Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F318F2EF35011EFAACB7F5E762E951A.roa
File: 9F318F2EF35011EFAACB7F5E762E951A.roa (raw, json)
Hash identifier: DE5WlKIIfADoH5sAxUDgs5gpPjNQCgDOu70hdYBpHck=
Subject key identifier: AD:14:95:02:BF:A8:A2:43:3E:86:37:D8:F0:2F:7D:13:B3:29:71:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F318F2EF35011EFAACB7F5E762E951A.roa
Signing time: Tue 25 Feb 2025 08:15:06 +0000
ROA not before: Tue 25 Feb 2025 08:15:03 +0000
ROA not after: Thu 27 Mar 2025 08:15:03 +0000
asID: 398704
IP address blocks: 154.92.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89486 (0x15d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 08:15:03 2025 GMT
Not After : Mar 27 08:15:03 2025 GMT
Subject: CN=67bd7c0a-7dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:1b:9b:74:f1:8e:53:d9:84:1d:9a:52:f4:
47:12:a1:a1:88:d9:16:97:d6:bc:da:92:0b:e6:e8:
3f:15:7a:0c:09:85:f1:6f:85:42:2f:0c:97:08:a7:
55:c7:6c:40:53:1a:f5:7a:e6:46:5c:bc:79:cf:66:
56:6b:67:5d:65:b5:c7:30:3c:ab:06:bd:37:6e:48:
1c:6f:72:23:fb:3f:6b:1d:f9:19:7b:cb:4b:d8:19:
7b:51:f6:e6:5b:4e:2f:2c:b9:e0:2f:fb:25:78:93:
6c:0f:c5:81:d2:02:1f:31:7e:e5:6a:6c:14:34:0e:
12:31:c2:01:1f:3c:1c:9b:98:42:61:8c:57:91:0d:
3c:70:a3:a2:6d:03:f0:52:4d:fd:8d:be:b8:82:b0:
12:34:9e:1c:ab:9a:f4:68:fa:b2:2b:30:f5:30:51:
3f:8f:07:5d:55:ed:25:d2:43:ff:90:c5:f8:ad:49:
eb:d8:5e:7d:a6:de:c5:ec:c5:2a:ce:97:0c:a6:d9:
5e:54:25:5b:58:65:8b:1f:3d:96:ba:53:1a:59:47:
f8:56:83:c6:ec:76:d2:42:2f:49:e0:f6:61:46:3b:
84:db:e2:a7:0d:a9:62:55:a7:51:1f:84:9b:79:23:
14:22:7f:5e:96:6a:4f:a8:d4:2a:51:60:94:55:c0:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:14:95:02:BF:A8:A2:43:3E:86:37:D8:F0:2F:7D:13:B3:29:71:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F318F2EF35011EFAACB7F5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:d1:ed:10:a9:48:88:47:0d:75:0f:87:f7:53:c4:d5:53:21:
c1:39:59:dd:a4:01:89:3b:df:7d:62:cd:d6:1f:4a:9a:4b:30:
f2:19:fd:ee:6c:81:94:3e:25:c2:2c:83:a0:63:d1:fd:06:b2:
c0:a1:03:35:20:87:81:ba:98:13:65:65:e9:9b:ad:67:ee:48:
96:ea:73:a1:52:70:c7:d9:13:ae:14:ef:dd:b9:cc:48:b6:6a:
e4:76:8e:b9:3c:d5:46:e5:b5:80:11:e4:c3:04:8b:f0:c3:a1:
93:2a:b5:4d:b0:88:55:c4:b1:5d:5d:d8:73:32:e9:a3:ff:bd:
b5:c5:bc:49:7a:d8:4d:c0:88:9a:cc:bb:ce:b0:43:19:fa:2b:
56:fc:76:b5:42:47:40:47:51:df:a3:e5:96:9b:11:87:e7:a7:
dc:f9:98:06:4d:d7:c2:7f:05:79:c9:05:04:80:f7:e0:2e:07:
43:60:13:91:b4:94:34:52:9b:ce:86:4e:c6:d0:50:8d:28:c8:
68:11:96:39:03:69:48:da:b5:9a:83:a8:3e:44:f8:0a:a8:37:
98:78:56:d6:51:47:44:2e:7f:ad:26:5a:c1:81:32:a4:9a:77:
04:55:6e:79:c0:14:f2:b2:fa:9e:65:d0:93:8c:ad:b8:bf:19:
4c:56:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:44:15 2025 by rpki-client