Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C836A4B0F5B511EF9030925C762E951A.roa
File: C836A4B0F5B511EF9030925C762E951A.roa (raw, json)
Hash identifier: SeqXUqdgq3kovUnyxuRoT+ErAIp5Wx0Gp+1l+1B4z6E=
Subject key identifier: 8E:C3:52:9C:C8:0E:42:34:E1:AA:9C:C4:49:07:78:38:E8:D1:2C:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C836A4B0F5B511EF9030925C762E951A.roa
Signing time: Fri 28 Feb 2025 09:24:17 +0000
ROA not before: Fri 28 Feb 2025 09:24:13 +0000
ROA not after: Mon 31 Mar 2025 09:24:13 +0000
asID: 395793
IP address blocks: 154.200.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92740 (0x16a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:24:13 2025 GMT
Not After : Mar 31 09:24:13 2025 GMT
Subject: CN=67c180c1-450d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:9f:21:16:b4:37:54:12:a1:d5:35:92:df:
07:aa:f1:33:e4:8a:66:b9:08:ee:87:1b:04:36:25:
2a:9c:ce:8b:7c:fb:d6:a0:df:48:5b:15:5b:a9:98:
96:e2:bf:71:17:87:e2:7f:d8:92:1b:ff:66:d8:b1:
55:84:7f:40:42:e4:66:37:a4:8d:07:22:18:47:a7:
a4:34:86:35:c0:10:8c:cf:9d:50:84:0e:b7:e7:8a:
54:64:c1:0b:0d:94:76:40:8c:ae:6f:c0:4c:e1:9e:
1f:7b:9a:72:8a:15:80:8d:ff:83:ba:9e:d4:a5:8e:
49:df:8a:5d:89:80:69:0f:38:f6:56:d9:39:d7:a9:
0a:36:31:b7:d7:f8:b2:d3:94:ec:ac:56:a6:92:02:
b1:e8:67:82:4a:ce:0e:cf:cd:6f:c4:31:f9:e2:43:
e2:63:55:3d:81:3f:8b:d0:b9:82:cc:cf:78:54:bb:
64:51:c8:a3:48:44:67:59:c6:31:27:01:6a:24:69:
68:8c:b8:c5:d6:1f:73:74:50:84:2b:5b:ca:ca:6e:
94:47:a0:9c:e8:15:b8:07:81:34:71:ba:c1:48:b6:
ad:24:3f:05:0f:f5:b9:d2:d0:8b:38:dd:e7:a8:08:
00:da:7b:26:46:4b:ed:90:e5:ad:a1:bf:cf:35:ed:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C3:52:9C:C8:0E:42:34:E1:AA:9C:C4:49:07:78:38:E8:D1:2C:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C836A4B0F5B511EF9030925C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
93:22:cf:e8:1c:ea:eb:d9:86:fd:5c:dc:97:cf:e5:65:af:f2:
5b:5d:f3:cc:6c:96:a5:36:c8:e1:43:1e:3b:ea:c7:2b:45:6b:
98:a3:0d:45:84:7c:c1:f3:6b:52:d5:52:d5:0e:81:da:dc:e9:
41:e6:3f:8a:0c:d1:19:c1:33:1d:a7:56:59:e0:e6:f6:89:fc:
0e:9c:20:44:0e:0d:22:f2:93:3a:2a:ec:8e:41:91:a1:49:0c:
f7:db:a0:ea:ac:46:44:be:30:02:bf:9c:d9:98:5f:d0:7c:c2:
b1:d5:86:31:0c:c7:f1:69:c2:a1:a9:68:dc:2a:0b:34:0f:40:
86:ea:35:ce:53:d1:68:99:a5:7b:c7:bd:85:3d:33:ad:89:5e:
85:7e:b2:11:43:21:2c:70:1e:f2:0a:79:c7:04:dd:24:aa:95:
61:e0:01:9f:c1:66:20:1b:2d:ff:f4:06:9a:f0:22:a1:60:b1:
1a:4c:be:8c:95:08:3a:52:4e:3f:f3:3b:ba:b0:96:11:fe:e9:
dc:50:4e:d3:73:27:2e:b8:22:d4:67:6c:ae:ae:62:57:bc:07:
c2:14:3a:dc:03:bb:0f:bd:5b:60:57:e1:04:d5:5a:a0:b1:bf:
55:ee:13:7c:17:7c:8b:39:64:c6:db:de:4e:5f:ad:2d:f3:d9:
1c:f1:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:07:52 2025 by rpki-client