Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8A8D20EF62011EF96F5EDAF762E951A.roa
File: C8A8D20EF62011EF96F5EDAF762E951A.roa (raw, json)
Hash identifier: jKgnQmXh5lhQNypN8W5rZjn0laoB2VDqxwOBy0ojgYI=
Subject key identifier: 9E:57:A2:A4:21:61:91:56:7E:15:F3:17:58:44:04:50:FA:8D:80:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8A8D20EF62011EF96F5EDAF762E951A.roa
Signing time: Fri 28 Feb 2025 22:10:14 +0000
ROA not before: Fri 28 Feb 2025 22:10:10 +0000
ROA not after: Wed 26 Mar 2025 22:10:10 +0000
asID: 62240
IP address blocks: 154.194.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93305 (0x16c79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:10:10 2025 GMT
Not After : Mar 26 22:10:10 2025 GMT
Subject: CN=67c23446-05ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:75:bb:49:09:e4:50:38:cc:ab:93:64:33:
4c:b9:0a:8c:4f:b1:8a:5a:2a:cb:67:ea:b8:6a:9a:
76:18:b4:e3:97:20:05:d8:85:27:5f:d5:b8:ab:76:
84:c5:6d:0e:ea:66:e8:0c:97:b0:2b:91:a0:c5:db:
3f:23:4c:7f:f6:dc:f6:de:b1:44:b7:4d:32:a4:33:
c1:ed:d8:4d:23:cd:73:30:8c:7d:84:5e:5f:c1:f7:
72:dd:3e:ee:0c:9c:30:af:b1:6d:7a:3a:06:4a:f6:
b2:8b:29:d0:28:47:bd:36:97:45:93:19:ac:20:5d:
52:67:45:bd:f0:10:69:65:d5:b0:1f:48:ab:82:7c:
f4:9d:3f:ea:d1:7d:f3:b2:27:14:d2:01:c5:6d:54:
84:f5:ee:1e:8b:15:2a:cd:82:0a:84:ec:6a:c1:f5:
6b:7e:aa:47:8e:15:7d:03:5d:d2:27:0d:5c:24:33:
aa:40:7f:f3:b6:fd:00:7b:dd:36:39:c5:3f:60:51:
70:9d:d8:ef:3c:ee:3c:31:ce:56:cf:b2:3c:7c:9d:
02:d4:1b:7b:75:bb:dd:2e:8d:8b:45:50:61:a3:4d:
65:a9:d7:58:77:7d:99:80:30:37:3d:2f:84:7f:18:
a3:16:36:c8:8b:bf:ab:46:90:b6:59:d5:2a:2a:7c:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:57:A2:A4:21:61:91:56:7E:15:F3:17:58:44:04:50:FA:8D:80:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8A8D20EF62011EF96F5EDAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.113.0/24
Signature Algorithm: sha256WithRSAEncryption
44:77:7b:20:ca:ce:a9:bc:89:10:0d:4d:cf:81:48:03:55:d3:
0b:01:de:aa:bc:5c:5a:24:7b:7b:e1:99:61:ad:44:9b:63:4e:
30:42:d1:34:2d:bb:cc:d9:e6:f9:6c:da:20:f3:6f:01:db:29:
5a:f8:e3:3c:cc:b9:2a:e9:2a:ab:05:40:07:e5:d5:ca:8e:48:
ac:b6:c6:7b:63:e3:bc:72:d1:79:ae:32:25:bd:0e:f4:42:10:
20:38:ec:2b:ef:8d:50:c4:f9:2e:17:0b:1a:3c:59:88:96:4f:
ae:00:19:4f:67:84:60:d2:bf:76:22:e4:f4:ee:f6:97:3c:ca:
ef:f2:16:13:7d:f9:8d:a0:b4:16:c3:1f:2a:b8:df:57:6b:17:
f1:cd:32:a8:4e:60:91:5d:6b:82:1c:67:30:92:e0:19:b3:4a:
83:e8:e6:07:3a:e3:33:d6:da:a6:a1:f7:41:09:64:7b:42:ae:
67:60:c5:b1:3d:be:a6:7e:60:cd:a7:83:31:a6:6e:a2:6d:ec:
6a:20:bb:4b:86:df:ce:b8:4f:ba:3a:0d:72:89:51:0d:db:50:
77:73:34:c6:a5:d5:40:5c:4d:68:15:58:52:5c:0a:e2:1d:86:
d2:c6:2d:45:6b:48:a5:0d:cb:20:46:95:e9:14:61:16:7d:49:
a8:b6:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:56:03 2025 by rpki-client