Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C972C40AF4F011EFAF632794762E951A.roa
File: C972C40AF4F011EFAF632794762E951A.roa (raw, json)
Hash identifier: iG1vfMkEC6ZnFiLUp7ryRWn9DnJJELxGzrp/JqmeaIE=
Subject key identifier: C7:95:CD:87:6D:D2:EE:89:FC:06:A8:01:3D:BC:5F:DF:86:2B:C0:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01676C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C972C40AF4F011EFAF632794762E951A.roa
Signing time: Thu 27 Feb 2025 09:54:08 +0000
ROA not before: Thu 27 Feb 2025 09:54:03 +0000
ROA not after: Wed 26 Mar 2025 09:54:03 +0000
asID: 62240
IP address blocks: 154.196.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92012 (0x1676c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:54:03 2025 GMT
Not After : Mar 26 09:54:03 2025 GMT
Subject: CN=67c03640-a3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d6:09:d3:f9:4e:3d:52:9a:ce:75:ad:64:ef:
b9:43:6c:0e:e5:fc:a7:5b:fb:94:d5:d4:ea:48:34:
66:92:ce:f9:ec:71:91:5f:7f:81:18:d2:93:f6:3f:
2c:15:d3:df:74:28:5d:cb:c1:c6:94:63:ae:27:8e:
b5:74:1f:9f:b7:b7:02:e2:26:2e:00:72:28:b9:11:
4b:d4:01:de:42:8f:cd:48:be:c9:1b:f0:85:bd:f2:
2c:de:4c:06:7f:b2:e2:85:f3:96:d6:e1:b7:cf:ec:
c1:21:cf:a7:fe:d2:a1:12:0b:fc:07:ee:3b:ab:34:
43:5e:10:e0:b5:59:8e:96:47:dc:85:b5:e6:c5:cb:
99:95:94:b5:54:a1:57:8c:b7:38:91:11:06:fb:30:
d6:42:0f:25:95:af:0b:33:a0:01:01:56:8e:99:0a:
28:46:13:1a:9d:7d:88:12:93:83:e2:7c:66:fe:7d:
fc:2b:8f:1c:ee:32:e8:5a:12:56:31:30:10:77:73:
ea:56:6f:1e:7c:de:cc:f8:fa:bf:48:1a:a8:c5:65:
6a:5e:06:7e:ce:8a:9d:b1:ce:a5:2c:33:44:3e:83:
8e:fb:ab:c0:8d:c4:86:ac:4a:d6:97:9e:b2:54:2e:
1c:12:ed:72:29:43:bc:5b:49:c8:19:b4:b8:e7:b8:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:95:CD:87:6D:D2:EE:89:FC:06:A8:01:3D:BC:5F:DF:86:2B:C0:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C972C40AF4F011EFAF632794762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a6:86:a6:12:f2:96:40:c2:a4:24:8d:85:dd:9e:9f:64:fc:
ec:81:2d:7a:ef:a4:1c:08:71:a3:1b:9f:44:cd:b0:b7:58:d6:
26:1e:64:6d:23:71:79:38:1b:cd:3c:eb:4d:cc:f2:33:d1:e1:
8b:00:81:1b:fa:2d:61:b4:c0:fa:cc:59:9d:23:de:94:59:3d:
13:a2:e9:b6:91:b7:d2:ec:78:f2:61:ce:b9:49:f3:db:d2:94:
30:ae:26:93:12:30:dd:30:2d:31:b4:6d:55:74:97:1f:7c:e1:
21:48:8b:9b:75:29:1c:d0:c6:6f:22:d8:6c:11:f4:d1:13:5d:
88:0d:4c:d1:89:e6:5a:b0:49:b2:e1:c6:d1:51:61:89:4c:c2:
85:bd:e5:ab:ff:bb:80:07:cc:de:6f:5c:da:6d:30:02:b7:68:
d9:d8:49:5f:dd:ab:a4:d3:63:1e:f9:56:f4:e5:d0:3f:58:13:
2f:ad:20:31:0e:65:eb:7f:c7:e9:cb:d4:4b:c6:a1:77:aa:59:
c2:e7:84:97:a6:27:21:00:f9:49:93:b4:4e:8d:bb:1c:01:ab:
1c:20:b3:04:b0:f8:9d:c8:66:42:be:0d:bd:78:e7:fa:b4:43:
c4:44:2b:b3:23:11:05:26:34:d1:23:68:80:7d:a4:2a:e5:68:
62:04:09:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:24:47 2025 by rpki-client