Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B23D870EF5E311EFB9FAC495762E951A.roa
File: B23D870EF5E311EFB9FAC495762E951A.roa (raw, json)
Hash identifier: yfA3FWUSlNYKm7gK7iFwLFlBVTiGq8z/oNzvaK55Ep8=
Subject key identifier: A7:CA:CA:FE:A8:3A:08:45:E0:4E:88:9A:A8:44:68:EA:21:41:52:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B23D870EF5E311EFB9FAC495762E951A.roa
Signing time: Fri 28 Feb 2025 14:52:57 +0000
ROA not before: Fri 28 Feb 2025 14:52:53 +0000
ROA not after: Wed 26 Mar 2025 14:52:53 +0000
asID: 62240
IP address blocks: 154.194.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93054 (0x16b7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 14:52:53 2025 GMT
Not After : Mar 26 14:52:53 2025 GMT
Subject: CN=67c1cdc9-af8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:ce:7c:62:ad:c7:70:63:ab:b6:e6:0f:fe:
46:02:d5:20:aa:a8:58:fd:d8:59:5e:a8:4b:b0:e8:
cb:e1:85:0e:29:a9:66:40:1a:c8:7a:ce:88:fc:6d:
ec:8b:f0:68:42:74:1e:a4:36:d0:f6:58:07:19:95:
69:e4:0f:57:9e:15:63:6b:74:2e:0f:05:f0:07:a1:
50:ea:54:f2:e7:4f:1f:aa:8f:30:79:fa:23:7f:98:
8d:af:e1:ee:a3:76:5e:d8:4d:a8:6a:d0:33:b7:f5:
03:82:96:07:ca:37:5c:be:2f:f3:72:06:1e:fb:4f:
c3:b2:04:80:62:cd:35:82:2f:d9:65:b4:f2:54:93:
ce:23:0c:22:b4:da:17:df:26:66:91:44:e3:30:ee:
37:11:e4:36:43:6b:10:dc:65:fd:77:0e:e8:76:d0:
98:73:25:a1:9b:b2:59:d1:72:fc:13:40:db:26:91:
4e:8d:85:b4:c1:73:56:52:3b:74:14:8c:8a:0f:32:
31:5b:61:19:29:5d:d1:37:7f:d9:3c:9b:48:bb:6f:
f3:54:40:8b:05:31:c1:74:42:28:f8:da:4a:11:d3:
0a:d7:a6:52:94:25:68:88:8b:3c:8b:f1:3c:3e:01:
82:2e:eb:df:a4:94:9f:8f:ec:d3:2b:75:38:61:bb:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CA:CA:FE:A8:3A:08:45:E0:4E:88:9A:A8:44:68:EA:21:41:52:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B23D870EF5E311EFB9FAC495762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.90.0/24
Signature Algorithm: sha256WithRSAEncryption
06:13:4d:f6:33:4b:4d:14:5b:68:7a:92:85:82:12:d0:fb:7d:
39:bf:0f:55:1d:fe:40:bc:6d:99:cc:e8:a8:ba:25:cb:6c:02:
c7:bc:3d:98:33:3f:e1:24:70:ef:90:78:a9:e2:a8:58:21:a9:
5c:13:89:58:4e:c3:7a:cc:80:79:a4:56:22:7b:57:71:b5:be:
45:e8:0c:08:ab:32:99:97:44:7e:de:78:23:d7:d1:cd:ea:ca:
d2:56:3a:46:8f:b7:d1:53:58:49:db:19:25:b2:12:fd:4b:02:
8a:51:ce:97:59:3a:c9:a4:90:31:e8:0e:c5:80:c4:65:22:03:
1f:07:70:9c:cd:84:60:5e:95:90:e7:18:bd:0a:fe:a4:cf:1e:
f6:2f:6d:a1:a0:8f:2d:b2:68:2d:f0:4f:48:29:a4:65:ec:38:
58:ad:a1:5b:5f:f1:b8:95:59:d2:06:76:44:39:3c:82:60:ab:
5f:07:2c:fe:d9:8e:85:fe:a0:5e:25:8d:12:a5:77:78:04:82:
3f:1c:6c:1a:b1:7c:6b:c8:a7:61:4e:66:cd:99:2b:3b:93:13:
c7:1b:bc:3c:41:bf:21:73:58:a3:53:bf:e8:13:e5:97:a5:7a:
13:65:1d:43:90:70:f9:5a:a7:99:14:5a:b6:5f:12:9d:4f:e6:
93:8c:d1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:22:19 2025 by rpki-client