Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98B4CEAEFAB11EF937C7D74762E951A.roa
File: C98B4CEAEFAB11EF937C7D74762E951A.roa (raw, json)
Hash identifier: R69PsGdPyaxn9ARdDnI3lw+qfa37HRUWeRPUPUw2dHo=
Subject key identifier: 4E:D0:A4:2A:FB:95:19:6B:B6:BA:F7:C2:1F:29:60:AC:53:5E:33:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01594F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98B4CEAEFAB11EF937C7D74762E951A.roa
Signing time: Thu 20 Feb 2025 16:57:37 +0000
ROA not before: Thu 20 Feb 2025 16:57:33 +0000
ROA not after: Mon 31 Mar 2025 16:57:33 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88399 (0x1594f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 16:57:33 2025 GMT
Not After : Mar 31 16:57:33 2025 GMT
Subject: CN=67b75f01-8970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:f1:16:c1:42:9f:a3:db:85:b3:86:ab:83:
8f:25:58:c5:ee:68:ec:4f:98:4f:c9:cf:c9:a6:ff:
43:fb:3a:bb:df:8b:0e:61:55:48:de:cb:92:e3:bd:
5c:36:fb:91:e0:52:65:a5:71:ae:bc:d1:13:98:8a:
5b:47:83:22:e4:27:59:fd:7c:3c:52:ab:5d:ce:60:
db:db:78:8c:3d:db:d6:65:a8:0e:67:99:82:8b:44:
12:74:30:28:1c:86:a8:2e:29:99:dd:22:a2:6c:8e:
2b:c2:9d:80:78:1d:8b:ab:f4:a8:8d:a6:99:8f:91:
f5:55:b0:7a:e3:e3:f5:21:37:a4:65:d1:0c:a9:a8:
05:bd:a2:8c:97:3f:c7:6d:4e:77:a3:0c:4c:2b:ee:
dc:c8:d6:e8:63:7c:f4:8a:7d:29:04:a4:33:02:95:
15:a0:3c:37:26:dc:5c:1f:a8:4c:77:7c:d7:c6:08:
00:40:f5:54:0a:f9:b6:28:9a:65:22:70:f9:04:3a:
c9:36:ef:d4:a1:1e:a5:f2:9a:35:f3:8f:c5:04:20:
f1:f3:ea:db:33:5c:c3:f0:cd:12:99:da:65:f5:a2:
e3:cd:4f:89:f5:b5:09:2b:fb:77:0e:57:c0:07:f2:
9b:96:23:fe:30:54:63:f4:2b:32:1d:4b:8c:70:e4:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D0:A4:2A:FB:95:19:6B:B6:BA:F7:C2:1F:29:60:AC:53:5E:33:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98B4CEAEFAB11EF937C7D74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
02:8b:05:47:2d:d0:98:9c:d2:1a:ea:cf:f9:ec:80:1a:38:36:
9e:93:ad:87:83:0a:66:8a:c3:c9:01:3f:55:1c:e6:be:c2:54:
c5:86:09:fb:5f:0a:93:ed:f9:e7:cb:b1:53:6e:31:ca:e2:40:
ac:bb:ef:41:eb:42:ec:3e:ae:20:18:00:49:53:4a:ec:e4:9e:
ce:32:57:70:2b:dd:8d:75:c7:5e:88:27:8e:e2:60:84:a7:f0:
16:75:05:7c:20:16:92:2a:b8:20:c6:b2:bb:77:8d:d1:a8:07:
54:ea:be:e3:b2:f4:ae:ad:9f:54:b5:36:ea:d7:81:94:09:47:
92:95:b1:58:43:f3:2c:92:da:30:38:bb:18:05:f7:48:1c:4b:
78:8c:4f:2f:2e:28:d9:fa:c9:7f:46:54:14:ad:1e:12:cb:d4:
4e:1d:34:d5:16:26:09:e2:41:18:7d:a6:72:9d:9c:5b:60:06:
fa:df:7e:ff:d5:48:7b:85:16:59:8d:76:d0:3f:61:05:32:4d:
47:55:77:1a:ad:c4:d0:a6:80:85:f8:8a:db:69:a0:0e:72:47:
2c:ed:94:0b:e2:2e:64:d8:1d:7a:19:03:ef:31:60:02:8d:45:
c1:22:18:65:df:e4:6d:db:15:43:e9:97:33:2f:45:5f:b9:51:
95:9e:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:15:07 2025 by rpki-client