Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA4317BCF62411EF8381D14C762E951A.roa
File: AA4317BCF62411EF8381D14C762E951A.roa (raw, json)
Hash identifier: oDLpjtutx8sGMzlLNyY/ElyDPQOzeYpfEhVii5LbXBo=
Subject key identifier: 2B:B2:11:9D:23:48:24:92:0E:C7:7F:A2:44:AC:78:B1:44:6E:8C:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA4317BCF62411EF8381D14C762E951A.roa
Signing time: Fri 28 Feb 2025 22:38:01 +0000
ROA not before: Fri 28 Feb 2025 22:37:57 +0000
ROA not after: Wed 26 Mar 2025 22:37:57 +0000
asID: 62240
IP address blocks: 154.196.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93335 (0x16c97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:37:57 2025 GMT
Not After : Mar 26 22:37:57 2025 GMT
Subject: CN=67c23ac9-8b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:0c:b4:91:3d:60:c7:01:f8:d3:8a:f0:79:
70:53:76:3d:23:b2:20:b7:02:12:f9:09:d7:98:47:
bf:00:99:5c:a7:f7:d2:67:33:a5:da:ab:aa:5c:14:
06:28:c4:d0:f5:9f:53:bc:d1:2e:5b:23:05:9f:10:
f2:07:98:e0:ff:e3:f7:a3:c8:ef:3e:6c:8b:0b:db:
80:9b:48:fb:75:58:dd:27:c6:b0:60:1e:dc:b9:eb:
cf:b1:ba:d6:d9:36:41:1f:28:6a:04:ea:e4:7a:c3:
a8:70:b3:6a:2b:ca:cd:f6:59:d7:e2:95:52:12:12:
fc:73:6d:74:89:ab:cb:30:e3:62:92:30:53:35:40:
32:6a:0f:2d:e4:61:a8:ea:a7:3d:34:77:21:f0:43:
f1:14:b4:dc:df:52:8b:20:8e:4c:67:ff:66:1e:4e:
4c:76:42:84:77:34:78:4a:d2:1a:ac:16:64:53:12:
ef:a0:b2:98:a8:b1:c5:57:10:88:fc:82:ef:f9:42:
bf:9f:b9:a6:62:11:cd:3c:c7:71:38:c0:89:ec:b3:
52:ca:9c:13:65:10:3d:03:91:0c:6f:4d:87:02:f0:
28:b6:2f:12:30:2c:be:56:3a:ac:fc:18:34:82:c2:
6c:62:f3:94:72:46:26:d4:80:90:49:f2:9a:3a:68:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:11:9D:23:48:24:92:0E:C7:7F:A2:44:AC:78:B1:44:6E:8C:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA4317BCF62411EF8381D14C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.90.0/24
Signature Algorithm: sha256WithRSAEncryption
59:be:19:c5:95:13:d4:47:9a:dd:a2:45:fa:0a:84:98:dc:bb:
ef:95:a0:87:18:3f:f9:fa:41:9c:1c:16:36:78:11:44:11:d7:
be:17:d6:a7:84:bc:31:ec:34:ad:a0:85:de:96:7e:39:74:1d:
3e:48:e6:c0:e5:ff:79:48:3b:e4:53:bb:d4:02:90:63:5b:18:
a5:36:da:15:10:a6:0b:a5:e6:58:50:69:91:aa:81:ec:5e:61:
1b:36:18:74:07:8c:0e:56:01:d5:e2:ee:be:8c:c4:b6:90:95:
e3:66:64:a5:19:82:f3:9f:cd:16:68:7b:02:79:3b:69:09:37:
f1:a6:0e:c6:53:4f:aa:82:92:c0:a8:8b:a0:f3:31:68:61:72:
32:e9:4f:99:c5:93:d6:96:b4:61:d6:a7:68:59:2c:b2:a4:07:
08:dc:00:e4:62:1d:ca:4a:75:dd:64:d4:66:e0:e6:b4:25:c0:
0a:19:e2:3b:ba:85:5b:ce:35:70:fc:bf:d2:94:20:95:ad:6c:
8b:2d:d7:6d:66:9d:c1:09:46:ce:0a:22:3f:da:de:a8:ac:aa:
00:43:08:a8:39:56:de:1e:37:05:1b:d7:ab:bb:70:fd:45:7a:
cd:7f:0a:29:67:d1:16:fa:55:b9:98:9d:66:b7:a9:b7:a7:b0:
54:40:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:20:30 2025 by rpki-client