Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1988424F5BA11EFB8EE827D762E951A.roa
File: D1988424F5BA11EFB8EE827D762E951A.roa (raw, json)
Hash identifier: taDI2YABqiVS1LLO9FRpz1WNULMdR3ehN3SsHsMMeTw=
Subject key identifier: 09:CF:73:72:57:BA:61:33:08:D7:60:EF:B5:10:03:C7:7A:74:AD:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1988424F5BA11EFB8EE827D762E951A.roa
Signing time: Fri 28 Feb 2025 10:00:20 +0000
ROA not before: Fri 28 Feb 2025 10:00:16 +0000
ROA not after: Mon 31 Mar 2025 10:00:16 +0000
asID: 54600
IP address blocks: 154.202.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92791 (0x16a77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 10:00:16 2025 GMT
Not After : Mar 31 10:00:16 2025 GMT
Subject: CN=67c18934-5812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:66:bd:cf:70:26:0a:79:4b:4e:42:43:d4:
7d:bc:6a:75:31:ef:40:96:3d:1d:f7:0a:83:af:d0:
3d:33:a9:4a:8a:49:50:a9:c3:dd:f6:76:d2:e9:b6:
bd:2f:4b:98:55:2f:8d:ff:9b:87:d2:12:2b:fc:5b:
99:d4:f7:ea:53:33:d3:27:11:67:b6:7f:d1:a5:ad:
7d:f6:a9:09:e0:38:b6:fd:1c:1e:e7:08:c0:0c:84:
40:bf:af:a9:64:b2:40:eb:a2:48:44:cb:c1:01:2f:
c8:70:97:06:56:f6:ff:c4:59:2d:ab:f3:4c:2c:f0:
65:48:7a:2f:02:f1:65:8f:e4:00:4d:22:9f:fc:62:
75:4a:31:52:a7:cc:4c:63:4b:55:58:2d:38:71:db:
f2:8f:3e:21:7b:ed:cb:cd:7a:50:a7:c0:db:d1:75:
8a:e8:2c:cc:70:87:b1:6d:2a:d2:95:10:fe:05:f0:
60:ff:fa:53:00:23:8f:a0:d1:ca:9a:e5:9b:bc:8d:
57:3d:32:88:5d:61:40:4e:24:56:0c:aa:e8:ab:76:
81:35:8e:2b:db:14:5c:c1:99:65:ce:59:e4:6f:08:
8a:52:39:e4:5e:ca:6c:b7:03:77:0e:5a:9b:a0:8d:
a6:de:be:68:a8:e3:15:1f:a1:59:7b:c5:a5:c1:e0:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:73:72:57:BA:61:33:08:D7:60:EF:B5:10:03:C7:7A:74:AD:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1988424F5BA11EFB8EE827D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:ec:53:be:71:c0:0e:4f:1a:70:d8:8e:9d:8c:3d:da:c1:61:
2f:e6:58:4d:5a:9e:60:e2:e2:de:9f:f8:4b:d8:81:71:89:72:
1f:9f:7d:b2:be:2d:c7:98:a9:19:d6:94:85:76:d1:22:1b:82:
68:3d:1b:0f:b0:00:7d:de:23:d5:37:71:9b:30:68:2a:24:6e:
10:e4:0b:e3:da:89:3f:b2:4a:07:b9:5e:25:2e:07:2e:83:d8:
e5:a3:25:56:e9:cf:3a:b9:3e:c0:56:12:b0:31:96:f0:53:f0:
08:47:ad:2b:ac:7f:80:f7:f8:91:7d:6b:2a:3f:46:90:eb:ea:
fc:68:e2:56:4d:71:eb:35:24:3c:ed:f5:20:09:97:1f:c9:2c:
94:94:37:a3:ba:3e:cb:89:42:6b:d7:88:0f:24:61:ca:81:1b:
8f:48:fa:52:18:58:af:30:44:fd:cb:df:cf:fc:a8:3a:bd:41:
f0:8b:64:82:64:ec:e2:8f:48:cf:8c:20:14:8b:9e:02:b0:d3:
3b:56:b2:60:22:bd:f8:00:04:e1:42:ae:f1:fe:0f:21:e2:3b:
49:96:95:c6:97:1d:4d:83:82:9f:3a:63:03:26:0d:36:8d:0e:
23:d3:e6:c0:6c:3f:0d:ba:f2:70:08:bd:c1:e4:77:38:ad:6c:
fa:85:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:41:13 2025 by rpki-client