Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB597BAF81711EFAF051A94762E951A.roa
File: BAB597BAF81711EFAF051A94762E951A.roa (raw, json)
Hash identifier: VLpGHzk4nY2HAycVBfB+QeULiJOk1steAmmqxY/3kKo=
Subject key identifier: 89:90:68:98:A5:6E:B2:F2:23:26:67:27:69:69:05:49:53:D8:47:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB597BAF81711EFAF051A94762E951A.roa
Signing time: Mon 03 Mar 2025 10:10:27 +0000
ROA not before: Mon 03 Mar 2025 10:10:23 +0000
ROA not after: Mon 31 Mar 2025 10:10:23 +0000
asID: 202656
IP address blocks: 154.219.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94200 (0x16ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:10:23 2025 GMT
Not After : Mar 31 10:10:23 2025 GMT
Subject: CN=67c58013-fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:0d:5b:d2:5f:88:9c:87:6e:83:44:9a:be:
13:7f:6d:8f:e8:e2:26:58:b2:16:a7:51:a5:51:a0:
de:fd:0f:36:58:f4:fd:dd:d7:32:52:70:d3:67:02:
2f:ae:d5:57:02:bd:8b:6e:ee:8c:ef:05:af:95:45:
8d:c0:be:e7:42:56:b1:b0:1a:7b:84:52:4b:1f:52:
58:4a:b8:07:79:68:e9:b8:fe:d8:d7:b9:77:46:9a:
3e:cb:b9:46:ac:3e:e6:8e:5b:57:58:80:de:25:f8:
dd:c2:01:8e:3d:3e:ca:88:21:74:f1:08:c8:49:83:
a0:31:cc:46:d8:ea:d0:b4:5a:9f:0a:c2:31:89:22:
06:9c:25:a9:98:a9:68:28:f7:4f:64:2a:fc:b1:8d:
01:4e:e4:d7:a2:d1:ad:27:87:a5:50:06:eb:cf:b5:
59:d1:c7:20:22:cd:c3:09:a1:6f:b5:52:f4:94:b7:
cb:d3:ff:86:3b:44:ee:8a:ee:43:fe:b9:24:2e:fd:
c6:19:6d:25:78:ce:43:10:e3:d1:12:d2:74:fb:a3:
eb:f5:4f:55:18:04:e3:83:5f:12:fb:09:7d:2a:fd:
0d:86:57:13:3b:05:57:01:a6:fb:26:c7:ab:93:b8:
2a:e9:e8:33:d8:79:3d:8b:1d:08:26:e8:ed:5a:e1:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:90:68:98:A5:6E:B2:F2:23:26:67:27:69:69:05:49:53:D8:47:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB597BAF81711EFAF051A94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d1:a9:18:e8:9b:5b:7a:c4:14:1f:17:b5:4c:b4:d9:26:1f:
66:e9:56:af:1a:30:64:6d:6a:c3:d0:90:cf:b7:9b:5d:4d:92:
10:d0:e5:b4:46:97:2a:e5:24:28:00:8d:14:bf:75:77:20:2e:
2b:5d:ea:73:74:a1:bb:f9:7a:b4:62:9b:e4:e1:d4:01:6c:06:
c0:26:d6:f5:9b:53:64:2d:3d:2c:6e:c6:64:c2:b7:8a:90:6b:
88:35:fc:5c:8b:7e:67:c0:18:27:ac:9d:b8:4d:ad:d2:85:ad:
24:27:af:5e:e5:0e:95:be:38:7c:e5:20:78:18:95:28:bd:71:
07:82:ec:ae:d0:c0:f8:57:9c:9e:b8:fb:94:33:93:b4:1b:65:
69:eb:4a:64:f8:6c:5d:d4:a5:33:e7:e2:5e:5d:ce:1c:ed:db:
9a:1a:1b:a3:3d:3e:bf:3d:aa:ac:81:76:d1:e4:b0:5e:8f:25:
27:e5:5c:e6:5d:05:2c:23:eb:4e:95:ff:68:5a:4c:50:18:90:
17:df:01:13:4a:80:a6:6f:28:a1:06:39:f0:8c:bf:9a:cb:d9:
c8:a8:b1:17:4b:3a:dc:29:74:e7:89:e7:82:3c:56:51:28:44:
e4:26:ff:90:6b:a2:b6:18:df:6d:e6:70:68:fb:62:c6:ea:c2:
25:e1:41:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:57:18 2025 by rpki-client