Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCED9454F4E011EFBE9B13A6762E951A.roa
File: BCED9454F4E011EFBE9B13A6762E951A.roa (raw, json)
Hash identifier: wqP1EPDcnp2CtO4iiuNRXn+IicwXLLl1Hy13Zs7pzTI=
Subject key identifier: 39:74:F3:98:5B:3A:18:8A:E3:BE:B5:D3:55:59:9B:16:48:E1:A6:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCED9454F4E011EFBE9B13A6762E951A.roa
Signing time: Thu 27 Feb 2025 07:59:15 +0000
ROA not before: Thu 27 Feb 2025 07:59:11 +0000
ROA not after: Wed 26 Mar 2025 07:59:11 +0000
asID: 62240
IP address blocks: 154.195.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91847 (0x166c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:59:11 2025 GMT
Not After : Mar 26 07:59:11 2025 GMT
Subject: CN=67c01b53-df11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:bc:c4:1e:5c:95:4a:11:dd:15:7a:02:21:
3c:f6:82:3e:b0:52:c2:4b:55:2c:02:24:27:84:70:
0b:ba:ac:ab:a2:4e:f0:c2:ad:80:44:53:69:ca:88:
4d:5d:da:62:d5:a8:8b:88:42:fd:b1:95:bd:c6:ce:
6a:cc:81:f6:04:ee:29:57:58:ad:51:c6:cd:dd:8f:
ee:9d:66:85:81:64:89:88:d5:91:b1:39:f4:47:91:
03:6e:7f:2f:e8:c1:13:e5:a0:af:d6:91:b5:1f:55:
59:5b:6e:f3:dc:4d:52:8f:1d:b7:56:21:e4:f0:5b:
74:71:a3:d3:5a:d6:a5:16:f4:ae:fc:9e:39:ad:43:
df:9d:bb:72:0d:6a:b9:5a:48:6e:06:f8:4d:9b:5d:
3e:fd:3d:c6:7f:bc:ce:37:00:e2:71:0b:73:ac:0c:
04:40:14:f1:07:b7:4e:73:b4:1a:57:bf:8b:9f:df:
9b:db:59:a3:e6:f6:37:69:5d:ac:58:50:96:3c:50:
da:89:e1:23:92:55:de:be:d3:63:56:1f:30:00:b7:
4e:b2:a4:21:61:d2:23:74:bd:ad:09:0a:29:29:84:
f9:19:93:6a:db:67:60:3f:54:11:d6:df:4e:bd:2e:
6a:cd:bd:c8:fa:a9:82:7f:c5:60:39:a3:38:e7:6f:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:F3:98:5B:3A:18:8A:E3:BE:B5:D3:55:59:9B:16:48:E1:A6:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCED9454F4E011EFBE9B13A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.174.0/24
Signature Algorithm: sha256WithRSAEncryption
af:cd:61:10:56:bd:22:c9:3f:87:ab:c9:35:ae:65:ed:b7:e7:
ba:9b:bb:59:e2:7f:69:0b:81:16:a2:87:bc:a9:be:7c:b7:e5:
2c:d0:a4:47:cb:fd:02:08:f3:8b:f3:25:ee:5d:62:17:8b:90:
31:91:81:30:94:ec:9a:63:a5:c6:b9:b0:74:a2:43:3f:28:7e:
c0:a0:6c:a6:e3:66:93:b2:4a:53:00:9b:3a:7a:43:77:9c:8c:
b9:b9:45:1f:6b:7d:9a:f6:7d:47:97:16:d2:2a:83:85:ef:4c:
b7:7e:59:f7:41:62:32:2c:19:f2:56:45:df:0a:f5:08:b2:27:
a7:1b:1e:49:a9:c0:dd:ac:b1:21:73:1f:4c:48:c1:8f:e6:59:
d0:17:8d:3c:bb:08:5b:06:00:b6:a3:b0:3f:59:2e:8a:91:41:
53:0b:2e:99:dc:95:1f:b8:76:73:bb:ca:02:6f:53:d4:00:d6:
0f:24:f6:4f:1f:1e:99:5c:2a:aa:68:6a:2e:7d:f4:ed:c1:fe:
87:58:6a:b2:c1:a9:2a:32:0f:7a:15:50:d4:eb:e0:ec:7d:6d:
57:e3:b4:cd:21:be:01:07:64:44:9f:75:f3:1f:71:fc:90:43:
a8:4a:e9:e3:21:5c:e0:34:3d:e2:d0:bd:e0:e5:75:26:93:62:
c4:d5:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:36:52 2025 by rpki-client