Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE6D0E0EF5D111EF8251C599762E951A.roa
File: AE6D0E0EF5D111EF8251C599762E951A.roa (raw, json)
Hash identifier: iEG03bq9XLsxGvCmgEhnNch9acAbQIeQYftcm88vOI0=
Subject key identifier: 3B:10:31:1F:90:3F:A4:33:AB:37:46:DF:8A:75:BC:58:D9:01:07:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B37
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE6D0E0EF5D111EF8251C599762E951A.roa
Signing time: Fri 28 Feb 2025 12:44:00 +0000
ROA not before: Fri 28 Feb 2025 12:43:55 +0000
ROA not after: Mon 31 Mar 2025 12:43:55 +0000
asID: 398823
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92983 (0x16b37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 12:43:55 2025 GMT
Not After : Mar 31 12:43:55 2025 GMT
Subject: CN=67c1af8f-5df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:78:d7:cf:a6:6b:7a:48:fd:53:c1:9d:98:
7e:48:ec:cf:4c:fe:74:91:47:ce:4e:9f:62:fc:47:
7d:a9:0f:3d:7f:d3:de:4b:67:75:20:f9:89:72:23:
bc:10:b1:27:d4:e5:74:12:9d:a6:03:51:3a:93:9e:
9f:9b:2f:19:2e:a7:2b:9a:bd:f0:98:07:f8:36:3b:
fa:65:cd:ef:a4:9b:cf:c8:23:4f:85:c5:fd:19:fc:
02:61:f7:5f:10:6e:7a:7e:41:0a:40:88:9d:d1:78:
88:e5:a1:46:81:43:db:d7:63:82:fb:57:43:da:9b:
e2:ac:5f:87:1f:9d:fa:22:29:50:39:df:ff:24:4b:
a1:f9:cf:6b:aa:9e:c4:9d:bc:70:9b:82:98:f9:ff:
25:87:bb:8c:ca:7f:b5:a7:d6:16:11:4c:2b:a8:51:
5f:dc:7b:32:1b:ae:34:fa:80:f5:76:b3:62:0d:0c:
94:52:95:90:d5:e4:15:1e:e2:53:ae:84:04:6c:92:
49:ad:c7:61:a6:12:db:1c:c0:a1:90:1d:b2:90:da:
6b:8d:63:56:16:c4:59:62:6c:48:01:34:89:96:2f:
2f:22:47:13:df:c3:33:cc:58:ab:75:95:5e:c6:ca:
12:9e:19:34:e5:3b:33:48:41:00:b6:7c:bf:a3:f2:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:10:31:1F:90:3F:A4:33:AB:37:46:DF:8A:75:BC:58:D9:01:07:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE6D0E0EF5D111EF8251C599762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
62:dd:0c:8b:a2:13:1f:7d:21:b1:8b:f2:b9:a6:3d:7e:3f:3c:
08:a8:58:e4:53:d8:45:de:44:48:77:e7:1d:7d:40:00:fd:66:
3c:72:af:a7:81:c1:3c:bd:fe:fd:00:5e:67:9a:fd:18:f9:48:
47:b7:42:d5:72:a0:85:35:2c:57:a7:5a:df:dc:a5:37:2b:2f:
8d:cf:ad:da:6d:d2:1d:c0:10:88:63:7c:c3:e3:85:f7:4b:f6:
0a:3a:31:03:d6:90:a1:cd:5f:84:00:c3:7f:a2:2b:1c:8d:24:
77:24:1a:60:7e:82:85:c5:1b:4a:2c:0f:3c:27:45:19:3a:0b:
59:6f:c2:6f:c7:90:02:a0:ef:77:00:e6:10:7b:32:66:04:23:
2e:b5:6d:cf:9f:b9:00:f5:2f:7c:84:a4:e1:a5:b5:ed:71:b2:
ec:4b:32:6f:5f:4c:9a:1a:6a:45:8b:79:f4:f8:56:5a:2b:82:
4d:86:06:c1:28:c0:ad:c5:4a:03:53:eb:b6:77:89:47:bc:66:
ed:66:33:01:ad:73:a3:5b:fe:84:62:05:c5:9b:aa:5f:a5:84:
1b:4a:22:7b:fa:09:01:af:c1:dd:56:f0:11:e9:24:fc:4e:d6:
90:30:a3:48:2a:c7:47:a8:f5:6f:7e:c2:49:5f:b2:3b:e6:99:
0e:42:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:06:00 2025 by rpki-client