Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD656888F69611EFAA973961762E951A.roa
File: AD656888F69611EFAA973961762E951A.roa (raw, json)
Hash identifier: SRZ3Inwyup0VVcVH878LXP5tDTpT4/F3MNREaoOJmo0=
Subject key identifier: 8F:86:B5:E4:CA:9A:28:A6:74:74:25:D2:BE:97:54:5F:B0:4F:6A:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD656888F69611EFAA973961762E951A.roa
Signing time: Sat 01 Mar 2025 12:14:09 +0000
ROA not before: Sat 01 Mar 2025 12:14:05 +0000
ROA not after: Mon 31 Mar 2025 12:14:05 +0000
asID: 202656
IP address blocks: 154.221.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93746 (0x16e32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:14:05 2025 GMT
Not After : Mar 31 12:14:05 2025 GMT
Subject: CN=67c2fa11-0ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:66:c0:21:7c:a0:52:be:53:c3:c0:7e:9b:cd:
db:96:fd:35:8d:03:dc:90:9c:1e:43:77:c9:96:b1:
b9:8c:33:91:92:b8:7c:cc:29:e1:d4:c5:dc:ea:4e:
ac:2e:ca:ef:be:c8:42:f1:8d:eb:51:be:6a:09:a2:
cc:a3:3a:d4:ec:93:87:c8:63:4f:8b:22:dd:a3:a6:
61:67:9c:59:24:0b:fd:67:ed:ad:b8:e8:4d:63:fd:
c0:91:71:60:6f:fa:25:1e:c3:40:ee:29:3c:c6:e3:
55:4b:cc:09:2b:b4:6f:e4:79:de:fb:e1:b5:79:af:
77:ef:b4:dd:02:f4:b0:4e:a7:7b:72:fc:57:f5:bd:
3e:0a:11:a0:f3:39:a3:d4:b7:e3:a6:cd:20:ae:0e:
06:f9:30:62:56:ef:13:e1:63:2c:1e:b1:ef:4b:c9:
d8:b0:6b:a4:27:be:60:bd:c7:55:1c:35:0d:d1:a1:
66:8e:72:2a:59:f8:f4:54:da:3e:ba:c1:4d:24:24:
18:2b:4c:19:a0:9f:7b:68:7a:b4:53:b6:20:e2:fd:
42:83:bc:c7:5f:d6:59:ef:0e:e5:6e:81:38:f3:bc:
fe:50:89:c2:6b:8f:91:42:65:52:57:1a:0e:76:c3:
1c:ff:d3:fa:0d:ca:39:3d:a8:99:b5:9d:fc:30:f0:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:86:B5:E4:CA:9A:28:A6:74:74:25:D2:BE:97:54:5F:B0:4F:6A:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD656888F69611EFAA973961762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b7:16:33:c9:a6:92:11:27:f7:2a:62:ba:54:84:ca:d1:9a:
fc:e9:8a:9d:d5:81:1d:69:94:93:11:98:d7:39:d3:25:f4:e1:
1b:1d:dc:70:07:25:75:ea:4a:4d:d3:8b:e6:c5:81:5b:91:57:
6c:94:2d:eb:74:1a:81:12:b4:a9:00:f8:85:35:40:bd:66:19:
74:51:1b:aa:fb:e2:76:ed:bd:38:5c:31:e6:bb:f3:09:79:c4:
9e:4e:c4:17:8e:45:2d:32:d1:c0:82:b0:01:50:fd:02:dc:02:
af:6b:35:97:d0:d5:0c:25:3e:00:d9:77:ef:4c:ce:1e:07:b7:
49:9a:a2:f6:fe:c8:58:78:37:80:af:1f:75:f7:a2:9c:b0:8c:
e5:73:65:2e:03:5d:02:d8:e5:4a:83:23:27:e7:1d:d6:9d:ab:
29:30:a7:09:1d:80:4b:54:a1:55:2b:01:35:39:36:d9:f7:8e:
8f:7d:8c:e9:ce:4a:0f:66:1b:1a:96:a8:41:a5:c1:15:ac:01:
86:33:ec:52:0b:58:b9:48:2c:40:77:ae:79:d2:d2:cf:50:5f:
6c:a7:d6:cb:64:8c:36:93:c1:ae:f5:db:d5:59:11:fb:f8:90:
04:6e:c9:ec:6e:bc:8c:e0:60:eb:43:49:83:22:78:74:90:ce:
cb:a1:65:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:48:15 2025 by rpki-client