Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B00B250AFB4611EFA1D6A7A0762E951A.roa
File: B00B250AFB4611EFA1D6A7A0762E951A.roa (raw, json)
Hash identifier: BuXILW5kxvt7Y8N3eK7CZ5og/ibEI8ASR+WPbEsXsNA=
Subject key identifier: D6:30:7B:0D:F8:BC:5E:D5:77:BD:52:03:72:5E:1F:83:CD:81:6A:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B00B250AFB4611EFA1D6A7A0762E951A.roa
Signing time: Fri 07 Mar 2025 11:24:09 +0000
ROA not before: Fri 07 Mar 2025 11:24:05 +0000
ROA not after: Fri 28 Mar 2025 11:24:05 +0000
asID: 9465
IP address blocks: 154.212.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94969 (0x172f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 11:24:05 2025 GMT
Not After : Mar 28 11:24:05 2025 GMT
Subject: CN=67cad759-af33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:75:9d:ab:b0:31:01:34:7b:8a:f1:bb:25:
1b:42:d1:76:27:a0:14:5a:87:52:9e:00:29:f7:9f:
a2:d1:71:6f:17:15:86:18:2f:4b:98:ad:16:5b:2f:
47:2b:41:7c:03:26:c9:eb:bf:95:95:ce:19:8b:5b:
43:38:42:3c:3f:f2:a8:a2:b7:7e:b7:e1:46:3d:fe:
bd:10:b3:7c:58:a4:34:bf:f0:ec:5b:17:ee:b2:99:
05:15:b1:1e:60:87:ae:1f:90:08:53:30:12:1a:a5:
c9:68:e0:23:57:ae:a0:20:8b:ed:cb:e2:90:b3:7e:
6e:c3:1a:25:04:0d:01:cc:f0:0a:af:59:0a:fe:ff:
2e:47:21:78:00:66:bc:5d:fb:14:06:8c:00:d1:4a:
1d:d5:d7:d2:3e:c7:27:46:67:e8:56:5a:33:47:07:
33:3a:59:ae:a5:79:d7:c8:8b:2e:b6:1d:93:85:05:
7b:1e:9b:bd:f3:0b:e5:8c:d3:a3:97:0b:93:79:77:
cc:f3:08:a1:60:85:5c:38:ad:93:b4:1a:86:ef:06:
3b:3b:db:64:31:0e:85:fa:fd:42:a0:52:1b:a6:a0:
90:c0:2e:a3:74:77:83:4c:b9:47:63:d2:3c:2a:33:
ca:97:4b:70:dd:40:e0:a1:fb:41:ba:33:90:05:62:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:30:7B:0D:F8:BC:5E:D5:77:BD:52:03:72:5E:1F:83:CD:81:6A:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B00B250AFB4611EFA1D6A7A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.141.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9a:fa:0a:93:d1:12:68:c2:9f:35:60:2a:8e:ad:20:05:b0:
89:50:26:d8:84:59:8c:5b:28:18:d6:69:d7:ce:8f:55:ec:9f:
92:e2:b4:64:16:2b:ff:b2:95:7d:2c:78:0c:30:cb:08:8b:4d:
d5:a5:9d:0a:4d:1a:ba:da:6e:bc:21:9c:09:64:ec:be:0a:7d:
47:0b:92:2a:59:1d:32:11:8f:45:44:00:6b:03:76:48:9a:68:
6d:a6:ea:13:1f:35:6e:2f:f0:4c:2f:e7:d1:41:7f:b2:14:b9:
4b:ff:83:f1:2f:19:d6:bd:3c:de:94:64:bd:ac:10:64:6d:55:
c7:bc:a3:78:bd:af:84:4c:3e:c7:2d:bf:01:ba:04:6c:78:f6:
bb:e5:0f:f1:9c:c3:25:47:ec:52:8b:89:4a:99:22:d4:3f:b3:
4c:3c:c2:34:49:b5:2a:b6:78:60:52:ce:40:20:ea:ab:80:1d:
6d:8c:c5:67:9b:f0:30:ae:19:a4:dc:42:52:64:48:82:cf:09:
e2:52:06:f5:31:70:6b:55:e0:9f:fa:b8:e7:03:db:57:82:92:
07:ec:cb:1a:2b:61:47:2b:96:a9:6a:ce:39:72:62:13:9f:0b:
83:15:49:59:e8:93:8c:f4:f0:75:f8:96:21:34:f2:dc:5b:5e:
0b:f5:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:03:23 2025 by rpki-client