Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B925BFF0F5E811EF98C06EB7762E951A.roa
File: B925BFF0F5E811EF98C06EB7762E951A.roa (raw, json)
Hash identifier: isYr1eZe93Xn0GVAXSPRxZ2/FI2hZ6eqSswFnGpjd/0=
Subject key identifier: DB:39:1D:A2:13:7D:27:01:CE:B0:52:1C:58:CB:A5:8E:77:2C:BA:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016BB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B925BFF0F5E811EF98C06EB7762E951A.roa
Signing time: Fri 28 Feb 2025 15:28:56 +0000
ROA not before: Fri 28 Feb 2025 15:28:52 +0000
ROA not after: Wed 26 Mar 2025 15:28:52 +0000
asID: 62240
IP address blocks: 154.194.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93104 (0x16bb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 15:28:52 2025 GMT
Not After : Mar 26 15:28:52 2025 GMT
Subject: CN=67c1d638-c2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:08:36:cf:46:54:58:3b:45:fc:c1:22:6e:
f6:58:71:ad:be:22:94:0a:f2:bc:be:ee:6b:1e:b8:
7c:6b:ac:6d:4f:d1:73:56:83:00:22:59:b1:ff:46:
ae:1d:0a:8d:23:17:3c:1f:ef:84:86:25:a2:51:fb:
9b:d4:15:fc:6f:b5:65:e1:be:ac:26:8a:14:6c:96:
b8:31:fa:aa:cc:aa:aa:cf:d8:84:6f:eb:96:0b:1c:
bb:4a:bb:c4:9f:fe:17:63:a9:66:a6:7e:6e:b7:fc:
fc:7e:f9:e5:e6:6a:5f:d7:53:dd:7d:88:c0:44:c0:
b8:42:c4:00:bc:3e:b9:81:d2:10:33:16:0b:f1:3a:
a8:e4:53:82:f4:0e:08:e3:5d:94:2b:68:5a:77:a0:
99:96:f8:9d:9d:c1:3d:4e:07:f1:04:fc:2d:59:f7:
d6:68:7f:a4:9f:91:ed:d7:14:2e:11:cd:4a:ac:cd:
e5:56:4b:78:39:9e:8d:cf:37:4d:36:34:d4:66:cf:
0e:d5:c4:e5:5f:2e:5b:8d:26:50:b8:c1:c3:4e:5a:
df:01:69:ed:f2:4f:1d:ec:e1:a3:7a:cd:bc:d1:b7:
02:af:e2:cc:ca:4b:af:66:ca:4f:d0:ce:59:05:25:
db:44:43:4a:86:6b:43:5d:67:19:e3:b3:87:f7:e9:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:1D:A2:13:7D:27:01:CE:B0:52:1C:58:CB:A5:8E:77:2C:BA:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B925BFF0F5E811EF98C06EB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4b:86:cd:f3:0f:a8:e1:30:f7:c8:8b:6e:d4:0d:82:11:00:
d0:c9:cb:fc:f0:f8:3e:e8:11:14:e3:2d:9a:fb:08:1e:9a:d5:
1f:9c:73:7d:4c:ea:62:c7:d7:a7:75:5e:c0:9b:ab:6d:2b:ed:
2b:0a:c5:63:1a:bd:b2:4e:bd:4c:4a:50:53:ba:2a:9b:bf:85:
12:2f:a0:ea:b9:09:19:a9:bf:05:3c:f6:4b:30:b0:d9:bf:9c:
ce:19:bd:80:8e:93:55:d0:64:cc:e1:3b:aa:cd:0b:17:22:54:
2a:9b:4c:af:b8:5e:a3:87:bd:54:44:ef:58:ba:0c:df:79:64:
16:da:e9:a6:81:95:dc:07:4a:63:e1:13:ff:00:17:5c:29:9e:
dd:10:96:ab:38:87:65:e9:ae:58:6f:14:69:a3:b3:b3:7f:2b:
c7:a8:4e:11:86:24:25:92:02:b7:19:dc:a2:1a:16:47:60:1a:
d1:e8:1e:ed:8e:01:b1:0a:27:fb:03:3b:2b:81:07:5d:3e:24:
f9:83:b2:91:1d:bb:24:de:03:2b:6e:54:67:4b:52:c1:7a:3c:
aa:6a:59:7d:d0:36:32:f9:48:f9:ad:26:76:0b:27:35:ac:9e:
ea:b8:9c:3e:24:ec:1e:10:e0:cc:31:ac:ea:f3:66:37:c2:dd:
7d:97:58:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:08:32 2025 by rpki-client