Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4BF9AFEF33511EF856E97AB762E951A.roa
File: B4BF9AFEF33511EF856E97AB762E951A.roa (raw, json)
Hash identifier: 6K8ITv3/eJCBwtsGjCcQamS/N/sEx1+Sj4ZERI9VA0Y=
Subject key identifier: F7:A8:36:27:E5:1A:EF:62:7E:33:84:39:93:39:E5:95:88:C4:E0:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4BF9AFEF33511EF856E97AB762E951A.roa
Signing time: Tue 25 Feb 2025 05:02:27 +0000
ROA not before: Tue 25 Feb 2025 05:02:23 +0000
ROA not after: Wed 26 Mar 2025 05:02:23 +0000
asID: 5065
IP address blocks: 154.94.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89430 (0x15d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 05:02:23 2025 GMT
Not After : Mar 26 05:02:23 2025 GMT
Subject: CN=67bd4ee2-c720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d2:1d:a4:b7:8c:38:89:e1:43:da:45:ee:75:
2c:81:72:ad:59:da:7c:2f:d3:bd:52:e3:aa:03:4c:
32:f5:57:7f:68:36:df:71:37:3d:95:6b:bf:d8:88:
9c:c4:39:b0:f8:90:64:71:7e:28:64:26:48:2b:24:
20:e0:3b:ab:ef:06:ba:70:1f:93:4f:8b:a6:6b:60:
f3:cb:e3:77:92:31:60:aa:f3:d0:85:b1:82:40:6d:
35:1b:f3:34:6c:41:6e:fd:68:7f:c1:4d:76:26:55:
9e:d7:8a:53:e1:3e:38:c3:5e:58:a9:f4:47:7b:0b:
74:fd:71:58:fd:c5:ce:be:68:f2:43:4d:56:91:ae:
b4:52:db:92:20:79:c5:df:4b:95:9c:95:31:ff:c5:
a7:dd:c5:72:33:e7:49:65:96:ba:0f:41:8c:be:bc:
af:98:3b:43:78:77:81:fa:3f:16:bb:76:f7:c6:53:
56:9d:72:95:8e:be:3a:36:8c:a1:e2:20:5c:89:1d:
91:ad:05:e5:86:66:0e:dd:df:3f:57:ee:f4:cc:5f:
ea:21:dd:97:76:7f:f6:d2:b7:d1:3d:d8:51:71:30:
a9:55:51:59:b8:eb:45:29:e4:56:de:9f:64:36:bf:
f9:0e:1d:3f:01:38:82:92:56:ce:62:33:2f:a5:ed:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:36:27:E5:1A:EF:62:7E:33:84:39:93:39:E5:95:88:C4:E0:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4BF9AFEF33511EF856E97AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.60.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d0:c9:49:cc:7e:c3:77:ed:16:e0:5b:df:78:ec:f3:b8:f4:
f0:7d:2a:bd:9f:16:46:97:c6:bf:fc:fe:80:22:67:d7:44:39:
2d:15:f9:54:83:54:4b:e1:fa:d6:36:bd:39:10:ba:52:2e:f3:
94:a3:77:d1:4e:ec:61:d5:4d:72:66:66:24:aa:5a:fd:cc:aa:
90:be:03:fb:94:79:1a:4c:c2:a7:f8:6d:4c:95:ab:fe:00:6a:
87:33:d7:de:a5:88:b7:3b:61:60:e5:15:c6:d0:30:a5:fa:40:
bf:22:39:44:55:48:3d:e0:0b:b0:90:d4:2f:63:ec:64:4e:0c:
8f:16:4c:2a:c3:fe:3a:65:98:dd:33:d6:41:a1:7d:6d:bb:e3:
3b:ca:14:f5:5f:bc:7f:0a:a9:26:de:fa:09:dd:ee:c5:cb:7b:
ad:c8:ac:be:62:bf:58:e4:ed:50:dc:6d:e4:71:d0:a2:4c:d3:
42:c2:f0:7c:2c:56:8d:31:9b:c8:85:ca:76:e3:c2:fc:a9:3e:
4b:80:78:2a:b4:1c:79:55:84:3b:b3:42:8e:40:a2:65:c7:ca:
3e:13:39:dd:1b:2d:8f:68:d8:81:fb:02:42:08:00:09:06:49:
06:01:3f:95:41:dd:f2:9b:e0:81:14:4c:67:23:5c:26:92:f8:
e2:b3:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:07:28 2025 by rpki-client