Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D72E0F06F6BB11EFA458F159762E951A.roa
File: D72E0F06F6BB11EFA458F159762E951A.roa (raw, json)
Hash identifier: Rp/6YmmEOhD3WB+Gvf8ma5+gktXiUUFAI6nzVhfG4VI=
Subject key identifier: 7E:DB:B5:05:E6:22:23:8B:E2:52:49:A8:A9:86:99:C9:3F:52:5D:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016EEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D72E0F06F6BB11EFA458F159762E951A.roa
Signing time: Sat 01 Mar 2025 16:40:10 +0000
ROA not before: Sat 01 Mar 2025 16:40:06 +0000
ROA not after: Mon 31 Mar 2025 16:40:06 +0000
asID: 202656
IP address blocks: 154.219.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93931 (0x16eeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 16:40:06 2025 GMT
Not After : Mar 31 16:40:06 2025 GMT
Subject: CN=67c3386a-787b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:11:06:80:39:5f:68:84:67:1b:a3:f7:bb:
1e:9b:8b:4d:8c:b6:b1:59:e2:bd:f5:ae:05:7c:23:
0d:19:d9:e2:38:32:46:45:14:16:79:e3:35:fe:c7:
f1:6e:50:84:43:86:59:58:b8:f2:69:bc:d8:ab:b8:
d8:6e:14:d3:8a:04:0e:c4:7c:cc:80:c3:70:14:67:
68:5a:99:d9:ee:95:e3:a2:68:5e:4f:95:ff:83:e1:
31:bf:30:df:77:49:24:a9:dd:20:bc:57:33:75:af:
bd:2a:53:19:ff:88:a9:21:08:9e:d4:61:3e:35:77:
9c:e1:31:0e:37:12:49:fa:b3:91:0d:18:da:54:1b:
8b:9a:62:af:33:d7:50:48:bc:b2:f2:51:94:bc:25:
90:6e:7e:2c:51:68:7b:5b:04:aa:9a:14:19:35:11:
9c:51:9d:77:d3:06:c7:e1:d6:39:a5:0d:52:39:c3:
ce:5b:85:e9:f3:d8:57:74:d9:2b:0c:c3:6d:dc:ee:
41:d2:ed:86:14:55:e2:f3:16:c7:f2:04:94:ff:b4:
a3:bc:c7:05:79:92:6e:b6:c4:61:b6:59:dd:96:c3:
90:56:73:71:b7:a9:eb:5d:1d:5c:f3:2d:39:fa:48:
09:e0:95:01:4d:f1:e8:42:21:0d:c6:ac:dc:10:69:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DB:B5:05:E6:22:23:8B:E2:52:49:A8:A9:86:99:C9:3F:52:5D:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D72E0F06F6BB11EFA458F159762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.227.0/24
Signature Algorithm: sha256WithRSAEncryption
22:04:87:e4:c3:c5:df:e2:bb:65:a1:86:44:b3:a8:bf:7a:90:
7c:1c:74:b4:ae:ad:35:5c:30:f2:2a:77:16:77:8f:8d:bc:70:
52:91:cc:67:bf:2b:02:fd:a4:65:74:14:db:7f:37:6a:27:df:
9a:be:80:c7:b5:f8:bf:fc:c5:90:66:64:d2:c3:88:81:6a:02:
8b:15:6f:a1:35:65:e5:56:6d:72:cd:cb:4e:46:96:5e:61:1e:
f7:65:e0:21:3f:5c:61:b1:9e:c3:4d:30:cd:06:06:6c:95:43:
6d:39:b3:c9:5a:de:00:6e:3c:52:76:81:dc:cd:ab:39:e7:6e:
0d:e6:03:87:a0:c0:9c:f0:f9:93:e8:ea:86:4a:e8:1f:d5:4e:
81:b7:dd:f7:67:3a:4f:ed:14:8f:d6:64:50:4e:80:f9:ee:28:
02:b8:03:86:60:bd:1e:ef:e2:cc:4a:ac:f6:d7:e8:05:08:38:
ac:78:68:9c:8a:2d:36:ef:51:e2:88:ca:4a:f7:cc:49:02:af:
22:db:7a:f7:ae:0d:21:f7:45:1a:e1:13:2d:0d:ba:70:40:b8:
f5:d4:21:51:a1:a5:d2:c0:08:86:87:e9:fb:2e:12:3b:e9:8d:
db:80:4b:f0:1d:fe:b2:11:35:8b:33:50:de:82:81:86:87:77:
51:e8:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:21:12 2025 by rpki-client