Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF0D43B8BFA011EF9358EDB4762E951A.roa
File: AF0D43B8BFA011EF9358EDB4762E951A.roa (raw, json)
Hash identifier: YTcgwLvVOoPVj9ntW5IOp++zmtR4ayp4ItzttKPV+Pc=
Subject key identifier: 85:E6:4D:4B:BF:93:AF:88:63:0C:84:5C:23:1F:AF:87:6B:8D:E0:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF0D43B8BFA011EF9358EDB4762E951A.roa
Signing time: Sat 21 Dec 2024 13:37:12 +0000
ROA not before: Sat 21 Dec 2024 13:37:09 +0000
ROA not after: Thu 27 Mar 2025 13:37:09 +0000
asID: 29802
IP address blocks: 154.223.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73087 (0x11d7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 21 13:37:09 2024 GMT
Not After : Mar 27 13:37:09 2025 GMT
Subject: CN=6766c488-7200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:0c:de:83:bd:54:d4:ee:25:e7:2c:98:76:
1c:88:3d:80:8f:8f:b8:3b:9f:23:cb:c9:9e:de:07:
e2:fb:bc:20:d0:70:0d:67:2e:c8:06:c1:4f:36:f8:
51:9a:95:5a:1e:3c:d0:39:e5:f0:6f:fa:66:0f:f1:
00:2f:5f:95:5a:95:ec:67:dd:0a:ed:fd:7e:c8:97:
84:06:b2:d6:0e:95:d5:92:d4:4f:63:aa:1c:01:59:
28:eb:06:11:1a:0a:88:71:5a:7d:c2:07:9e:d1:52:
60:c7:52:59:c2:7a:54:01:1d:85:02:8f:a5:2c:d3:
30:f3:ce:5e:c7:9f:d6:bc:68:95:e7:70:12:e9:92:
97:ac:68:f4:cd:50:c1:b1:d0:94:74:96:dc:3a:09:
02:51:f0:f8:b5:15:9f:be:76:39:61:51:ad:c1:ca:
3e:07:59:bc:94:d3:a5:84:98:3c:94:dd:e8:fb:58:
82:8f:a7:f3:6d:77:a2:58:b1:50:e4:8f:9e:08:28:
1d:e3:82:92:7a:26:91:14:09:a6:52:71:a9:97:3c:
59:f8:79:98:9b:ee:9e:d9:ea:60:0e:51:e8:51:4b:
f2:78:92:f7:e3:30:a5:29:b4:6e:2e:a9:d4:f7:35:
97:70:59:8c:a7:f3:6c:6e:95:6a:1b:d5:b1:b8:fe:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E6:4D:4B:BF:93:AF:88:63:0C:84:5C:23:1F:AF:87:6B:8D:E0:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF0D43B8BFA011EF9358EDB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.90.0/24
Signature Algorithm: sha256WithRSAEncryption
22:3e:c7:ee:cd:db:9a:82:fa:02:28:49:d6:20:02:16:bd:0f:
2e:dc:80:c3:c9:4c:a3:ec:fd:08:73:c4:8b:e0:bf:3e:fe:e7:
68:46:92:c0:b1:29:ec:39:eb:e3:d7:08:04:38:ea:f4:14:e7:
b9:d0:c7:87:93:b7:ef:6f:ff:05:07:d5:24:86:73:13:8b:43:
10:12:2a:1e:dd:15:54:29:8e:03:81:af:00:72:07:e1:fd:62:
87:1b:89:6b:b7:7d:98:9a:19:f0:79:11:48:33:e0:3f:05:36:
35:8d:09:a0:d0:87:06:0e:aa:a3:d7:a0:08:23:2b:31:94:74:
5d:27:48:d0:ec:49:c5:cd:3c:e8:d8:19:2b:93:46:87:88:f1:
a0:97:d7:0c:54:bf:80:90:5d:95:ea:cc:8f:83:19:0f:92:82:
c2:35:38:b6:cd:25:54:4d:83:ed:44:9c:29:8e:ad:63:58:26:
d8:10:75:3f:b0:38:81:3d:ea:5c:7a:6f:a1:bd:29:5b:50:4b:
a1:8a:01:1a:17:7d:9c:a0:d0:9d:28:c3:f5:00:97:21:1f:a8:
7f:52:bd:cd:ab:8e:c6:99:b6:b6:3d:c6:db:f4:11:a0:28:51:
f7:ed:2a:5d:28:48:35:91:86:96:03:f0:4b:f8:ec:32:5e:67:
d2:61:5c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:52 2025 by rpki-client