Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4CDA3C0F69911EFB6282474762E951A.roa
File: C4CDA3C0F69911EFB6282474762E951A.roa (raw, json)
Hash identifier: hTIg4nMbMo3ccwAzuteyKnMmyDBURjkLPUWeREAcA7Y=
Subject key identifier: 6A:8E:C3:1D:89:28:92:E0:B3:0B:03:97:38:21:18:69:35:A8:AF:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4CDA3C0F69911EFB6282474762E951A.roa
Signing time: Sat 01 Mar 2025 12:36:16 +0000
ROA not before: Sat 01 Mar 2025 12:36:13 +0000
ROA not after: Wed 26 Mar 2025 12:36:13 +0000
asID: 62240
IP address blocks: 154.194.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93766 (0x16e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:36:13 2025 GMT
Not After : Mar 26 12:36:13 2025 GMT
Subject: CN=67c2ff40-ec61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:06:1c:e6:f9:23:bd:4f:bd:af:a7:7d:38:34:
c0:ed:49:f6:b8:fc:74:6d:a1:8b:dd:43:01:de:26:
f0:24:03:e4:e6:c4:d4:da:b8:78:52:e7:bd:db:3b:
88:f5:e4:09:3c:2a:dd:b0:6e:00:86:b6:c2:3c:46:
e3:97:02:f0:92:d9:27:06:9b:c0:3c:9f:d7:f1:fa:
fe:6f:27:64:b7:f9:91:7c:39:0f:90:1a:2a:b3:7e:
ec:6c:51:db:48:34:c6:5a:66:8c:d3:65:92:35:d7:
58:ee:3c:df:a3:bc:04:0c:80:31:cd:08:59:fb:c6:
f1:79:01:11:c1:a3:78:ba:b7:ac:78:d2:65:94:ca:
b5:c7:11:8b:3e:fa:67:ed:f3:19:f2:69:54:e0:0d:
c7:71:96:1f:d8:b2:73:e6:2b:33:27:75:aa:20:7b:
1a:cf:b8:a1:59:69:4b:23:33:a0:7d:ad:d0:ca:f5:
41:c7:5e:47:f9:3b:c5:b5:f1:1d:09:89:95:a4:b2:
44:4c:6d:ff:81:dc:e5:fc:e2:df:e6:38:18:c5:7c:
8c:4b:fb:1f:49:92:17:6b:40:df:8c:69:e6:ba:74:
76:93:fe:4c:f5:26:8c:e7:d2:e1:6a:f6:77:a7:d5:
ce:97:5b:3d:d9:31:a1:ba:fc:ec:f9:8e:50:a1:f1:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:C3:1D:89:28:92:E0:B3:0B:03:97:38:21:18:69:35:A8:AF:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4CDA3C0F69911EFB6282474762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.103.0/24
Signature Algorithm: sha256WithRSAEncryption
74:07:f0:9d:f3:d7:da:27:13:cd:5d:00:e3:cf:6f:ae:cd:ba:
02:00:13:75:f9:f1:73:da:42:cc:dd:65:23:a8:4d:a0:86:d2:
25:93:70:3f:d5:8a:77:2c:24:99:c3:52:4d:00:8e:40:39:e2:
3f:3b:0a:9d:45:03:57:9b:62:5f:df:3d:ac:49:15:67:53:9c:
97:b7:65:66:0d:7b:08:8f:ae:43:24:1f:30:16:f2:99:23:da:
c3:05:38:fb:74:f2:db:4d:be:6f:06:f0:b2:73:84:51:42:b7:
07:d5:85:d6:1b:a9:64:91:32:55:05:66:5a:b4:26:d7:60:77:
8f:a1:21:d2:ea:3c:c9:7d:5e:fb:21:26:c9:75:70:a9:c3:65:
9e:4c:23:c1:e7:0c:9c:a6:8b:34:4c:9a:30:12:d9:ed:56:a2:
90:ea:a5:75:04:72:1c:66:84:8e:07:54:bf:d7:18:87:5c:a0:
f8:59:48:09:e4:97:28:20:97:0f:49:37:dc:11:ff:9e:c2:0c:
59:6d:22:cd:9b:13:98:d8:49:67:bd:e0:97:aa:ee:b9:36:6e:
c8:85:3e:f2:1f:89:b3:9a:ca:3b:39:ef:ac:2e:ea:1d:48:cf:
50:7a:3d:3f:03:f4:a5:10:53:20:4c:ba:ca:ea:1b:b4:69:75:
cb:6e:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:00:46 2025 by rpki-client