Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A279B8E4F4D811EF8CF2B66E762E951A.roa
File: A279B8E4F4D811EF8CF2B66E762E951A.roa (raw, json)
Hash identifier: Ocvp7WAoDwkQiK0hIhUN9k3qdPYuG2g5Abb/BmxBY10=
Subject key identifier: 45:EE:3F:C6:A7:36:F0:FF:F5:C6:22:9F:5F:31:84:E7:61:30:40:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01668B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A279B8E4F4D811EF8CF2B66E762E951A.roa
Signing time: Thu 27 Feb 2025 07:01:15 +0000
ROA not before: Thu 27 Feb 2025 07:01:11 +0000
ROA not after: Fri 28 Mar 2025 07:01:11 +0000
asID: 214413
IP address blocks: 154.193.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91787 (0x1668b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:01:11 2025 GMT
Not After : Mar 28 07:01:11 2025 GMT
Subject: CN=67c00dbb-97e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:fa:80:c9:9e:45:0b:52:0d:a0:ab:a4:11:
cd:7b:5e:f6:78:49:9d:e6:e5:21:e4:aa:07:83:8b:
44:69:8a:f7:3a:5e:11:e9:aa:60:c8:a0:1a:a9:48:
30:7d:e6:b6:20:47:4e:7a:92:ff:27:7a:21:6b:5e:
37:6d:b2:74:b3:5f:73:a0:23:10:b1:3a:ae:2c:02:
ab:a6:3f:2c:2a:21:85:6a:95:01:c1:16:a5:a6:62:
47:96:75:5f:25:4d:56:2a:50:a0:60:07:e8:d8:5d:
72:37:32:5b:d0:d8:ed:32:0a:20:0d:8d:9e:d5:fe:
4d:b5:20:a0:14:f6:e5:0b:86:67:a0:63:00:fb:ab:
46:fc:11:8e:9d:e5:12:82:ac:d0:b5:7c:f6:21:82:
f5:b6:2f:f7:54:68:af:b7:d8:40:cb:2c:14:6d:65:
3c:ae:bd:ae:05:32:37:12:84:e4:b1:b4:48:4d:38:
a4:98:13:7e:c3:07:3a:c2:02:31:e9:f3:e1:aa:4a:
ae:f2:5c:8d:18:f5:2f:36:27:c1:03:0a:61:94:a4:
48:61:65:2f:cd:2f:14:3b:8d:40:75:a0:02:db:ab:
c3:f0:1f:37:83:a4:34:bf:f5:46:ba:3e:f4:5b:e4:
ca:0f:94:a2:9c:67:a4:1e:8a:cf:68:2c:45:7a:c4:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EE:3F:C6:A7:36:F0:FF:F5:C6:22:9F:5F:31:84:E7:61:30:40:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A279B8E4F4D811EF8CF2B66E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:76:1b:b0:25:7a:e2:ea:da:fd:bc:42:75:35:47:71:56:46:
91:34:37:c2:e1:96:d1:d1:c9:3a:81:fe:93:d7:73:30:e4:08:
f6:8c:ee:4c:45:d9:37:22:a9:45:6e:80:07:5f:b9:fe:28:a5:
07:48:3a:7a:93:6d:16:c5:a7:b4:9c:37:e9:ba:8e:28:28:66:
c4:99:a0:0c:61:56:18:c1:87:ca:3a:89:9e:74:cd:db:87:78:
0c:e9:31:3c:7d:12:bb:df:5a:26:d7:8c:a6:39:f1:7f:3a:ef:
c6:67:06:bb:71:9e:08:6d:cf:4c:8c:f5:9f:7f:8a:d6:4e:86:
1c:b9:77:e3:84:5e:96:b8:65:c0:ed:c0:ec:26:52:4b:8d:ce:
1a:eb:c5:ee:e6:81:a4:1c:18:5f:b1:8e:83:40:87:67:86:7f:
b8:32:ee:77:b6:81:a0:57:5c:0a:2c:70:18:e8:e5:88:e3:9c:
83:11:10:4e:d4:ba:1f:aa:bd:a2:80:52:02:b4:19:b4:a7:69:
b7:14:a8:0b:ce:cf:56:80:e6:1f:bd:80:f3:76:c7:41:e9:1b:
da:16:cd:01:d3:b3:95:b4:8f:20:1b:da:95:5e:41:2b:76:ae:
56:9b:18:4d:03:85:74:4c:db:42:fa:f7:a5:be:8a:f2:0b:0a:
f8:01:c2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:02:43 2025 by rpki-client