Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D8BC708F16511EF994935B3762E951A.roa
File: 9D8BC708F16511EF994935B3762E951A.roa (raw, json)
Hash identifier: gjuTbiclD1GXs85CG/2orenTSzcIl+mOfkzJvR2+qMw=
Subject key identifier: F4:12:A3:AE:B7:5C:13:34:75:EC:3B:1E:10:98:07:AF:05:E0:CF:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015A95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D8BC708F16511EF994935B3762E951A.roa
Signing time: Sat 22 Feb 2025 21:40:21 +0000
ROA not before: Sat 22 Feb 2025 21:40:17 +0000
ROA not after: Wed 26 Mar 2025 21:40:17 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88725 (0x15a95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 21:40:17 2025 GMT
Not After : Mar 26 21:40:17 2025 GMT
Subject: CN=67ba4445-7a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:f8:f0:1f:dc:e7:61:89:c2:6c:0c:3b:bd:
07:81:24:0c:54:7a:dc:95:d9:81:0f:b9:71:04:cf:
14:aa:49:73:1d:ed:c7:a4:cf:ad:ea:eb:25:bd:82:
59:f3:eb:64:bf:96:03:d1:aa:18:31:5b:d3:78:44:
21:67:e2:a1:1d:cf:00:b7:68:c4:d4:d6:9b:d3:53:
fc:96:c2:38:35:58:85:61:d7:94:34:1f:63:54:71:
07:0a:f0:f6:bf:76:dc:6e:fe:e8:9b:e9:9e:c4:c4:
5a:fb:50:6a:67:28:68:9a:99:85:e9:bd:ad:ea:75:
00:e7:76:7b:4d:65:3a:4a:d7:16:81:03:2e:71:da:
a5:32:2d:64:a4:f5:bf:9b:b8:36:b1:93:71:ed:88:
24:c1:f7:88:05:96:03:36:c9:31:cb:54:c1:e2:b0:
df:63:f9:b9:b9:00:55:53:c1:3c:80:d8:a0:85:d2:
2e:1f:f2:03:2e:d2:7f:d4:b5:3f:0f:08:29:49:fc:
8a:d2:d0:e3:cb:05:d7:dd:b0:d8:74:4b:be:21:cc:
e6:71:25:57:b3:f3:72:b0:73:9e:e3:e9:15:2c:b4:
da:ce:34:ee:79:49:4c:d3:23:95:d4:f8:7f:84:99:
9b:0b:f0:4f:00:4a:47:48:a5:75:df:96:1e:1a:c7:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:12:A3:AE:B7:5C:13:34:75:EC:3B:1E:10:98:07:AF:05:E0:CF:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D8BC708F16511EF994935B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
Signature Algorithm: sha256WithRSAEncryption
d1:f7:70:42:bd:97:6f:ea:da:39:76:80:b2:41:25:8e:18:84:
a4:1d:64:9a:9c:d8:2c:25:aa:78:54:94:5c:8d:96:14:a0:ef:
dc:32:a1:2a:d3:4b:60:89:24:09:d6:ab:f7:9c:2a:48:7c:1b:
b4:50:3c:99:e0:fa:5b:6e:f7:44:22:2c:22:c9:72:2f:f6:81:
6e:e6:e5:a7:3a:b8:52:9d:66:21:56:fa:a2:b3:0e:80:97:02:
c6:8a:e4:cf:ba:92:3d:36:ee:13:f0:19:8a:e5:7f:7d:36:9e:
66:e3:ae:5d:bc:70:6e:0d:4b:fa:c5:7b:f9:0e:8e:89:b6:e2:
7c:cb:52:26:c8:8f:45:1a:f6:d6:88:d3:fc:c9:24:49:71:d9:
8d:fb:7a:dd:7b:4c:2f:ef:0d:ae:80:b4:c1:d3:5e:32:3d:e3:
34:76:c1:e6:e6:03:57:1c:67:fb:57:94:e8:62:c9:37:e2:0e:
de:d8:f6:a5:10:69:2d:af:8b:4d:82:b8:48:de:9c:d0:68:6c:
e8:8a:0f:d2:a9:5e:e0:e4:ef:01:ef:fa:66:0f:0c:b5:a9:f9:
7f:b9:e6:e7:03:65:9c:fb:20:67:c5:0c:46:f3:c4:5d:fd:9a:
d7:47:11:6b:09:14:ff:e5:6f:e8:96:36:83:2c:96:da:83:02:
55:14:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:13:56 2025 by rpki-client