Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3B22498F4F411EF9CE810B1762E951A.roa
File: D3B22498F4F411EF9CE810B1762E951A.roa (raw, json)
Hash identifier: J02YztFs7dXyeDvcgFi9jq0m1y9GaETMAC8GTiWED5o=
Subject key identifier: F3:E2:54:F4:0C:97:8D:95:A9:71:6A:D5:69:7A:5F:1B:E1:58:67:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0167B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3B22498F4F411EF9CE810B1762E951A.roa
Signing time: Thu 27 Feb 2025 10:23:03 +0000
ROA not before: Thu 27 Feb 2025 10:23:00 +0000
ROA not after: Wed 26 Mar 2025 10:23:00 +0000
asID: 62240
IP address blocks: 154.195.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92080 (0x167b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:23:00 2025 GMT
Not After : Mar 26 10:23:00 2025 GMT
Subject: CN=67c03d07-9530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:d6:d9:de:46:02:79:73:3b:7a:ae:a7:62:
45:3c:33:7b:39:37:53:1b:ad:fd:1d:c0:ac:d9:22:
eb:88:70:bd:a5:ee:a4:08:ef:9d:ae:ab:6c:ee:84:
3c:7c:0f:70:46:bb:f5:01:f6:51:0f:a2:67:30:08:
6b:30:71:7a:78:67:66:82:e5:cb:fb:13:10:9e:fb:
3d:ba:08:9e:eb:7e:e6:ad:c3:f3:98:da:78:d7:dc:
92:ca:63:b3:d7:4a:fa:d8:45:76:46:ab:ca:ea:00:
05:26:bb:8b:89:07:13:5a:3d:70:09:73:e0:77:55:
0b:d9:5a:0f:50:e8:93:c6:db:99:ea:90:de:8d:a3:
d3:0b:c3:da:dd:17:8c:f2:b1:d6:e4:e9:03:3d:4c:
cc:e9:8d:fc:7d:3f:21:f3:6f:38:02:44:15:a1:bb:
d2:11:61:68:00:eb:df:3a:e3:85:b5:cd:08:43:c1:
fd:c8:04:17:01:ff:03:d0:29:62:f1:0c:e5:ce:07:
5a:72:89:48:ea:84:09:fd:41:67:11:83:59:3b:df:
04:c0:e0:dc:ad:76:5e:e5:94:83:e5:a2:e6:69:ab:
17:db:0c:00:f4:e9:c5:ef:3b:13:16:72:d0:04:c2:
3d:03:b2:87:db:6c:86:79:09:82:d4:41:18:09:b8:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E2:54:F4:0C:97:8D:95:A9:71:6A:D5:69:7A:5F:1B:E1:58:67:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3B22498F4F411EF9CE810B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:23:d3:c1:52:20:db:6d:d3:f5:03:d4:b8:a3:22:1f:a3:8f:
5c:8b:7f:42:f2:b0:0f:52:b8:c8:78:0e:28:7b:a3:cb:c6:a1:
8c:22:03:c4:33:b0:8e:87:0e:d9:2b:29:41:37:ea:58:34:b8:
c4:28:cb:ce:51:62:f3:2c:8e:98:de:8d:2f:8a:6d:c8:6a:33:
a2:2e:1f:f1:50:18:c2:e1:a5:8a:39:07:0f:31:9b:8f:14:81:
40:80:0a:06:16:cc:b9:d9:39:02:ea:21:d5:f2:26:c2:b8:7d:
1d:31:a1:08:ed:aa:d0:1d:1a:aa:1b:1e:6a:77:cf:cb:ac:5d:
35:50:56:8a:28:24:8b:01:cc:2b:35:a3:84:4c:e3:d1:62:4d:
43:25:23:dc:c9:fa:70:cc:2f:e5:a1:7b:29:79:f7:7f:8b:36:
7e:62:5e:19:44:27:14:fc:71:ac:64:18:6f:3b:87:77:ef:71:
b7:66:44:e1:43:6d:c3:af:0c:b2:90:6e:74:98:95:a4:8c:0e:
aa:c8:30:43:11:a4:f2:0f:e8:f5:03:51:52:ca:23:6e:4f:37:
40:94:25:58:78:ed:a7:8c:1a:fc:6b:db:69:a5:18:f9:62:f2:
ed:e6:8f:4c:ca:f7:2a:52:f1:d0:b3:d3:a7:07:a4:05:15:76:
1f:cb:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:10:16 2025 by rpki-client