Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4EE3B9AF29811EFAF114C8A762E951A.roa
File: B4EE3B9AF29811EFAF114C8A762E951A.roa (raw, json)
Hash identifier: gGEuFg7HrLqQSaIcGeHjyeh52gd9gG7wfaxsu+ZGyXA=
Subject key identifier: 61:2A:27:9A:08:07:B6:D0:20:D5:09:5C:36:92:B7:7A:AC:99:7C:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015BA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4EE3B9AF29811EFAF114C8A762E951A.roa
Signing time: Mon 24 Feb 2025 10:18:36 +0000
ROA not before: Mon 24 Feb 2025 10:18:32 +0000
ROA not after: Wed 26 Mar 2025 10:18:32 +0000
asID: 5065
IP address blocks: 154.94.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89000 (0x15ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:18:32 2025 GMT
Not After : Mar 26 10:18:32 2025 GMT
Subject: CN=67bc477b-da4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:3f:86:57:2d:bf:ab:fb:51:fc:12:21:55:
b0:75:fb:eb:26:3e:f9:83:ba:07:11:4a:e2:87:d5:
14:9c:ed:c2:2e:58:fd:e2:50:cc:77:d4:ac:e1:a8:
2e:44:82:3f:8e:fb:c7:65:b8:07:03:99:27:32:42:
78:63:9c:d4:07:fd:3a:4d:91:83:41:88:5c:e2:e7:
e8:6f:c0:61:93:55:d8:14:29:36:3b:d0:fe:52:19:
f3:d7:51:7a:c0:e9:a9:9b:86:63:79:bc:06:f3:b8:
6f:17:4d:f3:e1:2d:b9:51:05:0d:b3:66:9e:93:4f:
a7:fc:46:66:99:88:e0:0a:7e:4e:b0:38:79:58:9a:
b1:70:61:30:8f:e5:32:6e:2d:89:72:1a:56:86:73:
ad:ed:db:34:be:06:18:e5:14:5b:76:74:a6:03:6c:
90:47:9e:83:3c:c0:fe:e3:aa:7e:d5:29:62:02:4d:
75:b3:2e:55:3d:ea:3f:c5:87:c7:d2:bf:0b:01:fa:
4e:9a:6e:9a:21:58:b8:a4:62:77:bc:04:c7:ef:51:
e7:0e:62:dc:d6:70:3f:8a:d9:87:c6:8c:f1:39:ee:
cc:6a:89:c4:41:85:3d:94:d7:26:89:a4:b9:28:83:
9f:99:1b:a6:79:5a:82:5d:88:e2:71:1f:c8:8a:08:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:27:9A:08:07:B6:D0:20:D5:09:5C:36:92:B7:7A:AC:99:7C:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4EE3B9AF29811EFAF114C8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cb:f5:15:7d:ef:83:e8:ad:06:d3:6d:64:bb:ad:f1:d2:ee:
ea:e9:0a:e9:57:a8:7e:a0:14:12:6d:8b:fd:2e:9b:db:ff:24:
74:da:f0:3a:8b:5b:7c:33:6a:04:af:72:06:1e:46:67:f2:7d:
39:f3:6b:2e:9d:b0:4c:26:5d:86:f9:7a:2e:c7:4a:eb:08:be:
11:ca:a5:3e:14:51:96:fa:ce:e7:07:05:2f:14:8d:59:7c:5f:
5d:0c:7d:fc:0e:e0:04:77:94:7d:c8:1c:19:5b:f7:f4:f2:8f:
92:e3:53:6c:eb:9d:65:53:bd:6a:87:ec:1d:00:e4:84:7b:0c:
c9:ea:58:4c:01:7d:f4:be:89:d1:3b:5b:df:cb:d5:a8:d5:50:
75:6e:af:36:39:e3:f9:74:d2:4b:3d:24:c5:18:68:42:04:9e:
59:f4:9e:46:71:39:fb:e7:00:3d:af:c5:1d:bf:f7:85:5d:3f:
9b:1b:20:3c:77:d7:ab:31:15:96:2d:bb:2a:02:e0:bb:e9:66:
49:21:89:49:27:65:50:64:af:d3:f5:fe:5f:da:04:7e:fd:5a:
fd:87:0b:18:8a:02:a6:e0:3f:39:0a:0e:4c:1e:bd:30:98:ee:
9c:5e:fc:e5:09:0c:01:da:63:5f:d5:fe:3b:d2:3c:c1:44:a9:
52:a6:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:46:24 2025 by rpki-client