Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3623AA0F6B111EFB18A2C96762E951A.roa
File: D3623AA0F6B111EFB18A2C96762E951A.roa (raw, json)
Hash identifier: k/pEhLDzprIUnEqGina/WdsLs+5hcVGsnuwO5iMZEVI=
Subject key identifier: 06:F6:F0:E1:03:FE:92:27:F9:8B:BD:92:CB:23:D9:E3:7C:C7:64:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016EAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3623AA0F6B111EFB18A2C96762E951A.roa
Signing time: Sat 01 Mar 2025 15:28:29 +0000
ROA not before: Sat 01 Mar 2025 15:28:25 +0000
ROA not after: Mon 31 Mar 2025 15:28:25 +0000
asID: 202656
IP address blocks: 154.219.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93866 (0x16eaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 15:28:25 2025 GMT
Not After : Mar 31 15:28:25 2025 GMT
Subject: CN=67c3279d-772d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:a1:4a:e2:ad:55:09:88:bd:26:be:ad:bf:
6e:23:78:cb:61:4e:17:61:a8:c4:8e:97:3c:3e:d5:
95:50:97:5b:18:2b:45:3b:56:fc:c1:81:28:4e:fc:
b0:c5:5d:7b:3e:b9:5e:d9:32:2f:f6:31:3f:76:73:
2b:61:b3:ac:c8:cf:15:e6:5b:7b:d6:60:c9:31:a6:
b9:82:a0:9f:0b:c9:87:7c:31:52:2c:2d:9d:0e:35:
b6:d2:02:dc:34:4e:f6:40:bd:66:10:a7:b0:10:97:
3d:42:5b:51:3a:0f:c0:5e:da:4f:ec:f2:5b:b9:52:
8a:30:ba:e3:fe:56:1c:a4:95:de:42:61:52:39:12:
c9:43:ca:7e:2f:b4:a3:75:7e:b8:56:47:db:e4:63:
08:cb:ad:d0:39:65:15:c6:0d:1d:2e:74:46:ef:0f:
f5:ad:79:f0:6e:c1:69:da:39:9a:0a:09:2e:50:4f:
e7:f6:48:81:55:6e:a9:a5:79:43:1e:fe:2a:be:d0:
10:05:87:3d:c7:f9:b9:74:6e:ca:93:70:92:8a:86:
3a:8c:69:16:c2:e6:b3:c0:60:28:24:df:9c:22:a0:
5e:cf:6d:20:9e:72:74:73:fa:f7:25:31:40:72:73:
dc:fa:95:d4:a1:b9:62:71:be:21:8e:e2:7d:80:00:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:F0:E1:03:FE:92:27:F9:8B:BD:92:CB:23:D9:E3:7C:C7:64:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3623AA0F6B111EFB18A2C96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.209.0/24
Signature Algorithm: sha256WithRSAEncryption
78:69:56:5c:55:d0:60:4f:7f:03:71:96:c7:c8:f4:3a:35:19:
a1:ab:fc:c8:22:59:e3:3b:91:c6:41:b1:bb:c8:a0:f4:83:11:
6e:84:fb:eb:34:db:d4:2d:ed:29:46:40:48:e1:ec:67:b7:e6:
cf:7a:2b:3f:03:d0:89:f2:55:15:e9:75:53:d7:25:46:63:78:
a0:d6:38:7d:42:56:8a:21:bd:87:6f:84:34:4f:2a:7e:05:0e:
d7:a7:b3:a1:64:0f:92:76:0d:59:0a:98:12:76:98:33:39:e8:
25:6e:f4:6b:44:e7:9f:93:1c:24:fb:ac:c5:e4:16:e8:68:4c:
96:aa:a2:53:2c:2a:0d:03:6d:d7:f6:c6:5e:ff:a6:a4:6c:63:
c5:b6:78:a4:13:00:79:65:ad:11:1d:73:c1:b3:65:35:6f:7d:
fd:00:29:82:27:5b:23:c3:fd:68:d0:1b:76:85:78:8e:62:82:
69:0e:86:89:b0:c0:57:bf:20:cc:29:2a:ff:8c:1c:9f:61:f1:
db:3d:98:bd:45:e2:b6:14:d7:65:10:cb:9a:69:36:21:df:ab:
a2:13:93:75:f2:ce:fb:fd:ed:e6:3b:7f:2f:8a:4a:f4:79:eb:
17:d5:24:f4:9d:62:4e:ba:37:db:3d:d1:aa:cd:bb:e7:07:94:
b5:04:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:12:43 2025 by rpki-client