Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7A4687EF69B11EFAE4FDF81762E951A.roa
File: D7A4687EF69B11EFAE4FDF81762E951A.roa (raw, json)
Hash identifier: r2wktKvNEfh5Haa/Zr9OOtKStlfoGotVHeRQYVeT03E=
Subject key identifier: 84:6F:F0:C3:AA:9C:93:DE:87:18:BC:49:98:46:83:DE:A0:80:CA:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7A4687EF69B11EFAE4FDF81762E951A.roa
Signing time: Sat 01 Mar 2025 12:51:07 +0000
ROA not before: Sat 01 Mar 2025 12:51:03 +0000
ROA not after: Mon 31 Mar 2025 12:51:03 +0000
asID: 202656
IP address blocks: 154.219.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93784 (0x16e58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:51:03 2025 GMT
Not After : Mar 31 12:51:03 2025 GMT
Subject: CN=67c302bb-208c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:d3:bb:21:21:a4:31:f0:a0:54:90:ee:bb:
fc:5b:22:bd:8f:45:f2:dc:8e:92:f8:a2:db:63:4f:
8f:ab:cf:28:e0:ca:17:c8:36:37:4e:64:fa:25:99:
ca:b5:66:91:68:81:44:11:69:d0:5c:21:12:5c:3b:
cc:92:d1:ed:73:3b:3b:c4:23:da:bb:65:fd:56:e7:
80:9f:af:3c:e6:c5:40:a0:b1:eb:cf:30:45:b3:c3:
84:75:66:f9:41:d2:2d:8d:c2:49:9e:cc:f9:da:f7:
45:32:99:8f:c6:9a:00:7b:18:cc:d4:d5:54:aa:9f:
06:76:93:39:cc:e8:b6:47:ce:8f:e1:0a:7d:f1:d4:
88:98:ef:b3:1d:43:3a:8b:0e:9d:be:b6:ab:8d:34:
14:0c:1e:6f:c3:b5:67:b6:b8:9b:f6:bc:de:98:b1:
67:54:30:fa:5e:41:82:4d:1c:dc:28:02:1a:98:8a:
6f:b5:35:fe:e7:a0:67:ef:c7:df:0e:74:69:73:a3:
7e:35:de:e2:9c:bd:2e:3b:8c:f9:83:7c:b8:26:6b:
3c:9b:48:4b:80:5b:f2:69:f3:ce:93:91:be:8d:0f:
ee:8d:fb:09:f6:6d:e1:e9:fc:bd:b7:cf:87:56:86:
9c:bb:39:ec:60:3b:7a:7f:a4:3c:a9:f3:44:9b:26:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6F:F0:C3:AA:9C:93:DE:87:18:BC:49:98:46:83:DE:A0:80:CA:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7A4687EF69B11EFAE4FDF81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.203.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c8:20:4b:57:60:9a:09:00:2b:4f:6b:9d:b4:aa:ab:1a:4b:
34:77:b8:a4:86:ce:9e:02:4a:30:35:4d:22:c8:ba:91:42:f2:
6c:76:60:e6:ba:66:02:47:64:51:c9:b3:40:e7:21:5d:0a:3d:
ba:4d:fb:c7:85:dd:cc:60:6b:0d:90:c2:7e:31:80:0a:08:f9:
d8:c2:16:b1:5e:c4:23:9c:4a:d1:bc:3f:84:15:64:2c:58:8b:
d0:9f:31:35:7c:73:92:5f:3f:83:df:25:52:84:73:92:eb:bd:
cb:3e:df:51:b5:ff:fd:e5:f7:f5:e4:3c:32:4e:33:08:8d:12:
7d:87:6d:48:12:8d:08:cc:8b:df:9a:36:cc:59:96:d2:67:c5:
c9:25:d2:33:77:c0:be:36:5b:bd:c4:a1:db:f6:8c:66:08:a2:
3b:73:94:c4:f0:fe:99:09:e0:f0:cd:57:7d:58:7a:a8:4b:57:
ee:e5:34:51:11:12:dd:83:72:c1:85:61:3b:ff:c2:44:95:20:
c6:68:24:16:7f:70:c0:56:47:12:84:de:b6:9e:00:68:29:55:
6b:54:a1:59:9a:ff:f6:8c:d4:50:c5:b8:be:45:b1:ff:0c:16:
ed:0e:cb:c7:c7:d8:b5:05:36:69:09:9e:c7:e2:ce:53:cb:48:
a8:f9:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:20:49 2025 by rpki-client