Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DFBC44F4F311EFB9BED4A6762E951A.roa
File: B3DFBC44F4F311EFB9BED4A6762E951A.roa (raw, json)
Hash identifier: 69/g4pr0dSpC8q3SgGZP+VRw9XRrwz6jmLuCH1cbLWo=
Subject key identifier: 33:C7:58:9A:D2:6A:06:32:66:31:D8:E0:45:2F:76:E0:60:CD:61:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01679F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DFBC44F4F311EFB9BED4A6762E951A.roa
Signing time: Thu 27 Feb 2025 10:15:00 +0000
ROA not before: Thu 27 Feb 2025 10:14:56 +0000
ROA not after: Sat 29 Mar 2025 10:14:56 +0000
asID: 984
IP address blocks: 154.200.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92063 (0x1679f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:14:56 2025 GMT
Not After : Mar 29 10:14:56 2025 GMT
Subject: CN=67c03b24-917a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:51:d6:e2:9a:da:28:74:89:06:72:d5:2c:
17:e2:2d:be:3d:f4:0c:57:22:f3:2c:fb:ea:e3:07:
30:4c:f7:c7:95:63:21:49:cf:5f:cb:99:db:b3:90:
fa:c3:11:d5:50:b3:de:88:df:14:cd:31:c3:ae:bf:
44:fd:51:0d:0d:38:2a:2e:e0:e5:a6:41:69:ad:45:
70:6a:e8:5d:62:31:f2:70:b1:d1:2e:ec:09:06:e1:
a6:f8:4f:29:fd:75:46:9b:89:66:c8:0a:44:84:88:
72:ac:50:bc:9f:d9:6e:98:8e:2e:23:e1:cf:0f:a1:
52:f4:8f:de:5e:11:d4:10:14:73:db:c2:e9:85:6a:
e6:dc:de:58:56:eb:44:cf:b9:6a:9f:cb:07:9f:77:
3f:87:09:95:d3:f5:9b:58:5f:32:9f:83:84:6d:87:
25:69:96:80:a5:dc:fd:38:e1:48:9f:17:a6:73:93:
8d:f4:28:9c:f2:7d:f1:a3:9e:25:f5:c8:35:7f:ab:
51:54:e1:aa:ba:59:12:78:36:e0:0a:eb:b0:bf:6e:
38:68:11:42:57:bb:91:f9:c9:96:ab:5c:05:aa:62:
20:53:6d:06:e0:ab:f6:af:b8:2c:39:f3:33:f0:95:
a9:d1:db:ae:8d:6f:e1:5a:17:fb:68:7b:8a:81:05:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:58:9A:D2:6A:06:32:66:31:D8:E0:45:2F:76:E0:60:CD:61:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DFBC44F4F311EFB9BED4A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:84:ef:57:11:02:8e:66:a2:f2:e8:40:17:d0:ce:e3:19:8d:
6f:5a:9c:ea:41:83:da:c6:d5:b4:43:45:96:4d:c8:db:ec:7d:
28:ed:72:52:dd:07:d7:ff:72:66:77:07:d0:4b:e6:5c:78:3b:
9e:be:b4:87:3d:d2:b9:0e:55:ae:58:13:33:5d:52:a3:1c:12:
90:70:f9:00:ba:f9:a6:d6:f7:b2:3c:4b:79:53:c7:00:06:c6:
10:f1:38:cd:f0:71:f7:7b:cb:bd:e1:d2:bf:c2:9f:83:40:b5:
1d:3f:81:73:8f:07:6c:c7:40:11:05:f4:c7:fe:d4:4b:55:d4:
f6:7c:8a:50:e6:3c:5a:2c:90:f3:6c:51:1f:6c:40:cb:48:2c:
ac:a1:6a:f5:49:82:b5:a2:4f:08:45:16:7d:9f:04:cc:5f:0a:
ce:e7:f4:6c:a3:94:82:86:64:7a:16:a2:97:50:75:9c:87:eb:
84:df:17:53:96:04:aa:4b:ce:e1:69:28:77:b0:8a:7d:73:9c:
b3:0a:b4:55:69:59:b6:ee:78:ba:00:cd:16:f3:a5:53:48:55:
77:a5:04:31:0c:f7:63:0b:8b:20:46:92:f2:2e:1b:33:95:6e:
ed:07:5a:0f:6e:de:63:cb:b6:85:64:f2:4e:49:f6:32:4d:3e:
2b:6f:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:59:02 2025 by rpki-client