Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF513B62057E11F0AD0EFB50762E951A.roa
File: AF513B62057E11F0AD0EFB50762E951A.roa (raw, json)
Hash identifier: pVCSqE7HHIIfvFUPnJT3FiafhWrg5uRdQ+jUhFTm0ss=
Subject key identifier: 15:6B:DF:26:CB:19:02:A3:EA:0B:9F:4A:23:B9:59:5D:52:4D:D5:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017539
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF513B62057E11F0AD0EFB50762E951A.roa
Signing time: Thu 20 Mar 2025 11:30:11 +0000
ROA not before: Thu 20 Mar 2025 11:30:07 +0000
ROA not after: Sun 30 Mar 2025 11:30:07 +0000
asID: 22724
IP address blocks: 154.89.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95545 (0x17539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 20 11:30:07 2025 GMT
Not After : Mar 30 11:30:07 2025 GMT
Subject: CN=67dbfc43-1a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:6d:5b:3f:55:b7:d5:16:39:14:0f:e4:8a:
de:be:57:12:a1:0b:62:c4:bf:d9:cb:26:f2:99:33:
b3:ad:8a:38:7f:d8:a6:f7:df:9e:e0:c3:ed:46:31:
00:91:ea:88:c0:d2:fc:9a:e7:84:52:2e:de:2e:49:
48:4d:da:35:a9:6b:da:c3:06:47:ff:39:ce:d1:c9:
4d:cd:36:d3:77:51:d8:bf:e9:88:d4:3b:b4:71:4c:
40:7e:8c:11:2a:e6:59:e0:af:92:f0:62:92:5d:c5:
5c:47:c2:b6:3b:37:de:cf:50:77:e9:6e:d2:82:d7:
9d:09:17:c6:60:86:9e:a5:13:fe:86:40:8a:f7:21:
bb:8d:80:c5:ee:5c:3c:81:ba:01:3f:f7:e1:73:98:
0e:dd:a7:1c:d0:2f:54:bd:45:e1:e2:ea:a4:7d:9c:
05:3e:e1:7a:30:a2:10:a2:d6:de:e8:df:df:05:af:
c8:7f:eb:b3:ce:6f:6c:c6:23:c5:c6:ca:15:bc:d1:
8f:16:56:2f:e2:fd:8e:d7:81:c4:c8:31:0b:a4:a5:
a2:d5:35:bd:ef:55:c8:49:cd:ae:50:81:37:5c:7a:
66:8e:0d:19:d9:22:05:6a:58:08:d6:0a:a2:0d:9c:
7b:be:c1:43:52:4d:d8:bc:79:e4:17:69:1d:3c:0e:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:DF:26:CB:19:02:A3:EA:0B:9F:4A:23:B9:59:5D:52:4D:D5:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF513B62057E11F0AD0EFB50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:7e:bf:89:4d:a0:be:34:0b:af:21:78:6f:9c:bb:f1:18:9f:
b1:a5:42:b2:9a:66:fc:b1:23:3e:0a:4a:6e:8a:bf:88:2a:ea:
ee:c3:3a:ee:eb:3c:95:91:3b:ae:b5:19:84:88:86:a4:5b:79:
cb:17:f9:6e:b4:d1:ea:ba:61:70:1b:b5:78:3d:86:69:78:93:
04:2f:30:d5:85:00:e8:ac:96:85:64:98:0d:5a:9d:30:c2:9b:
e6:e6:79:0b:46:9d:31:08:3e:75:3f:be:28:ad:82:2d:ae:f2:
be:90:b8:95:34:6d:8b:c6:59:14:80:f5:bb:9d:45:21:dc:d5:
f4:2f:5e:83:e8:1b:76:20:00:7c:45:bf:a1:f6:dd:f5:1e:4f:
f9:ed:20:4b:16:4d:5a:48:36:a4:13:cd:45:7c:ae:a0:ce:77:
45:6d:06:d6:a2:e4:ea:cc:e4:24:38:b5:de:dc:5d:6f:61:cd:
e8:54:d6:50:39:b7:17:65:00:0c:04:83:5f:90:0d:e7:3f:ec:
00:5a:41:ee:5e:cb:02:3c:2a:87:46:52:6f:2e:ae:d8:96:fe:
87:61:cc:11:a1:9f:69:32:0a:7b:65:5f:d4:ce:ac:69:10:09:
4c:9a:85:c4:b2:a1:ba:c3:29:50:24:75:6b:3e:23:db:1d:74:
ec:e4:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:54 2025 by rpki-client