Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF55446FD8D11EFB9DE967F762E951A.roa
File: BBF55446FD8D11EFB9DE967F762E951A.roa (raw, json)
Hash identifier: nT5PWMaAu2X44XRqZ1Eh3ucvr8rqqz7K9aUPXGE5X50=
Subject key identifier: 97:88:32:5D:96:65:4C:CB:9B:75:4B:96:50:62:A4:99:EE:A3:30:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017335
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF55446FD8D11EFB9DE967F762E951A.roa
Signing time: Mon 10 Mar 2025 08:57:46 +0000
ROA not before: Mon 10 Mar 2025 08:57:42 +0000
ROA not after: Sun 30 Mar 2025 08:57:42 +0000
asID: 57043
IP address blocks: 154.193.129.0/24 maxlen: 24
154.193.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95029 (0x17335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 08:57:42 2025 GMT
Not After : Mar 30 08:57:42 2025 GMT
Subject: CN=67cea98a-8617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:68:9c:90:27:96:a4:c4:20:65:9c:d7:d4:
af:1a:74:f8:84:b4:98:93:52:66:71:07:60:ce:ee:
6a:5e:0a:5e:eb:07:b5:5e:09:29:e8:9b:6a:31:86:
b8:15:ee:69:b1:50:1f:a2:09:7a:68:8f:5e:50:e0:
2a:3d:21:7b:70:07:16:c0:14:dc:32:82:3b:c4:14:
8a:83:f9:b9:cb:00:84:ec:d3:ab:1d:21:de:7d:e5:
b9:02:e6:81:9a:b3:d3:32:a5:e5:ff:48:33:c9:37:
a2:85:51:2c:3c:b0:01:1a:8e:36:8c:e6:dd:56:2c:
2d:5a:5b:a4:06:96:af:65:91:38:8a:13:c1:69:97:
30:c4:80:f5:8f:36:81:32:f0:12:9a:bc:56:19:62:
0d:2c:a4:69:99:78:fe:76:77:e8:37:2f:a5:34:38:
62:dd:24:cc:93:3e:eb:bf:a5:b9:a1:68:49:51:f8:
e8:e6:07:7c:99:9b:49:4b:b9:9c:0f:bf:1d:ea:44:
8b:c8:45:a0:ba:5f:61:56:62:75:3c:6d:67:6b:7b:
1c:d1:3e:b2:01:5d:21:fd:29:bd:7e:5e:64:d5:46:
e2:cf:3a:f3:6d:13:e4:f6:78:3d:29:e9:1f:18:41:
a9:be:87:fe:5b:07:3f:76:e3:77:eb:c2:32:63:56:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:88:32:5D:96:65:4C:CB:9B:75:4B:96:50:62:A4:99:EE:A3:30:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF55446FD8D11EFB9DE967F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.129.0/24
154.193.131.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ae:a4:51:35:38:87:54:8a:31:3e:64:f5:be:4a:dd:b0:5b:
36:aa:c4:4c:fb:39:e5:55:c2:30:32:11:63:4a:b2:d6:f8:30:
95:de:fe:69:5d:45:0c:d0:54:8c:4f:81:a4:bc:03:d7:14:40:
cf:e9:79:e5:65:41:33:31:72:17:c5:4e:f4:30:50:40:36:74:
90:86:b1:8c:62:07:fb:2c:24:40:2a:9e:87:b9:70:f5:57:be:
08:39:3e:70:59:09:7e:6c:ab:39:48:12:0d:c8:ed:f6:2e:45:
56:ad:84:91:b2:51:93:87:95:4a:66:9a:03:d6:37:6a:22:4c:
c8:9e:8d:fe:eb:6f:a0:4d:8e:3b:b0:6a:10:bd:57:f7:1e:8f:
07:64:22:d3:06:2a:95:9e:bb:37:26:55:07:fd:19:a3:11:42:
df:01:78:4c:bc:a9:f3:1d:cc:81:24:a0:69:21:3b:12:93:93:
ea:a0:7b:6e:dd:ba:ac:00:56:c1:80:7e:79:a4:41:68:3a:4a:
2a:02:d6:9f:e5:77:a9:66:56:f2:53:79:01:fc:67:eb:66:27:
b6:03:4e:b3:a1:bd:46:76:69:d9:e3:5c:51:f5:05:cf:8e:34:
ec:f1:b9:b6:7d:d3:77:77:f0:37:33:48:20:26:47:3b:7d:d1:
ca:93:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:28:17 2025 by rpki-client