Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0EB843CF5E711EF983D66B2762E951A.roa
File: C0EB843CF5E711EF983D66B2762E951A.roa (raw, json)
Hash identifier: Pi27eLNbfHX9L0ftXjhGlW6tCr9s8F7/5gmlkTkLqPI=
Subject key identifier: BB:B2:85:C1:C8:F6:9F:C6:A2:33:D7:A0:B6:75:14:3F:B0:99:8C:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016BA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0EB843CF5E711EF983D66B2762E951A.roa
Signing time: Fri 28 Feb 2025 15:22:00 +0000
ROA not before: Fri 28 Feb 2025 15:21:56 +0000
ROA not after: Wed 26 Mar 2025 15:21:56 +0000
asID: 62240
IP address blocks: 154.194.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93096 (0x16ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 15:21:56 2025 GMT
Not After : Mar 26 15:21:56 2025 GMT
Subject: CN=67c1d497-dad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:2b:26:8d:c8:fc:f9:6b:5f:cc:e2:c0:58:
d6:63:af:5e:98:3f:dd:d2:22:59:8d:8f:fe:6b:72:
65:b9:8a:af:e1:df:44:39:0f:43:6f:37:59:14:81:
a5:ab:4b:92:b1:58:ae:27:19:05:97:e9:ff:d7:a7:
51:a4:34:72:a8:26:66:e3:d8:ea:f4:96:b1:45:aa:
1e:07:e3:aa:d3:36:a9:a3:bc:40:a4:fd:96:c8:fe:
39:04:2b:f6:5c:70:a2:37:25:6b:45:ea:b7:0b:b1:
67:0c:2e:86:96:63:86:1b:20:9e:82:39:e3:22:bf:
a0:64:56:d7:49:a5:4b:1a:96:5d:51:10:85:ed:5d:
e6:0a:c5:41:16:f8:33:9e:b7:09:34:eb:13:c0:aa:
74:cb:45:d7:c8:0c:a7:d6:27:d3:d3:72:0a:f3:a3:
0b:cb:c0:98:3e:b2:e8:bc:df:5d:bf:e2:0c:c9:4a:
d9:ff:94:48:3e:a6:67:75:15:4e:2d:38:44:45:8b:
41:fd:f7:0a:0e:ca:96:20:c9:ba:4a:f7:fa:75:67:
74:38:e2:85:05:a9:e0:05:fd:8d:57:f5:19:7d:3f:
b3:d8:ba:f9:f5:5f:92:56:db:fc:54:3f:53:c0:27:
c7:a6:ff:4f:11:0e:e2:8c:4e:50:b3:38:28:5d:a9:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B2:85:C1:C8:F6:9F:C6:A2:33:D7:A0:B6:75:14:3F:B0:99:8C:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0EB843CF5E711EF983D66B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:9d:53:f4:47:92:2a:d9:6f:6c:78:23:8b:bc:3f:b2:c7:07:
0e:d2:28:e3:ca:56:b6:78:a0:40:a5:8c:4e:28:9f:42:f9:24:
8c:0b:e5:1d:ef:21:d2:04:e4:c6:a7:ea:4a:69:bf:ae:0f:13:
c5:9c:c1:11:82:22:95:fa:84:a2:65:6c:63:4c:04:26:6a:a0:
f7:40:47:11:d1:54:d5:40:9c:e5:d9:6e:64:6a:09:95:d7:db:
65:d3:c8:ed:d0:57:23:58:16:16:da:ee:3a:7e:c9:c7:c6:91:
96:5f:82:79:ea:ed:58:f3:cb:af:95:7b:4f:27:fb:ea:c9:08:
b2:d3:eb:db:84:bd:3d:02:8a:02:75:8c:01:e4:d2:a8:28:4a:
74:94:6a:e1:6c:dd:5b:04:22:03:ab:c9:0a:e7:e0:39:d9:7c:
e3:26:6b:0c:95:70:41:01:69:fc:93:6c:a1:db:d0:25:38:68:
3e:1a:97:20:4a:7c:cc:60:f6:c3:63:40:fc:3e:85:fc:8c:4e:
af:e2:3e:9a:dc:6b:75:36:b4:22:f4:fb:df:1e:20:ab:ca:eb:
e9:e7:c8:18:43:52:49:6e:7b:28:2b:48:dc:d5:0f:b0:4f:d8:
ef:a5:07:1a:be:14:a9:f3:c0:25:5c:ed:e7:39:42:82:c7:41:
46:f8:57:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:11:03 2025 by rpki-client