Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A367B254F2D211EF9356B581762E951A.roa
File: A367B254F2D211EF9356B581762E951A.roa (raw, json)
Hash identifier: qV02Ns5pC9M5BLhydIWhHNmBm5dBZBQ2bKkb0jCqHTA=
Subject key identifier: E4:26:CF:4C:1B:D6:F4:C5:78:BD:5E:D1:FA:27:58:BB:0F:00:D3:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A367B254F2D211EF9356B581762E951A.roa
Signing time: Mon 24 Feb 2025 17:13:17 +0000
ROA not before: Mon 24 Feb 2025 17:13:13 +0000
ROA not after: Sat 29 Mar 2025 17:13:13 +0000
asID: 203020
IP address blocks: 154.223.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89234 (0x15c92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 17:13:13 2025 GMT
Not After : Mar 29 17:13:13 2025 GMT
Subject: CN=67bca8ad-60a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:92:03:fc:68:5a:ae:ac:42:26:d1:2b:0d:
68:6c:87:b1:8e:c2:4f:6a:ca:8c:4a:88:7b:9c:53:
bb:11:dc:0a:8e:84:59:3c:df:1e:ad:07:98:87:60:
3d:51:ad:3a:bd:6a:31:49:94:24:99:12:b0:ce:8e:
16:d4:4b:df:73:82:96:28:61:8e:f8:9e:a0:a4:36:
a2:e9:07:e3:87:50:0b:40:6a:1a:8e:ed:15:ab:15:
ce:fe:4d:ed:f9:3a:1e:a9:20:e2:5a:40:af:93:e9:
fa:1d:77:4c:ff:3b:f3:c7:f7:d1:5c:d7:4f:e1:04:
c9:5b:00:aa:8d:70:c7:b1:cd:cc:e3:3d:49:81:31:
30:8b:c6:f6:bd:77:2d:21:03:bd:07:67:18:e0:c9:
17:e0:68:f1:c3:b1:ea:91:1a:2d:ca:0b:86:a1:71:
40:cc:7c:a8:12:9c:71:0f:25:22:a2:a5:72:b6:2d:
62:8a:17:ff:85:08:47:e4:d8:b1:2a:d5:6e:18:76:
61:30:99:af:6d:3c:5c:f4:ae:e9:3c:e2:ac:d4:3d:
0d:5d:f8:51:ca:99:f7:c2:2a:c8:5b:ed:6e:45:3d:
50:9e:f9:ed:79:d9:9e:83:f5:2f:a3:cb:c3:3f:48:
b3:6a:82:db:32:07:e6:ae:fa:eb:85:c5:a2:ae:45:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:26:CF:4C:1B:D6:F4:C5:78:BD:5E:D1:FA:27:58:BB:0F:00:D3:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A367B254F2D211EF9356B581762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.138.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:af:6f:0b:14:6e:85:a1:ee:88:26:a5:a8:3b:13:35:9c:1f:
25:b0:f1:44:65:19:a9:99:a9:9b:f6:5a:d7:06:1c:62:dd:76:
bb:75:76:36:c5:e8:d9:30:c7:fb:96:52:25:50:6a:fe:e1:6a:
57:cb:c5:d0:da:85:be:25:c0:18:2b:33:77:19:75:0f:af:ae:
aa:70:f7:21:61:c0:07:94:9a:63:6e:5e:2e:8b:a1:d0:2e:56:
16:18:e6:4d:c7:92:0f:53:81:52:c8:86:ec:50:dc:01:05:c8:
23:d1:32:a9:b6:53:8c:aa:af:29:dd:c2:65:37:26:9f:91:c9:
cd:61:7c:82:76:c8:96:12:88:a7:d9:2d:ae:e0:d6:db:2d:5c:
e1:5b:5a:bc:1e:39:ec:3a:f0:ae:75:19:9d:6e:66:27:50:20:
ef:36:58:20:95:ef:84:61:e1:24:e8:73:be:c7:ee:63:f2:9a:
26:16:fb:9d:89:8a:e8:23:c8:66:85:63:a9:94:0f:7e:5d:af:
9a:04:23:48:8e:8e:8a:38:f4:89:b2:df:19:bc:ac:79:88:7c:
18:8d:4a:dd:8e:1e:69:54:9a:19:ed:6e:87:95:0c:4a:b7:60:
96:70:71:2f:54:c2:b0:b4:bd:34:7d:6c:f8:b1:23:e8:69:9f:
a0:04:6e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:49 2025 by rpki-client