Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF88C932F67D11EFA79562B6762E951A.roa
File: CF88C932F67D11EFA79562B6762E951A.roa (raw, json)
Hash identifier: KDkrdm1yk5iFuhk3Z/2OUwDCuScB2f6suQNSsrTkUiI=
Subject key identifier: 1C:31:14:24:FC:6E:43:EE:18:F6:D6:B8:F4:4D:ED:44:D9:BE:93:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF88C932F67D11EFA79562B6762E951A.roa
Signing time: Sat 01 Mar 2025 09:16:08 +0000
ROA not before: Sat 01 Mar 2025 09:16:05 +0000
ROA not after: Mon 31 Mar 2025 09:16:05 +0000
asID: 44559
IP address blocks: 154.209.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93575 (0x16d87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 09:16:05 2025 GMT
Not After : Mar 31 09:16:05 2025 GMT
Subject: CN=67c2d058-7e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:b6:73:56:b2:6e:5e:6f:ad:e8:77:f8:60:
98:8c:ed:b9:ea:26:6b:06:53:32:73:3b:ed:88:38:
5f:da:19:70:a7:85:4d:8d:8b:37:b6:3e:ad:1e:4e:
a9:cf:e1:48:70:fc:f9:16:6a:f4:07:fc:81:c3:8a:
c1:7d:8c:df:9b:31:43:09:d1:db:97:5f:31:62:c4:
99:5e:55:f2:6c:9f:c5:98:bd:78:c3:7f:81:b2:d8:
35:af:9e:0f:f4:ee:54:37:e8:27:b4:d2:3c:f5:b2:
86:70:c2:65:49:a2:20:93:e3:1d:7c:66:dc:7e:70:
b7:ff:99:6d:aa:a0:c3:40:13:6e:be:87:ac:60:60:
bb:58:16:1b:2c:08:f9:69:70:ad:f1:bb:ab:54:d7:
75:d9:f9:69:af:9f:b9:f5:20:57:7e:34:40:27:7d:
e2:df:4c:d3:75:17:e8:07:f1:5c:ef:c6:f6:26:e3:
7a:93:d4:c2:af:cb:ae:76:b9:71:0c:79:0f:16:f4:
b7:dc:66:d7:c9:d9:19:73:88:d1:14:b0:d1:0b:c0:
c4:73:27:f4:ea:54:8e:5b:50:87:90:4f:63:13:4d:
52:40:b2:17:24:3c:96:63:ec:80:d1:80:1d:87:d5:
59:af:08:6d:6a:7f:e2:71:0f:bd:c3:4f:d4:af:fe:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:14:24:FC:6E:43:EE:18:F6:D6:B8:F4:4D:ED:44:D9:BE:93:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF88C932F67D11EFA79562B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.149.0/24
Signature Algorithm: sha256WithRSAEncryption
76:53:16:90:91:71:21:38:da:69:4b:35:ff:14:b8:b0:37:b2:
db:19:69:97:eb:91:58:40:80:7a:58:36:42:21:d5:07:9d:6b:
99:c5:83:c0:3e:7a:59:a2:7c:ac:a0:24:59:91:39:06:05:50:
42:85:1c:c9:7b:83:9b:2b:fa:d4:a4:30:a5:e2:ee:b3:82:1a:
3b:16:8f:97:17:af:78:5f:8d:af:bc:50:70:28:fe:b4:52:6a:
0f:bc:42:1f:5a:be:e5:93:65:c8:f2:e8:75:d8:c1:5d:5b:4b:
e6:3a:30:c4:7e:16:11:ee:f7:bf:4a:ef:fb:8b:39:78:8a:ea:
d8:a5:05:37:06:01:0a:0b:3f:41:47:35:8d:ba:4b:c6:03:43:
18:8f:8a:dc:a7:d7:a3:1d:20:ef:31:c4:64:db:6d:8a:5c:c1:
90:04:ae:f9:10:81:17:d9:a0:51:d6:6c:4b:4f:49:a1:21:b5:
14:24:79:03:26:40:0a:4c:ee:62:15:0c:c8:60:c4:63:b3:19:
bb:6d:1f:d3:47:ca:84:6f:35:e5:e1:02:a1:5a:ba:5e:64:6c:
8e:b1:12:b0:89:32:9f:a9:35:3e:8c:56:60:4d:6c:7c:c9:67:
99:a1:a4:1b:a2:86:8f:ec:ac:86:76:a1:8a:5d:19:fa:82:95:
9a:4f:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:13:21 2025 by rpki-client