Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7A6BB4AF1D511EFA4F46C6B762E951A.roa
File: C7A6BB4AF1D511EFA4F46C6B762E951A.roa (raw, json)
Hash identifier: TWemwkDNSRBOmKtObygGf+mzs+747rVHlLalG7sraPY=
Subject key identifier: E7:15:7F:53:5A:25:A7:32:62:F5:6C:55:3E:55:97:D0:27:0F:7D:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7A6BB4AF1D511EFA4F46C6B762E951A.roa
Signing time: Sun 23 Feb 2025 11:03:15 +0000
ROA not before: Sun 23 Feb 2025 11:03:12 +0000
ROA not after: Wed 26 Mar 2025 11:03:12 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88903 (0x15b47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 11:03:12 2025 GMT
Not After : Mar 26 11:03:12 2025 GMT
Subject: CN=67bb0073-ddc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:3b:be:f3:d1:11:1d:74:5a:b3:d7:01:ba:
fc:ff:e6:9b:b4:c6:69:52:85:54:d0:9e:9c:11:6e:
f7:46:dc:bf:78:27:80:34:f9:25:df:a5:44:99:f9:
22:bc:10:54:f3:e2:6d:37:e8:78:5e:5c:39:3f:81:
0c:9c:b3:67:b9:a6:b5:ef:ec:6f:f1:26:35:9a:08:
9f:a9:9e:b0:f5:fc:c2:a2:50:ec:85:ec:f8:85:da:
0d:0e:81:d1:8f:f8:b9:7d:db:b2:67:8e:6b:25:82:
ef:c2:d9:6c:44:e5:64:98:6c:c4:07:86:08:18:03:
eb:3b:2a:1a:9b:0f:6d:74:f4:8f:b0:94:b5:59:2f:
7d:35:10:42:5e:1e:41:4c:1d:e9:93:0a:73:01:a3:
83:53:5d:76:3c:5c:9b:da:9e:ee:80:5b:83:be:a7:
e4:09:a5:2f:c3:31:7a:69:18:e4:34:5a:8e:be:26:
65:36:19:74:c8:99:d9:97:15:04:ee:59:4f:06:86:
88:6f:80:e7:b8:ae:fc:42:7e:8b:92:b6:59:69:fe:
e1:4a:21:33:fe:d3:0f:b4:fc:a6:a3:70:f7:70:6f:
7b:63:67:3e:1d:c0:0c:9c:68:9a:b8:a0:7b:9b:16:
70:7e:09:30:11:7b:01:73:6b:ed:6b:d2:53:d1:7a:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:15:7F:53:5A:25:A7:32:62:F5:6C:55:3E:55:97:D0:27:0F:7D:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7A6BB4AF1D511EFA4F46C6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
69:63:a2:f9:82:ca:ff:77:4b:ef:97:b4:3a:af:e8:53:62:8d:
45:01:fe:04:7d:28:af:d6:9d:54:0b:5e:6d:e4:95:90:68:ce:
1a:d0:f7:f8:1b:86:28:06:82:dc:0a:6e:c4:80:bf:17:de:73:
41:b7:ca:b6:76:4a:e8:39:4f:9c:1f:1e:8e:2a:d1:43:da:73:
87:05:4b:c4:c0:3e:bd:0a:d4:27:d5:e5:4e:f5:b3:fb:99:3d:
30:6a:40:f1:60:04:ff:ac:04:c6:cc:22:1f:dd:69:b9:4e:c6:
09:d7:64:2d:df:47:08:a3:8e:a9:c0:91:c5:ac:93:61:8e:70:
e9:a0:ee:33:55:ec:70:32:e4:77:9a:73:37:7e:5b:26:e2:ce:
7a:75:b7:a6:9b:de:81:17:13:36:de:e5:01:47:a9:a4:e5:fe:
e1:9a:c0:22:1b:c0:65:d1:d8:86:d6:15:18:11:6a:ce:7a:fa:
92:78:44:18:b8:cb:bf:f0:fe:9e:bf:b9:e3:b6:31:90:1a:16:
95:2c:dc:9f:6a:2b:12:09:62:16:5f:d4:97:71:4b:e9:91:7a:
6c:05:cf:66:1d:e5:e6:aa:ea:d1:94:bd:db:8f:4e:92:96:93:
c5:6a:19:cd:af:3b:5f:a7:96:83:68:4e:29:49:dc:d8:63:67:
37:06:81:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:49:42 2025 by rpki-client