Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF68E308F68B11EFA1CD0195762E951A.roa
File: BF68E308F68B11EFA1CD0195762E951A.roa (raw, json)
Hash identifier: fZavHCh25P+q7bHCMVG8siTUujcfnGU472TTpCyv+oI=
Subject key identifier: A3:00:4A:50:B8:AE:9E:E1:55:16:46:D6:6A:13:F2:21:CC:DE:DD:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF68E308F68B11EFA1CD0195762E951A.roa
Signing time: Sat 01 Mar 2025 10:55:54 +0000
ROA not before: Sat 01 Mar 2025 10:55:51 +0000
ROA not after: Mon 31 Mar 2025 10:55:51 +0000
asID: 202656
IP address blocks: 154.222.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93675 (0x16deb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 10:55:51 2025 GMT
Not After : Mar 31 10:55:51 2025 GMT
Subject: CN=67c2e7ba-ac8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:57:9c:fa:e8:05:e0:71:05:76:33:4f:ed:
34:6a:a2:67:12:cd:51:60:33:3e:c3:40:41:a2:e1:
56:24:62:a6:94:5f:96:b7:46:be:b6:ff:56:dc:f2:
e2:97:e4:69:1f:1d:94:f6:d6:39:9e:ee:41:8d:39:
1c:cf:85:bb:c4:c4:ff:b2:10:e2:86:38:a8:42:1b:
aa:07:26:a0:83:76:d9:04:8a:83:1f:b3:17:8a:37:
e4:37:cc:67:5e:aa:9d:13:9b:d6:11:77:20:a6:49:
13:d8:5a:7e:44:4f:fd:b9:cf:6e:35:24:42:f2:fc:
25:1d:e8:c5:3b:09:c2:f5:a1:a1:96:c7:11:f3:29:
1b:f6:3f:54:32:90:74:4f:bc:86:2d:c9:f2:41:ba:
e6:7a:00:bf:21:4c:09:f9:ae:eb:ac:ea:d0:41:6c:
ff:4c:c4:2a:4b:31:59:14:8b:02:dd:0e:b5:b1:ee:
8a:f0:5a:ea:69:14:c0:0a:8f:e1:f6:13:d6:9c:9d:
78:a6:a1:0d:52:88:11:14:5a:47:17:ce:1a:d3:16:
f7:6b:4b:e9:a3:56:62:ef:d0:ae:e7:37:03:f0:e2:
d8:cd:00:82:27:91:5c:1d:4d:14:b6:27:18:4b:a9:
d4:95:b1:d0:22:66:67:ce:1a:d8:6f:63:d5:ca:fc:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:4A:50:B8:AE:9E:E1:55:16:46:D6:6A:13:F2:21:CC:DE:DD:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF68E308F68B11EFA1CD0195762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.44.0/24
Signature Algorithm: sha256WithRSAEncryption
44:91:9e:84:16:ff:2a:cb:5e:99:30:70:33:50:f9:65:7a:b4:
0c:7b:4e:0f:87:6b:a8:e8:0d:07:23:e6:79:7f:03:b0:a6:d3:
b2:0f:f3:62:ea:7b:cf:ea:48:4d:81:ad:2d:df:23:4c:92:bf:
53:45:60:83:37:19:d7:14:ba:9e:12:a7:be:22:c3:37:6e:4c:
af:68:b0:1b:91:19:af:d6:62:bb:4e:52:c2:c8:eb:fe:40:2e:
e8:09:09:7a:90:bd:bd:74:9a:0e:81:9c:1d:55:9b:32:ce:13:
25:4d:24:e6:7f:8c:19:d9:1a:5c:30:a6:30:96:a3:63:77:7c:
52:a1:b2:f3:f2:0f:f0:40:a6:3f:1b:64:13:3f:2f:82:dc:62:
22:ab:96:0d:07:22:fa:b1:1a:8d:bf:6f:ee:b7:c5:d0:c1:ef:
90:a5:42:77:31:90:ba:23:bb:1a:3a:84:4d:dc:66:5b:12:aa:
4c:22:dc:ad:1c:7d:80:03:bb:eb:26:cb:03:55:c1:51:1b:e2:
6b:b3:d5:65:a6:44:83:e7:a1:d8:c8:b0:30:85:89:ea:a2:23:
9d:c2:1b:81:00:d0:0b:fb:cf:c3:6a:92:bb:45:e3:ea:ae:cc:
0c:8c:6c:1b:f1:d4:08:5a:73:a4:53:fc:d6:50:3c:85:f5:29:
15:2e:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:34:36 2025 by rpki-client