Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C9F464F86F11EF906F7964762E951A.roa
File: C9C9F464F86F11EF906F7964762E951A.roa (raw, json)
Hash identifier: JlbxYQ4G+sJ38glNyNGvOtm1BXT3p7SVJEzTPcO67pM=
Subject key identifier: 22:98:66:A0:15:1F:EC:02:EF:99:E8:F1:09:DA:E1:36:47:BB:69:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01713D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C9F464F86F11EF906F7964762E951A.roa
Signing time: Mon 03 Mar 2025 20:40:48 +0000
ROA not before: Mon 03 Mar 2025 20:40:44 +0000
ROA not after: Sat 05 Apr 2025 20:40:44 +0000
asID: 397423
IP address blocks: 154.93.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94525 (0x1713d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 20:40:44 2025 GMT
Not After : Apr 5 20:40:44 2025 GMT
Subject: CN=67c613d0-76e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:0f:53:7e:b7:e6:e7:57:8f:63:a4:5e:95:
e9:0b:ad:00:92:92:39:c0:68:c0:9e:05:a8:3c:0b:
88:92:d3:2b:6f:c2:02:0a:fd:a1:8f:65:ed:19:4f:
2b:7e:e7:50:f8:38:52:83:19:89:70:c0:44:d7:24:
74:b2:9f:01:d3:db:5f:22:b0:e9:4d:29:21:3a:00:
d6:76:1f:f0:1e:0c:7c:2c:48:82:5a:9b:96:c0:aa:
10:bc:1b:e4:14:a7:69:ff:ee:1c:c6:1d:9e:d3:ff:
b1:fa:92:ca:ed:f6:51:25:8e:10:62:18:96:f8:46:
5b:33:d7:79:e1:18:18:b9:95:d7:7e:4d:58:b1:b3:
43:25:6c:a1:cd:c9:9a:bf:38:22:0c:65:7c:f9:ef:
1a:f3:b8:db:4c:70:ec:83:ab:d3:59:1b:80:b6:b9:
d3:53:72:8f:2f:e7:91:6e:a1:0e:28:2b:fe:68:8c:
c3:3c:0a:79:86:96:b1:0d:4e:ae:cc:e6:47:05:7a:
22:7b:7a:97:f0:57:0a:af:67:33:8b:f1:c8:15:f2:
8c:75:a5:50:4b:c1:c8:fc:00:14:18:56:73:e9:b0:
59:30:16:01:1d:d2:44:78:68:3b:f9:0c:8c:43:a4:
3c:39:83:c5:29:1b:79:27:bd:99:51:c2:1d:5d:b6:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:66:A0:15:1F:EC:02:EF:99:E8:F1:09:DA:E1:36:47:BB:69:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C9F464F86F11EF906F7964762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.27.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6c:25:ed:0b:02:1e:f2:76:d1:69:e5:3e:03:c6:7b:b7:5c:
0e:56:1a:9c:a5:72:47:1a:88:99:d3:c9:0c:7e:ad:2e:5e:6e:
ae:47:c0:a5:67:55:72:39:5b:72:43:57:06:d4:d8:9d:27:25:
b5:3c:0f:e0:61:92:60:dc:fd:ea:5b:65:1a:ce:03:88:06:40:
ed:cf:d4:03:a8:75:03:cd:ba:17:95:81:eb:06:f0:8a:e6:7c:
25:dd:4d:ce:fe:44:c4:83:0a:15:aa:df:f4:5e:ea:90:4c:6a:
6f:e9:73:5b:76:54:64:32:6d:db:b7:49:9b:65:17:b2:09:ed:
27:1f:e4:9d:3f:7e:44:d8:0f:23:cd:2c:48:00:52:83:4d:68:
42:02:78:74:ca:f7:b6:be:93:ef:a0:08:91:8c:88:ac:72:b6:
29:32:14:de:7f:02:23:ec:e3:7e:e9:8b:96:89:fc:68:a1:be:
d6:c2:e0:3c:ef:1b:70:56:3b:ce:82:4c:a9:a3:38:7a:ec:f4:
2f:3f:6a:4b:cd:ab:94:90:f2:69:0f:e2:f1:73:a2:85:eb:dd:
d1:70:33:1c:09:cf:11:56:d5:b8:70:ff:c0:48:c0:05:b1:7c:
23:c0:bb:da:ec:c2:24:46:da:37:8d:80:8d:43:58:76:b0:50:
42:d1:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:40:46 2025 by rpki-client