Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB727F22F62911EFA424596D762E951A.roa
File: CB727F22F62911EFA424596D762E951A.roa (raw, json)
Hash identifier: SoikvPzWOUUzgzO2fdS9nxl7krej7bgnE98a7JyLTBU=
Subject key identifier: FE:A6:F1:36:C6:48:1C:44:11:64:D2:2F:C1:C9:28:92:ED:C6:E0:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB727F22F62911EFA424596D762E951A.roa
Signing time: Fri 28 Feb 2025 23:14:44 +0000
ROA not before: Fri 28 Feb 2025 23:14:40 +0000
ROA not after: Wed 26 Mar 2025 23:14:40 +0000
asID: 62240
IP address blocks: 154.194.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93373 (0x16cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 23:14:40 2025 GMT
Not After : Mar 26 23:14:40 2025 GMT
Subject: CN=67c24364-ede7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:a0:a0:28:d0:f9:98:f2:56:06:f5:c0:d9:
d5:7f:26:56:37:2b:30:7d:41:1a:3c:95:62:0c:d4:
ba:a6:ec:7a:20:72:10:2a:0c:1f:fe:c2:16:16:a7:
1a:7a:f9:fb:ef:16:8a:cb:de:29:dc:21:66:9e:6b:
40:39:74:8e:6f:2d:f5:60:37:69:b3:2c:e7:21:27:
83:f1:5e:be:c1:fd:91:6f:57:55:97:9e:5a:d4:26:
2f:c3:84:ab:e4:a6:29:1a:8e:4e:36:ac:b7:95:a7:
03:36:bf:a0:4b:11:08:6d:e3:93:40:0a:90:7f:36:
e3:c5:e4:aa:37:14:1c:1b:28:0e:bd:8d:6b:a0:36:
70:ee:1c:57:c6:55:90:f5:60:4d:18:43:8c:5a:ca:
7a:c7:5f:fa:3e:0e:e8:c4:96:3f:e0:16:ce:2d:12:
82:c7:c3:b2:af:b9:52:41:89:c2:04:a3:b7:c5:22:
e1:17:82:2b:fc:d4:96:7d:49:ca:6c:76:5c:3b:75:
8d:40:87:dd:63:4d:e3:7d:55:24:c8:8c:da:32:e0:
65:48:1c:26:14:af:99:51:d2:bd:5c:26:56:01:15:
6b:33:21:6e:61:ee:c5:d0:36:8b:22:53:83:52:bc:
b0:d8:7b:a6:19:fa:cc:eb:17:29:e7:0a:ff:59:19:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A6:F1:36:C6:48:1C:44:11:64:D2:2F:C1:C9:28:92:ED:C6:E0:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB727F22F62911EFA424596D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.124.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b2:ec:00:9e:39:6f:fd:eb:e5:96:43:1c:14:f9:08:25:f6:
a5:d4:5b:8d:50:e5:b7:40:87:5d:33:b0:b8:57:5f:43:09:4d:
82:e0:c8:5b:57:b8:24:0c:34:c6:a6:55:7f:e5:94:35:be:a3:
c6:f5:ec:f8:0b:73:dc:c4:93:b5:5e:05:37:8e:5d:17:43:c4:
55:fd:6d:84:f3:d8:62:b8:dd:03:d4:47:8f:0b:27:91:5c:05:
11:63:98:fb:f9:cd:1e:0d:da:40:36:3f:e4:dc:1e:3a:05:e6:
31:ed:66:f1:6f:6f:1c:10:b0:99:07:f0:eb:63:71:bc:ab:1c:
eb:e4:23:da:73:80:73:6d:fe:d4:eb:c8:3f:6a:1a:7d:75:e5:
87:d9:9d:81:4d:c3:7f:2f:5f:3d:35:f3:37:19:8a:77:35:b9:
c0:7a:6b:2c:d1:de:7a:3e:2d:e0:8a:68:a1:14:87:31:ea:9c:
7c:90:a8:ef:f0:d2:f5:87:2e:5d:88:e3:18:e8:b7:2b:d0:5c:
e3:33:73:4c:18:00:0f:d0:47:48:04:fe:92:1f:eb:4c:d6:a6:
98:47:13:2f:be:4c:e8:89:0c:24:c4:3a:fe:86:d2:b2:d7:df:
c7:8e:fe:67:c0:91:3b:bb:a4:12:30:51:90:5e:a1:f7:14:48:
60:77:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:55:40 2025 by rpki-client