Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6C14C84F68311EF8E376561762E951A.roa
File: B6C14C84F68311EF8E376561762E951A.roa (raw, json)
Hash identifier: iJe0qzaRVfwfv6MktToU/ypt/noxJ/PqURqxLtSkPX0=
Subject key identifier: F6:CC:3E:8C:7D:E3:D9:B0:31:3D:F1:58:47:80:30:94:B6:D1:DA:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6C14C84F68311EF8E376561762E951A.roa
Signing time: Sat 01 Mar 2025 09:58:24 +0000
ROA not before: Sat 01 Mar 2025 09:58:20 +0000
ROA not after: Mon 31 Mar 2025 09:58:20 +0000
asID: 48031
IP address blocks: 154.222.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93623 (0x16db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 09:58:20 2025 GMT
Not After : Mar 31 09:58:20 2025 GMT
Subject: CN=67c2da40-9e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:07:58:1f:f3:b5:bd:2a:76:c1:06:45:85:
de:35:44:62:27:84:e6:e1:e8:91:58:38:d4:81:cc:
e1:79:3d:4e:65:f7:f5:26:1c:4f:f4:be:84:af:be:
42:8f:74:25:31:d8:fa:3b:39:a0:8d:a8:59:99:94:
9c:a2:ce:52:2e:b6:ee:e7:1d:63:bd:6e:38:b7:b0:
96:21:9a:78:89:ec:a1:a1:1b:5d:14:f4:37:26:23:
dc:64:02:1a:03:13:ec:52:89:ee:67:7f:85:a1:a1:
10:bd:31:4a:25:ad:5d:62:9f:52:f2:f7:36:65:7d:
84:e0:bd:0b:e4:d0:fe:78:67:01:0b:6f:d0:bc:fd:
f8:b7:27:de:82:90:a4:fa:db:60:ff:2d:43:6e:03:
aa:e7:d1:12:06:61:68:22:9a:89:0e:bf:08:30:de:
62:1b:27:54:3c:13:d7:85:4f:32:89:62:e3:6a:0a:
54:64:27:f6:8b:7b:c7:87:31:53:39:c1:0a:02:3a:
95:ee:93:28:12:99:96:56:fd:7f:d9:29:1f:93:8b:
f2:91:40:27:80:dd:ef:54:fa:cf:43:be:a9:b4:b9:
4d:19:c5:05:40:a0:28:71:74:c8:a6:df:ac:bd:20:
df:f6:a7:10:40:7d:9f:e1:eb:b4:a7:28:e8:17:eb:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CC:3E:8C:7D:E3:D9:B0:31:3D:F1:58:47:80:30:94:B6:D1:DA:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6C14C84F68311EF8E376561762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:16:e5:30:dc:6f:da:2a:f8:86:de:46:36:41:e7:de:67:47:
16:65:29:06:be:26:b8:7d:e5:cb:ee:e8:95:eb:5c:08:b1:76:
6a:da:fb:08:f0:4d:e2:10:01:20:41:9d:7b:54:cf:fe:4f:39:
b1:0d:8f:13:7b:69:59:8c:75:e3:1b:6b:e6:54:4e:8c:42:9a:
17:00:18:bb:75:d1:5a:d6:72:1b:a8:aa:c1:d2:10:42:b4:78:
14:78:f8:25:23:c5:39:bb:bd:8a:0e:ab:eb:ad:7f:1c:59:ad:
d9:2b:bf:8e:cf:e2:8c:28:ef:89:dd:6e:93:45:63:2f:a0:69:
5c:79:2e:3d:31:65:67:36:8d:de:b6:39:54:c1:93:27:10:a6:
4a:72:84:d9:d7:ae:13:91:d5:ad:66:43:da:bc:e9:e6:dc:83:
57:d6:0c:a0:c3:f5:07:52:03:27:1d:03:e1:59:cc:58:ce:c5:
e2:ea:9a:a5:33:79:37:e3:f4:aa:96:36:18:eb:98:7b:68:3a:
7d:37:91:93:b1:05:db:3c:39:2f:22:61:d8:c3:42:40:20:35:
8e:9a:e4:bb:2e:0b:df:38:2a:eb:de:dd:bd:18:06:07:a5:18:
e4:86:67:72:f7:cd:24:49:03:ea:39:7f:d7:b1:56:8c:93:e2:
9e:f0:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:30:51 2025 by rpki-client