Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7A10D52F53811EFB325A97C762E951A.roa
File: B7A10D52F53811EFB325A97C762E951A.roa (raw, json)
Hash identifier: ZoGmfdIatiED9w2HJjULmbHuglN2rxLpF1NAqyYK7jM=
Subject key identifier: 18:B0:CF:A4:7D:8D:75:62:6E:25:32:C5:6B:EF:01:74:9D:40:74:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016978
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7A10D52F53811EFB325A97C762E951A.roa
Signing time: Thu 27 Feb 2025 18:29:02 +0000
ROA not before: Thu 27 Feb 2025 18:28:58 +0000
ROA not after: Fri 28 Mar 2025 18:28:58 +0000
asID: 395793
IP address blocks: 154.193.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92536 (0x16978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 18:28:58 2025 GMT
Not After : Mar 28 18:28:58 2025 GMT
Subject: CN=67c0aeee-a45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:d7:c9:39:cf:fd:1d:56:5e:d0:8d:55:fe:
e9:a1:91:67:b5:aa:4a:c8:fa:d7:fa:58:da:44:b8:
45:eb:ce:7c:ad:9a:3c:18:48:1e:d4:44:d1:48:79:
be:bd:ee:f5:06:45:05:08:7e:4e:cd:eb:7b:00:50:
27:c7:46:5c:a6:5c:6f:44:de:f6:87:32:b8:6d:4c:
d2:f7:7d:60:8e:54:72:d5:fb:11:78:79:2a:6a:a3:
a5:bc:68:bb:62:4e:75:5f:4e:dc:7e:3f:36:fd:84:
03:a4:ff:36:f4:d6:9a:92:18:90:17:9f:5e:e7:20:
9d:10:1e:4e:00:96:2a:b2:12:88:0f:b5:63:34:d5:
29:0e:0d:4e:7c:44:35:05:75:8e:27:34:e5:8e:1c:
f1:8d:5a:97:3f:fc:bb:3d:d6:f9:33:df:20:c4:51:
02:e4:ba:46:d1:91:54:04:48:27:67:b3:06:c8:e0:
a1:16:07:62:96:cf:bf:37:e4:e4:19:32:48:a1:8e:
8c:d9:08:55:b7:8e:e9:9e:24:51:a4:32:f6:b9:e1:
30:e4:c3:1e:81:23:5c:e8:f5:ab:46:7f:9e:d8:6c:
ff:27:7d:fa:cd:4e:b2:57:c4:7c:c9:ef:ae:f9:f5:
2d:0e:3b:96:0c:f3:1d:0d:08:f7:41:b1:81:e0:c6:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:CF:A4:7D:8D:75:62:6E:25:32:C5:6B:EF:01:74:9D:40:74:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7A10D52F53811EFB325A97C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.109.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:84:f4:3b:b3:d6:aa:ad:ad:62:27:ab:d0:b6:b1:1d:76:e3:
39:bb:0a:63:50:29:d5:4d:92:27:d5:b3:47:27:d7:e1:7c:e1:
fa:53:e9:77:8e:64:63:95:aa:93:f2:6d:5c:ff:c1:94:d9:7c:
d4:50:98:a4:ef:a6:98:f6:46:78:9f:ef:a4:c5:4d:c3:5c:48:
78:51:78:57:e4:98:17:b7:7c:eb:3e:48:be:63:17:36:02:3a:
f8:f3:83:09:6b:78:9f:56:3b:48:e4:39:38:41:fa:3b:06:27:
93:52:37:5e:f7:a4:f7:39:89:ae:f8:eb:bd:0d:1a:37:18:32:
cf:0b:4c:18:73:36:db:af:95:ea:e8:ef:a8:57:47:d3:b7:b0:
c3:0d:ff:c7:db:69:46:76:db:f3:c9:26:7d:84:7f:95:74:6b:
f2:62:62:d0:64:72:ed:ae:b2:0f:e3:32:d7:8b:c6:68:f7:f1:
1d:f9:24:f2:5b:cd:88:6f:e8:a6:9e:9d:54:aa:72:4f:f7:0b:
fa:cf:3d:f8:1c:7e:a1:7b:8d:cd:8c:b7:58:24:c9:ac:a6:db:
53:9c:cf:66:90:db:81:39:58:28:28:10:b2:46:43:49:d3:09:
cf:6d:7e:7f:9b:76:d4:29:ac:e1:4b:bd:3f:cf:58:c8:59:1b:
e2:e8:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:42:57 2025 by rpki-client