Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5AE2804F16211EFB35EC8A2762E951A.roa
File: D5AE2804F16211EFB35EC8A2762E951A.roa (raw, json)
Hash identifier: 0JW2fvaQj+6P1XcUC/Qcx25kh4Y6O7yL9mhp+CnQ/ow=
Subject key identifier: 0E:CE:95:96:E1:ED:CD:B8:75:69:F4:3C:85:61:9A:7B:10:CD:58:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015A84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5AE2804F16211EFB35EC8A2762E951A.roa
Signing time: Sat 22 Feb 2025 21:20:27 +0000
ROA not before: Sat 22 Feb 2025 21:20:23 +0000
ROA not after: Wed 26 Mar 2025 21:20:23 +0000
asID: 149513
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88708 (0x15a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 21:20:23 2025 GMT
Not After : Mar 26 21:20:23 2025 GMT
Subject: CN=67ba3f9a-cd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:c7:c1:66:77:e1:97:26:b9:5c:c7:3d:67:
4a:a6:fc:98:31:c1:c8:29:7b:43:4b:7b:65:f6:dd:
31:a7:84:5d:c5:90:dd:03:bf:7f:82:4e:1c:5b:3a:
d5:76:c9:e1:f5:09:5e:4d:dd:d3:ac:92:e2:45:4d:
6e:17:c1:4e:d9:85:86:e5:d4:63:cd:e8:1b:86:f8:
14:4c:d9:2a:b8:b1:6e:46:40:55:45:f8:17:39:78:
6c:41:87:2a:40:1c:0d:d8:74:ca:50:97:9f:7a:05:
8a:6d:de:c6:50:cf:c3:ff:a7:f2:7d:76:61:2f:67:
91:65:0d:26:74:84:1e:1b:cd:d4:08:47:11:06:0a:
8c:57:92:80:f5:b7:a4:67:04:c5:59:3e:09:af:95:
1f:ca:5d:fd:ee:20:44:56:94:e6:5f:07:7f:28:3d:
39:83:fe:d4:44:c8:bc:cb:fc:de:b7:b6:1f:77:7b:
22:d7:8f:93:65:d4:64:ca:ad:f9:ef:2d:c7:10:9e:
00:bd:86:3e:9a:15:d0:b7:e9:fe:e1:40:ef:35:5d:
a4:fb:08:b6:9a:70:13:61:b9:42:bf:0d:da:3a:d5:
77:5f:ae:01:06:22:80:08:6e:dc:3a:4a:4f:05:3d:
4a:27:2c:d9:72:6a:fb:2f:bd:53:fb:18:0e:29:c2:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CE:95:96:E1:ED:CD:B8:75:69:F4:3C:85:61:9A:7B:10:CD:58:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5AE2804F16211EFB35EC8A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:e2:17:ae:dc:05:65:11:5a:62:55:a3:db:69:0f:16:f4:21:
68:99:67:0b:1c:01:d8:4a:62:91:75:1d:9a:47:73:ba:e8:6e:
3a:f4:56:31:fe:ed:bd:5d:b0:ea:3b:9e:2e:2d:5f:35:79:22:
03:96:33:59:f0:0f:41:a0:c2:86:74:9e:4f:02:93:c3:df:52:
bc:2e:a0:6d:fa:65:9a:8a:a9:e4:69:9c:b5:5a:ff:a0:d1:41:
d0:5a:fc:4f:42:1b:ee:8b:3b:eb:ef:6e:39:a2:e0:78:b7:00:
86:73:24:7f:ca:2d:1c:06:42:35:7b:df:46:6a:01:60:aa:7c:
d6:db:e7:69:58:cc:e4:12:ac:64:26:77:f3:90:6c:d0:c6:2a:
90:e0:35:c7:ed:e0:c1:89:4a:cb:5a:f2:8a:1a:2f:54:ee:56:
3b:bd:a9:15:7c:5e:a6:03:42:8e:26:a0:12:b1:9a:0b:2f:fb:
29:f3:a9:0c:5a:18:6e:79:f3:d2:34:29:10:3a:78:db:80:15:
73:c1:59:84:85:70:50:64:d7:d8:bc:ae:96:90:d8:90:93:69:
5b:6e:e6:88:12:a8:f3:67:1f:41:aa:8d:3d:20:71:2b:67:0d:
ee:ba:1e:9d:4e:0a:b0:69:30:01:f3:af:f3:d2:8b:6c:b4:72:
32:74:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:11:57 2025 by rpki-client