Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB407108F62111EFB54558B6762E951A.roa
File: AB407108F62111EFB54558B6762E951A.roa (raw, json)
Hash identifier: 5DoATSmtQzuuDG9SQ7u+thmnMHCkr9xlSlDzUvxC7+M=
Subject key identifier: 31:EB:20:03:F3:03:48:EB:2C:6F:6B:C4:0F:8B:E5:15:D8:2D:2F:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB407108F62111EFB54558B6762E951A.roa
Signing time: Fri 28 Feb 2025 22:16:34 +0000
ROA not before: Fri 28 Feb 2025 22:16:30 +0000
ROA not after: Mon 31 Mar 2025 22:16:30 +0000
asID: 5065
IP address blocks: 154.86.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93313 (0x16c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:16:30 2025 GMT
Not After : Mar 31 22:16:30 2025 GMT
Subject: CN=67c235c2-f531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4d:b4:8f:49:8f:e6:a6:cd:31:06:a5:81:f1:
e4:ee:ac:a8:49:3c:d9:8a:11:88:27:44:8c:8c:f0:
22:db:04:52:04:a9:46:f9:7b:67:c9:23:74:87:ba:
41:04:62:c9:59:1b:37:21:fe:03:f3:13:b9:18:da:
9e:25:86:f1:d4:ab:77:6d:26:03:8a:0f:0c:d7:9f:
3c:18:d9:4a:2d:ea:33:a1:15:71:50:ac:f9:c9:81:
bf:16:6a:24:fb:11:73:b0:4d:3d:62:f5:fe:11:75:
1d:56:4b:bf:02:62:cc:f9:b1:5a:2e:4f:3f:d5:31:
0e:b4:87:d2:8a:01:a3:b4:9c:fe:fe:d1:df:bc:8b:
f8:c0:c6:f5:16:49:6d:d1:23:89:b0:6c:44:e6:f2:
96:8e:1d:14:29:34:7c:eb:d4:8c:6c:7d:b1:3c:3d:
54:04:82:61:8c:35:15:82:3e:e6:af:3e:d8:22:2a:
6c:fd:73:ac:e0:61:19:12:b3:84:d3:9e:2a:e8:f7:
91:39:1e:04:78:b6:dc:d7:de:5e:99:67:07:02:c9:
e6:47:fb:df:08:13:08:d5:93:2f:15:2f:b5:7f:df:
0b:d9:0a:33:ad:3d:b2:05:f6:dd:0f:cf:97:09:80:
31:49:ec:cc:14:52:ce:d7:f8:3e:83:7b:9a:50:56:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EB:20:03:F3:03:48:EB:2C:6F:6B:C4:0F:8B:E5:15:D8:2D:2F:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB407108F62111EFB54558B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:27:0e:0a:ca:77:b4:af:e6:1e:9f:78:8a:c7:39:4b:81:c4:
21:e4:32:da:52:da:01:b2:ea:48:b3:47:67:2d:fd:fa:b8:ac:
22:a6:95:2e:00:63:a0:f2:8d:1f:1e:0f:76:96:a2:bd:a9:1a:
7f:05:6d:99:69:46:b7:67:9c:4a:00:27:59:38:50:70:09:51:
27:4b:ab:f1:69:7c:e3:20:f6:02:6f:e8:a8:5d:f2:66:b6:78:
31:e1:c4:b9:a1:0d:78:f7:df:c6:15:87:ce:a2:53:73:24:23:
d9:f4:8c:7c:21:ca:2c:1c:54:d1:41:3c:92:13:39:fb:85:de:
18:c0:af:f8:7f:80:9d:00:a2:d1:38:8c:a9:28:f8:fc:07:d9:
6b:ef:b9:18:d3:35:97:e7:b4:e8:ff:a0:3e:92:a7:bb:a3:c7:
78:43:c8:5a:21:ff:b2:16:c6:f8:a3:9c:e1:b9:23:f2:e5:fd:
8f:51:98:70:29:52:dc:cb:f8:f7:bb:7d:b4:9c:72:28:65:94:
f0:8c:79:49:b6:c7:8c:f8:c6:be:c0:b3:bd:0e:ee:b8:c8:7f:
8e:d0:a8:49:c1:2a:99:80:7e:30:44:03:c4:31:12:0a:4c:10:
a9:a2:b7:ff:fe:64:29:23:19:2b:c4:4d:92:2c:64:3f:f2:7f:
91:dc:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:45:42 2025 by rpki-client