Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B36AF84F6BC11EF93C6875E762E951A.roa
File: 9B36AF84F6BC11EF93C6875E762E951A.roa (raw, json)
Hash identifier: WAcYK/7RC+bIajk215IK0igvR8B3D2xu4ahXE/P7z/g=
Subject key identifier: 86:BE:7A:68:44:58:24:14:5E:F7:AE:2E:67:EB:67:74:53:F5:25:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016EF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B36AF84F6BC11EF93C6875E762E951A.roa
Signing time: Sat 01 Mar 2025 16:45:39 +0000
ROA not before: Sat 01 Mar 2025 16:45:35 +0000
ROA not after: Mon 31 Mar 2025 16:45:35 +0000
asID: 202656
IP address blocks: 154.219.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93937 (0x16ef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 16:45:35 2025 GMT
Not After : Mar 31 16:45:35 2025 GMT
Subject: CN=67c339b3-c702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:c5:a6:a4:1a:d1:b3:d2:65:82:62:e7:e7:
0e:26:f6:40:e6:ff:b7:7c:d2:8e:44:aa:1e:10:3d:
27:5a:25:90:a0:22:4c:2a:04:7a:a3:4f:8c:e1:6f:
da:dc:d7:db:0d:33:1e:1f:f7:98:b4:e9:cf:fc:49:
32:a3:d6:26:88:0e:2d:be:87:5d:24:03:b5:1f:c5:
9f:3d:11:2b:1c:0f:bd:39:af:31:d7:b5:5a:98:d6:
16:4e:a6:d9:f1:a0:bd:cb:e2:f0:81:de:0c:98:bc:
65:cd:87:23:0a:61:e4:b9:e5:c4:f6:5d:63:75:f8:
47:9e:38:8e:5f:44:ed:e7:92:c7:25:04:5a:9d:ab:
a5:f4:96:db:ad:f1:ec:4a:c7:8f:52:f5:6d:c4:59:
7c:1a:5f:b5:f3:5b:ca:5a:ff:37:10:03:93:ba:0a:
53:16:8c:81:e9:83:24:6d:60:78:ef:ae:93:6a:a1:
55:d4:5e:0d:99:99:7e:6d:62:80:01:e0:d9:b4:63:
c5:f5:62:aa:51:f5:58:b1:45:09:3d:5a:51:97:8d:
04:77:32:ac:58:e2:70:d2:20:9e:2a:46:44:52:a5:
5c:e7:04:3d:09:2e:00:a7:a6:25:81:97:35:e4:9a:
31:a8:4f:ad:4a:cf:66:3a:25:b1:ac:0d:cd:bf:08:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BE:7A:68:44:58:24:14:5E:F7:AE:2E:67:EB:67:74:53:F5:25:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B36AF84F6BC11EF93C6875E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.229.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b0:b6:f8:88:1e:37:92:0a:3a:25:11:ec:b4:b3:a8:59:e0:
c5:a0:f0:ae:49:e6:2e:61:f3:b6:26:b5:15:3c:0d:6c:c4:4c:
81:0d:1a:17:4d:e4:88:ad:0c:8b:df:ff:17:99:17:76:66:b9:
31:33:45:6d:42:09:15:19:da:ff:d9:5b:61:21:d5:f3:4b:60:
c7:10:7a:de:76:f1:f9:f7:db:c3:11:ec:82:f2:8f:72:7a:3d:
5c:16:1a:81:09:32:db:1e:96:55:3b:c5:e1:dd:2c:d8:e0:ec:
01:a5:4a:3e:81:ec:77:47:47:7c:da:48:e6:28:31:04:c4:ce:
e1:3c:a7:66:bc:6e:de:1b:8e:e1:b2:23:17:bc:b1:e1:1b:74:
36:f9:8f:b4:1d:f4:27:95:f1:ed:10:c5:21:c9:a8:aa:b3:b3:
6d:7b:29:45:f3:2c:6d:61:57:20:64:2f:a9:f5:5c:5d:78:0e:
31:db:ae:5d:f6:3f:7e:1b:f7:46:4a:5d:45:d7:d6:9d:0a:3d:
6e:17:e9:4e:39:21:a5:13:34:b0:2c:35:75:34:d6:78:0f:03:
3f:1b:64:8f:ee:3c:2b:bc:2a:1a:67:00:ee:bc:30:c2:06:3e:
2e:26:a0:50:e4:83:f1:81:af:a1:61:3f:2d:13:9b:5c:c7:96:
e3:85:4d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:49 2025 by rpki-client