bf:9a:97:d5:d5:fa:c7:7c:03:72:
57:ce:bc:31:52:9d:3a:0c:c4:7a:09:1b:83:9a:14:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9B:90:5C:16:C2:50:48:5A:44:42:CA:14:54:FC:9E:47:A5:40:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7A80D4F16711EFB9CE00BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.35.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:18:b6:19:95:e7:ee:77:74:fc:a0:d9:ee:96:63:5d:ab:dc:
68:cb:ac:df:a8:07:cf:62:15:52:95:a0:d3:e5:8b:20:a4:23:
bd:8a:af:34:55:05:e4:5b:75:e4:73:70:04:f6:0b:de:be:08:
52:f8:a3:48:46:8b:bf:63:af:c0:7a:49:64:fc:da:bd:ef:05:
5f:5d:a8:2c:dc:fb:5e:dc:85:5b:7b:eb:6f:85:15:da:14:38:
79:8d:74:a4:d7:ae:76:ed:06:eb:7c:55:8d:d1:6c:32:d6:9d:
7a:c6:7d:26:7a:73:f0:b9:66:c3:37:4b:a3:e6:73:36:08:fa:
e4:4b:45:6a:d4:a6:c5:38:d3:1d:10:09:f4:8e:3c:f5:bd:a3:
db:b1:0c:01:97:53:fe:6c:80:49:e2:64:5c:a8:7a:46:55:b8:
f0:e3:f4:91:47:0c:e0:05:fc:b7:d6:44:09:fe:f1:55:3d:da:
77:1c:df:fb:7b:20:59:61:93:b4:16:95:47:49:90:72:67:db:
3d:f9:cf:b6:2f:13:02:28:d9:8e:a2:fa:41:97:18:ad:c1:05:
d1:9d:22:8f:36:ef:ec:21:87:43:35:34:24:ef:b6:f6:97:84:
6e:52:8c:19:d7:da:a0:fa:a3:ed:61:8a:bf:95:10:75:ee:c9:
74:0c:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:33:51 2025 by rpki-client