Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C413A8B8F1D411EFB0F2AB63762E951A.roa
File: C413A8B8F1D411EFB0F2AB63762E951A.roa (raw, json)
Hash identifier: weFMcMRgAABYEAZv+CQBiJbd8JheA+Q/W2zR+D6USnE=
Subject key identifier: 85:85:F7:54:64:55:76:6B:5A:60:2B:4C:50:7D:E5:88:5D:A8:E1:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C413A8B8F1D411EFB0F2AB63762E951A.roa
Signing time: Sun 23 Feb 2025 10:56:00 +0000
ROA not before: Sun 23 Feb 2025 10:55:56 +0000
ROA not after: Wed 26 Mar 2025 10:55:56 +0000
asID: 8796
IP address blocks: 154.201.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88897 (0x15b41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 10:55:56 2025 GMT
Not After : Mar 26 10:55:56 2025 GMT
Subject: CN=67bafec0-4909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:77:26:0d:29:9f:cb:ac:93:67:c3:79:d2:
9a:6f:2d:a5:4e:10:db:8c:bd:84:f6:c6:73:1a:db:
be:46:3a:0f:4a:3b:71:af:b4:ab:07:38:6b:d3:ce:
2b:0b:c0:aa:bc:d2:c5:01:cb:89:9c:f8:2e:bd:96:
da:e2:d8:e2:47:8f:8e:92:5c:e3:f6:0b:ed:24:58:
ca:39:07:46:82:7b:22:3c:c0:ed:e0:51:4a:e0:79:
11:f9:d3:b3:14:ab:57:4d:1e:91:17:a3:05:a2:04:
2d:10:6c:07:3c:d4:e2:e2:76:08:a4:f8:d7:0b:50:
ae:69:9e:22:a8:13:9d:05:90:66:ff:bf:e7:39:5d:
d7:0a:0c:b0:f7:c4:1c:15:f9:71:aa:25:5d:5e:4c:
d2:18:01:73:dc:84:d9:e8:7e:ab:c8:a0:f8:e8:78:
07:fe:7d:17:66:71:41:4c:3c:62:21:ab:e8:00:5d:
7d:10:67:17:ef:ce:e5:bf:39:18:19:81:93:14:11:
5e:5a:9a:a9:7c:9f:6e:57:2b:b3:de:79:5a:60:b3:
a4:12:2b:65:5a:4c:85:49:8b:c6:f5:9d:3c:4d:4b:
e1:cc:1f:8c:66:9f:0a:78:3e:5b:48:41:2c:65:67:
a5:94:b8:9f:c5:f1:09:47:b7:e4:18:00:11:36:c0:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:85:F7:54:64:55:76:6B:5A:60:2B:4C:50:7D:E5:88:5D:A8:E1:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C413A8B8F1D411EFB0F2AB63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:0f:ef:0d:53:b9:7c:e0:d6:76:71:1a:72:a3:e3:a3:5a:2e:
8e:b8:6b:fa:a8:22:94:88:1b:92:bc:a0:21:4d:b3:49:be:05:
ae:bf:71:8f:fc:7e:c8:6b:21:6d:70:17:ad:6d:c4:8e:28:52:
bd:79:af:31:4c:8b:00:6a:0d:36:8f:60:90:6f:8a:ac:d6:1a:
5e:02:2d:e2:3e:f1:26:f8:57:87:51:fd:99:a7:dc:9f:2a:b8:
b5:55:29:7f:48:de:e5:76:1a:18:ef:24:83:a8:63:29:e3:c9:
90:16:97:17:a7:2c:9d:98:a6:2f:1c:d0:80:f3:4b:29:b5:b0:
e0:12:ca:5f:1c:3e:ec:d6:5e:3f:b3:ff:4b:e1:ac:62:59:ef:
4d:0c:61:9f:bb:49:10:e4:e9:33:16:35:69:90:38:3a:f6:b7:
aa:fa:c2:be:9c:70:1b:8b:2e:12:b9:bb:03:62:1c:ea:8e:e8:
4d:75:81:ed:32:53:2d:cd:c9:db:b8:35:14:ef:3e:e3:8d:48:
77:2f:6e:10:66:1b:7d:a6:24:b4:51:9e:55:25:a5:e3:e7:68:
9c:73:12:96:69:10:ca:52:65:e1:a6:f1:d3:9d:0e:05:36:59:
93:3a:ce:63:7a:06:15:39:dd:4e:5e:a1:03:04:d6:fa:15:43:
22:b3:db:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:00:41 2025 by rpki-client