Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6FF280F53711EFA9CA8E77762E951A.roa
File: CC6FF280F53711EFA9CA8E77762E951A.roa (raw, json)
Hash identifier: sJpHhy78NyS8Fai4ofmkpxxkbGFTMMBcuGxgYZUIYu4=
Subject key identifier: 41:AF:F0:F4:98:8C:07:3E:D9:27:F9:53:08:CD:2B:6A:0E:B1:45:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016976
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6FF280F53711EFA9CA8E77762E951A.roa
Signing time: Thu 27 Feb 2025 18:22:27 +0000
ROA not before: Thu 27 Feb 2025 18:22:24 +0000
ROA not after: Fri 28 Mar 2025 18:22:24 +0000
asID: 395793
IP address blocks: 154.193.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92534 (0x16976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 18:22:24 2025 GMT
Not After : Mar 28 18:22:24 2025 GMT
Subject: CN=67c0ad63-40d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:d7:7c:92:9f:ad:11:98:9f:31:7f:5f:5b:
aa:4f:78:8a:2e:ce:50:17:b6:0f:5b:9a:af:7d:20:
01:0e:80:57:98:8b:87:5c:c1:3c:62:75:19:73:bf:
14:4c:b5:29:c8:cd:95:8c:84:fe:15:c6:bb:61:27:
82:2d:ae:b5:cd:d8:ae:1d:25:19:6c:43:89:89:bd:
a6:1f:e1:1f:77:6d:8c:e0:59:29:73:42:6b:ea:cf:
2b:28:55:32:ee:be:4c:8a:80:2e:0e:7b:fe:4b:3f:
17:5a:4f:21:be:bb:71:87:92:25:b1:d5:5a:54:41:
4e:e8:8a:c2:ed:dd:86:c6:8e:bf:15:c6:fc:47:67:
db:7d:d3:97:c9:41:22:53:89:f0:09:b6:f6:c9:e7:
1b:72:7b:7c:1b:62:a2:40:49:29:7b:56:78:c2:61:
85:67:1e:95:10:a9:b3:8b:35:11:2b:05:75:fe:46:
80:cb:2c:92:44:3c:23:be:57:a7:fa:80:53:ee:20:
a0:9b:f5:e2:85:00:55:98:a8:a0:35:96:1d:a4:91:
53:04:96:ad:1a:1c:dc:4b:34:92:78:08:05:74:65:
f3:1b:20:f4:59:ba:ac:b5:e9:66:88:96:8e:fb:94:
07:b7:da:39:d3:92:aa:70:3e:31:c1:85:6c:3c:b5:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:F0:F4:98:8C:07:3E:D9:27:F9:53:08:CD:2B:6A:0E:B1:45:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6FF280F53711EFA9CA8E77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ee:b6:0c:e2:f5:02:ad:93:f0:5e:05:63:3e:d1:c9:2c:08:
1e:e8:fd:f3:0e:a8:64:f7:d9:f2:bd:27:be:ef:b5:a4:06:5d:
97:45:67:14:16:cd:34:81:8f:1a:45:c9:98:fc:8b:37:6e:5f:
a5:88:18:8a:33:20:86:de:48:9f:d5:27:e2:ac:b3:cb:cb:9a:
be:61:07:c6:a4:98:cf:a1:ca:35:58:2d:ca:61:64:06:21:82:
47:c7:71:37:8e:61:e5:88:90:b5:81:2a:80:0c:cf:df:80:f2:
9b:09:f7:94:db:c9:29:35:b4:c8:ad:0f:1d:bf:28:26:66:fd:
e1:c4:ee:d8:8a:24:92:96:46:08:32:bf:e1:2f:d3:b8:3f:6d:
61:f8:6e:fd:31:59:cf:41:42:ae:12:27:91:e1:30:02:e7:a1:
e2:47:b3:e6:a6:c5:44:a3:15:b8:ae:1e:f2:ad:28:a5:59:a3:
ad:3e:9e:9a:c8:d8:74:c4:36:f0:01:53:3e:f3:3c:04:ec:99:
9b:cf:73:c7:7f:11:20:4b:ad:39:fd:99:89:ce:81:07:18:3d:
97:cd:77:7f:59:fb:6a:e2:79:ff:72:9f:7a:64:31:6c:10:e6:
16:ad:c0:d2:1f:6c:77:a7:2b:03:10:0d:12:22:69:17:1c:4b:
c9:e3:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:09:31 2025 by rpki-client