Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0039E80F52611EF89C8C182762E951A.roa
File: D0039E80F52611EF89C8C182762E951A.roa (raw, json)
Hash identifier: rpj/fkQWSjj+0SXZ0bDpjFLIy4YmpPxvEmkRhHexUI4=
Subject key identifier: 61:F5:4D:75:2B:FF:D1:A9:DD:7B:DD:FE:F2:6E:9C:0A:EE:C5:AC:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01694E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0039E80F52611EF89C8C182762E951A.roa
Signing time: Thu 27 Feb 2025 16:20:52 +0000
ROA not before: Thu 27 Feb 2025 16:20:48 +0000
ROA not after: Fri 28 Mar 2025 16:20:48 +0000
asID: 395793
IP address blocks: 154.193.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92494 (0x1694e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 16:20:48 2025 GMT
Not After : Mar 28 16:20:48 2025 GMT
Subject: CN=67c090e4-449e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:f6:47:48:54:33:ed:70:0e:ce:5d:e6:3f:
54:3b:18:78:3e:ab:5b:14:63:e4:5f:0b:0e:72:3d:
5d:a2:fc:ff:5c:b0:56:4f:f0:d0:f8:02:bd:58:67:
e2:e4:19:6e:5d:7c:df:14:db:58:dd:3a:8e:a6:3a:
a2:78:39:f0:f9:d0:f9:00:08:0c:6e:b7:a3:24:3a:
da:ce:60:d3:b6:f4:7f:cb:c4:da:4a:7f:88:3b:18:
7f:70:47:fa:de:95:09:54:d6:4c:88:c6:55:bd:41:
e8:ec:72:40:43:64:3f:ff:02:f1:0f:0b:7a:dc:92:
99:6d:ba:7c:0c:0e:ed:e5:9f:ee:cd:ea:45:b2:bd:
f3:8f:47:7d:02:58:b8:76:2e:93:07:c1:38:83:f1:
71:1b:5f:0d:62:5d:8f:ec:84:5d:7a:74:09:3e:59:
49:e2:85:06:cf:2b:41:1d:c9:5f:53:1d:22:f1:b7:
c4:01:40:67:39:2b:d9:bd:7d:b9:45:dc:b4:9f:e8:
20:bc:43:ae:de:56:cb:65:01:12:98:62:79:18:00:
1d:f3:b5:c6:06:e8:bb:08:56:3e:21:cd:71:63:1b:
dc:0e:c4:c3:bd:0a:b5:f4:5d:02:f9:cc:3e:d7:cf:
4f:b7:2f:52:ef:3a:52:ca:3b:6a:87:5f:0a:97:7c:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F5:4D:75:2B:FF:D1:A9:DD:7B:DD:FE:F2:6E:9C:0A:EE:C5:AC:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0039E80F52611EF89C8C182762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.106.0/24
Signature Algorithm: sha256WithRSAEncryption
44:91:bd:8f:b1:af:34:39:4d:6c:b9:75:11:c5:e4:39:2e:20:
13:6b:d1:08:db:47:14:9d:f7:82:b3:cb:91:17:a8:2a:d4:ff:
f8:4b:1d:1e:8f:af:b8:01:49:ae:57:49:63:4c:fd:9d:d1:cf:
b0:d2:46:6c:8f:1b:d4:d0:70:07:17:24:c6:62:cc:5f:cd:b0:
97:85:da:70:15:b0:dd:88:d8:8b:39:ca:c8:80:37:c3:8d:85:
aa:b4:a5:68:13:ec:62:70:8b:ec:10:af:29:8e:e3:c3:b4:dd:
e5:6b:25:0c:bf:7d:6d:23:98:e4:7c:dd:2a:09:c1:ac:55:07:
4a:cc:9a:4c:94:aa:93:1c:58:58:c9:9f:46:06:64:6b:19:c5:
d3:1b:6e:25:98:93:6a:c8:54:51:3f:bf:5b:59:72:02:a6:79:
3f:86:f3:89:67:f0:e7:db:2f:df:95:29:20:49:15:e2:ad:b3:
fa:02:ec:c7:5d:1c:bd:e4:c4:85:dd:91:55:6d:0d:f3:22:05:
45:18:7a:7e:62:dd:94:b1:ed:3d:36:2f:6f:04:60:ed:b8:30:
cd:f4:ee:29:d1:c7:be:b4:01:91:da:af:41:77:0d:81:a1:f7:
81:a2:43:e5:94:0f:c3:c3:1b:9e:9b:98:9d:47:0a:b1:66:a4:
2c:be:aa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:26:48 2025 by rpki-client