Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A728FE90F67711EFB3BDFE8E762E951A.roa
File: A728FE90F67711EFB3BDFE8E762E951A.roa (raw, json)
Hash identifier: pYCo5FNeOJWn2XwE0B78G3l/4zE5R60FIadFNHszGZQ=
Subject key identifier: 3C:07:29:9F:B8:96:F7:0E:E6:9C:D9:1B:3C:89:86:BA:28:CB:91:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A728FE90F67711EFB3BDFE8E762E951A.roa
Signing time: Sat 01 Mar 2025 08:32:04 +0000
ROA not before: Sat 01 Mar 2025 08:32:00 +0000
ROA not after: Mon 31 Mar 2025 08:32:00 +0000
asID: 202656
IP address blocks: 154.219.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93534 (0x16d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 08:32:00 2025 GMT
Not After : Mar 31 08:32:00 2025 GMT
Subject: CN=67c2c604-0b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:1e:b5:f0:e2:d7:e4:90:70:23:6b:31:36:
fd:6d:fc:72:f4:da:6a:67:7e:f6:61:41:6b:25:8e:
16:46:17:17:ff:2b:c5:ae:c0:7f:5f:67:b9:54:19:
0b:63:2c:26:98:22:01:76:63:9d:87:31:da:b9:94:
f6:45:d2:99:30:80:6f:0a:9b:ee:aa:51:ac:0b:5c:
76:4b:7f:07:33:e1:6a:22:75:f7:03:85:7f:d0:32:
90:41:0d:fd:12:71:28:37:49:c2:73:c4:71:5f:b9:
54:33:ed:70:12:6f:d1:50:13:9c:71:16:3c:55:23:
24:ca:ba:fb:07:64:13:ea:03:65:d9:19:b3:56:27:
63:f1:90:e3:0f:cb:5c:c0:e6:8b:ed:d3:6a:97:28:
0b:ae:4e:13:b6:1c:2a:e1:a0:fc:38:81:f0:2e:d3:
69:2c:93:75:27:67:1c:60:9b:23:18:6d:4c:a6:6e:
e7:72:06:8b:b3:a9:7b:9f:70:4b:ce:b2:03:53:03:
e9:91:35:9f:3c:79:f7:04:dd:96:9e:9b:2c:6c:43:
e9:0e:cb:5f:59:f1:f4:63:21:82:41:dc:0b:ee:28:
28:f9:19:43:94:b6:c0:d3:fa:06:b0:fd:8b:e6:fe:
84:05:a4:10:7f:bb:d2:be:74:cd:96:8e:e1:33:88:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:29:9F:B8:96:F7:0E:E6:9C:D9:1B:3C:89:86:BA:28:CB:91:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A728FE90F67711EFB3BDFE8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.245.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7d:4a:16:0f:30:15:f5:b1:a9:bc:3c:ff:52:39:06:fa:b3:
01:36:9b:22:ad:cb:4e:79:11:d5:57:4f:8d:80:25:75:77:8e:
a6:3c:7b:a5:a5:c3:89:48:ac:a6:d2:ed:8b:67:b3:a3:7f:7e:
0e:1a:0e:9a:6d:01:93:fd:0f:a6:be:3a:e0:c0:fb:a4:ed:6a:
06:b2:8b:68:fb:2a:7c:07:d2:6a:d0:f8:b2:40:c6:02:40:6f:
56:22:9f:3c:dd:22:c1:a6:1b:b9:1e:05:41:22:04:c0:b8:85:
f2:4b:32:29:1a:3f:c1:b3:5a:2f:13:39:a7:09:89:85:66:0f:
9d:6a:d2:f0:c6:8e:74:7a:8b:31:2c:ca:96:68:28:f6:eb:c6:
af:b0:f5:3e:cc:76:bf:3d:92:60:23:89:d9:ad:cb:e6:93:78:
15:eb:07:9e:30:a0:a9:a5:16:9b:74:29:7d:7b:a1:e3:2f:81:
f8:55:15:0e:a4:fd:2b:2b:95:19:60:ac:ec:fb:b4:9c:82:5b:
e7:36:7a:b5:03:8b:1d:0c:68:b9:f2:69:b9:ab:71:3e:11:86:
f8:b9:2c:78:0e:c6:4c:7e:12:63:e3:f8:f5:86:af:6e:20:c9:
f2:1a:c9:24:6c:48:91:50:0b:46:f5:85:0a:d3:c9:94:77:eb:
4e:6b:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:18:00 2025 by rpki-client