Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFAEF498F5B911EF8CF8EA77762E951A.roa
File: AFAEF498F5B911EF8CF8EA77762E951A.roa (raw, json)
Hash identifier: wkkRnN7T+ohMD+8lUMosLiSqs3GY/A/6CHcrxkEPaGk=
Subject key identifier: 25:81:F0:BA:62:CF:B1:01:EE:EE:00:5E:1E:3D:B5:32:A3:90:0D:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFAEF498F5B911EF8CF8EA77762E951A.roa
Signing time: Fri 28 Feb 2025 09:52:14 +0000
ROA not before: Fri 28 Feb 2025 09:52:10 +0000
ROA not after: Mon 31 Mar 2025 09:52:10 +0000
asID: 54600
IP address blocks: 154.202.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92769 (0x16a61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:52:10 2025 GMT
Not After : Mar 31 09:52:10 2025 GMT
Subject: CN=67c1874e-e40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:ad:18:9a:64:df:b0:c8:48:52:65:b2:9d:
f3:be:74:c9:22:73:10:f8:08:2c:fc:4a:78:87:83:
5d:0f:52:43:a0:8b:a0:6d:20:3d:58:44:3f:26:f2:
73:a5:f4:1f:e2:43:09:42:89:ec:a9:a8:2f:56:bb:
56:24:40:8d:d7:f0:23:4c:e3:b9:1e:c7:33:2b:fd:
8e:c0:78:cf:3e:da:a1:e1:9f:1e:80:61:32:92:d6:
2d:b9:48:a1:45:f1:fd:09:82:4e:91:3d:e4:fc:06:
35:3b:d6:51:b3:dd:46:ea:e5:12:39:76:d1:ae:63:
72:dd:c9:71:b3:aa:ee:ea:d4:19:79:fc:27:5a:f9:
8f:81:82:7a:3b:ce:ed:d1:cf:8e:52:26:86:6a:d1:
c6:86:5f:95:56:1e:3b:90:31:cc:7e:b1:8a:89:48:
88:fe:4f:9c:0b:42:ca:0c:e7:94:8c:9f:ef:30:fe:
98:ba:93:55:a5:d8:54:70:c9:83:da:73:50:b2:5e:
84:0f:1b:4b:01:9f:fa:79:b0:e3:2e:48:a7:3b:d1:
5a:a0:42:0e:3a:6e:14:02:05:c2:6f:4b:3d:03:f8:
dd:32:de:cf:81:5c:10:c0:8d:e8:ed:5f:75:d6:5e:
75:b2:5e:21:b9:79:b5:26:f6:43:da:1c:cb:a2:90:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:81:F0:BA:62:CF:B1:01:EE:EE:00:5E:1E:3D:B5:32:A3:90:0D:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFAEF498F5B911EF8CF8EA77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.224.0/20
Signature Algorithm: sha256WithRSAEncryption
61:a7:b2:67:53:ad:39:03:3e:c8:b7:51:08:dd:61:53:a1:96:
80:02:10:d1:43:18:bf:05:ee:4a:3c:33:25:7c:15:1e:37:89:
73:39:c0:15:be:43:03:83:8c:1f:4f:88:fe:c4:f1:87:d8:b1:
b2:31:d7:8a:67:24:06:a1:36:07:78:4d:5b:cb:c2:51:f9:05:
e5:ff:60:6d:fd:92:ef:a0:2b:c8:36:45:39:8f:e1:a4:0d:d7:
ad:25:52:77:3a:24:25:24:14:5f:6f:12:89:20:20:02:ee:e7:
20:17:70:23:c9:10:90:58:52:d8:8e:45:20:7e:42:c5:56:a3:
f9:34:21:a0:76:0f:21:68:f1:de:7c:55:1e:ac:41:91:c3:ff:
78:2a:a3:2c:50:94:58:c5:ad:63:bd:b0:f7:d4:25:cd:b3:a3:
64:90:74:49:8b:2a:a4:79:f7:f9:90:c9:bc:db:04:9e:dd:0d:
98:31:85:af:ec:1b:68:4e:12:76:c1:ba:18:29:c0:4d:49:71:
47:91:a8:71:04:3a:fa:e3:64:80:4b:c9:a2:cd:98:df:a2:d1:
88:f0:66:af:f5:f6:6d:7a:17:96:b3:65:f9:43:65:f3:86:3f:
29:f5:b0:fc:9f:64:6e:97:5e:2f:30:73:b8:8f:2b:4c:20:1f:
f0:b9:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:11:01 2025 by rpki-client