Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C12A6278F06611EF88F452B0762E951A.roa
File: C12A6278F06611EF88F452B0762E951A.roa (raw, json)
Hash identifier: v8y17a9VfXUjKUjiH+EFEwF9yw9lmn/oHtR6JRLsp0g=
Subject key identifier: C9:97:61:37:FC:69:5D:7B:1D:59:4E:88:00:AD:B0:9B:76:DD:B3:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0159D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C12A6278F06611EF88F452B0762E951A.roa
Signing time: Fri 21 Feb 2025 15:15:59 +0000
ROA not before: Fri 21 Feb 2025 15:15:55 +0000
ROA not after: Thu 27 Mar 2025 15:15:55 +0000
asID: 18779
IP address blocks: 154.206.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88528 (0x159d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 15:15:55 2025 GMT
Not After : Mar 27 15:15:55 2025 GMT
Subject: CN=67b898af-7f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:28:14:65:a7:3a:cf:5b:9b:65:14:1f:55:
61:64:3c:cb:7a:a6:88:5d:39:f9:fb:4c:3d:ba:b8:
d7:c9:d1:c3:cb:bc:3e:15:3e:bb:ac:26:9d:f9:2f:
cc:66:5d:ad:f8:dd:7c:a5:31:43:24:f1:97:c7:d1:
3f:56:a0:73:14:ea:84:a7:1b:62:3b:29:92:46:9a:
59:40:17:46:18:f3:06:25:3a:0f:0d:b5:21:10:3d:
4a:8b:9d:4b:bd:29:af:c6:0a:48:3e:0c:c3:6d:0d:
c5:09:d7:2e:6a:1c:3f:1b:d4:01:01:fe:d9:c5:2d:
01:a1:97:99:ca:e1:50:b3:7e:92:cb:96:d8:fb:a2:
d0:e9:3c:fb:96:9f:0b:fe:67:8c:49:c1:83:a3:fd:
9f:f3:da:46:bd:6d:b0:ac:6c:59:22:59:40:fa:c2:
d9:ec:3e:41:61:46:72:08:23:5f:fe:1b:1e:f1:11:
30:d6:79:79:0a:77:eb:47:bc:9f:6c:d4:40:ca:6e:
13:1d:bc:65:a3:3a:87:99:e6:17:75:e4:e1:41:7c:
f2:af:e0:2e:a2:8c:91:dc:7e:27:d1:85:5f:07:c4:
3a:70:5e:ba:87:d1:47:ea:c9:c2:6f:a8:91:16:8d:
9e:fc:b2:f0:d6:f7:29:4d:33:48:58:27:5f:39:a2:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:61:37:FC:69:5D:7B:1D:59:4E:88:00:AD:B0:9B:76:DD:B3:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C12A6278F06611EF88F452B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.20.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ee:74:e7:0e:6b:4a:4e:d2:d4:a2:f5:d5:d3:65:08:4d:0a:
db:c8:2d:3d:ef:93:c2:47:66:9b:4f:32:74:6b:e5:d2:f2:1b:
7d:74:67:d8:92:26:86:66:e8:82:f9:6a:23:29:f3:ed:cc:27:
d0:7a:e1:ea:6c:98:7e:ae:ea:75:be:9d:45:08:f7:41:bb:88:
3a:7e:68:50:b2:ba:df:86:d4:30:3e:8e:3e:81:65:cb:f9:8f:
5d:96:0d:3b:36:98:33:cb:13:50:4c:e2:2e:48:47:fb:34:5a:
8e:6d:88:34:29:ae:c3:90:48:bb:7f:a6:98:60:e3:59:4e:3e:
01:6a:77:4b:78:86:e1:e6:da:c7:0b:ad:a5:c0:20:98:28:3b:
61:66:16:c4:31:5a:c0:f6:ab:60:b3:ef:ce:a1:82:36:2e:72:
eb:bc:83:08:0e:1f:a3:c2:63:1c:45:18:08:a6:c6:05:41:9b:
bb:15:fa:9e:dc:8d:92:34:e2:9a:9d:82:3a:11:5f:9a:a4:cc:
74:7f:f0:ec:e6:3d:3a:d2:8e:56:f8:56:0a:f0:93:39:53:ea:
52:ff:37:d9:6c:a4:81:f3:4b:a0:08:e1:e3:aa:0e:ec:b5:5c:
70:f7:88:e7:06:f2:c0:2e:5a:b0:66:48:19:8c:dc:61:e2:d3:
08:d5:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:55:00 2025 by rpki-client