Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8DBBD9AF33411EFB07CE6A2762E951A.roa
File: A8DBBD9AF33411EFB07CE6A2762E951A.roa (raw, json)
Hash identifier: JE12BbP4J4N/c9U59ktSLpILxItnMzM67+ukoSvyYPY=
Subject key identifier: 4B:C2:F6:02:30:3D:8D:67:8E:10:8B:82:77:77:A8:B2:50:3E:29:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8DBBD9AF33411EFB07CE6A2762E951A.roa
Signing time: Tue 25 Feb 2025 04:54:57 +0000
ROA not before: Tue 25 Feb 2025 04:54:53 +0000
ROA not after: Wed 26 Mar 2025 04:54:53 +0000
asID: 5065
IP address blocks: 154.94.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89417 (0x15d49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 04:54:53 2025 GMT
Not After : Mar 26 04:54:53 2025 GMT
Subject: CN=67bd4d21-2c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:50:62:97:fd:24:3f:41:9a:52:92:a1:0f:
04:3b:3d:f4:8d:84:87:cb:1f:34:d9:c6:a8:bb:89:
d1:ac:8f:23:f0:b7:ae:2c:ec:75:89:26:99:18:5f:
12:bf:15:a6:8d:d0:6b:70:bc:5b:0f:ee:58:f1:b0:
e2:91:ab:52:1e:1d:bd:86:71:a0:8d:ad:3c:ee:8c:
c2:c6:04:63:3a:87:92:a8:22:b5:7f:8b:44:3c:2a:
6a:c8:75:b3:f6:4e:23:65:18:c9:f1:ef:0e:69:98:
a3:1e:40:17:63:0c:8d:63:12:18:05:63:57:9a:7b:
f9:a0:e2:58:44:f2:73:e8:0f:bc:23:ea:0e:9e:78:
ab:ce:4e:4e:0e:f6:b0:80:7f:e9:b9:74:61:33:5f:
81:e7:3c:6c:cd:37:47:e8:39:aa:d4:2f:43:97:a2:
db:cb:ff:e0:9b:15:9d:b1:11:57:81:f2:76:34:0b:
37:c0:ae:7e:05:98:8b:b6:64:05:94:9b:bc:cd:d1:
f4:d3:f6:c3:a1:07:8a:f3:85:8b:9e:90:a3:25:d4:
92:0f:a5:6e:14:c1:d9:6d:49:c2:06:ec:2d:e8:f4:
e9:e4:d1:40:35:39:00:ab:36:06:b5:8d:84:15:03:
8c:ba:99:8d:f4:f9:a6:4c:f2:de:11:df:b5:0a:bd:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C2:F6:02:30:3D:8D:67:8E:10:8B:82:77:77:A8:B2:50:3E:29:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8DBBD9AF33411EFB07CE6A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:93:6d:56:45:6f:ac:ce:a4:6c:b1:76:33:d4:12:51:6e:43:
a4:67:32:de:96:f5:7d:e2:b7:05:64:3b:6e:f6:5c:65:9b:57:
73:58:22:c2:ac:7a:07:f5:1d:f5:57:52:94:38:92:dc:9a:65:
74:68:63:99:38:6b:94:31:30:77:ed:18:76:86:08:38:bf:6d:
65:49:64:09:40:15:a0:8e:27:b3:74:f1:48:78:3c:c6:38:db:
2f:bb:51:3c:0b:69:e2:e7:13:1f:c3:42:9b:33:50:c7:df:12:
99:9b:fc:72:35:a1:62:b0:8a:4d:fd:d2:f5:0b:d7:93:20:15:
14:fb:e5:bd:d6:9b:ca:02:a7:b7:e0:7c:c4:98:47:cc:00:32:
27:d0:0a:46:aa:8e:75:1f:73:7e:5f:02:3d:8f:ea:4b:a9:a2:
49:4f:5c:25:a0:e7:89:30:ec:48:84:57:10:e1:f9:a9:87:05:
19:b2:5a:e6:a4:25:4d:2d:3b:23:a9:96:65:4e:97:da:ba:82:
a9:d8:cd:e4:ce:ff:46:c7:74:e1:c0:38:0c:e0:cf:c6:4a:e1:
27:b4:15:7e:d6:8a:c5:06:79:4a:ba:a4:90:0c:0a:12:e1:a2:
b1:a4:ff:f8:9e:70:41:aa:84:8d:e2:85:47:b3:cd:60:88:61:
ee:56:98:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:14:13 2025 by rpki-client