Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7D16B36F5D211EF9A86B3A2762E951A.roa
File: D7D16B36F5D211EF9A86B3A2762E951A.roa (raw, json)
Hash identifier: Qk1S2j1grATG3EMhuha46VN9BN9bJ2I0yetYnW49OVQ=
Subject key identifier: 30:E2:7A:81:C9:06:FB:A0:A8:06:6D:1C:1C:69:2B:DE:B4:EA:CB:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7D16B36F5D211EF9A86B3A2762E951A.roa
Signing time: Fri 28 Feb 2025 12:52:19 +0000
ROA not before: Fri 28 Feb 2025 12:52:15 +0000
ROA not after: Mon 31 Mar 2025 12:52:15 +0000
asID: 399195
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92989 (0x16b3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 12:52:15 2025 GMT
Not After : Mar 31 12:52:15 2025 GMT
Subject: CN=67c1b182-f302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:9d:63:09:31:c8:bc:fd:ee:3b:59:20:f7:
24:f6:95:c3:dd:fc:ca:f3:be:e3:87:de:a0:32:d5:
b6:95:88:06:b0:c9:c2:3f:c6:e6:61:bf:71:fe:3e:
dd:79:52:56:86:b2:5a:6e:0e:65:92:00:2d:71:3c:
7a:f6:5b:b5:88:ed:84:38:d4:fc:a3:ca:d9:10:c3:
c1:8d:b8:dd:33:02:55:fe:7b:9b:1c:a8:e8:1d:f3:
2d:fc:df:39:8d:36:18:57:d0:93:3a:37:00:bb:e5:
95:ad:91:cd:19:42:12:75:de:d4:84:65:b9:2f:7c:
2f:24:cc:d4:d5:3b:24:32:21:8c:98:86:c2:41:26:
2f:23:bf:05:0b:c5:3a:e0:86:6e:1b:78:0d:e1:5d:
9a:e3:4c:94:bf:a9:ed:8b:7e:de:15:61:72:79:6c:
90:e6:7e:ef:65:55:21:85:f1:32:d0:74:1a:18:99:
c7:72:1a:98:dc:43:0f:40:24:d2:dc:f5:55:a1:7e:
05:b4:d8:0a:2b:02:89:2d:ae:e6:e5:d4:48:b9:f0:
10:f7:c8:d3:c2:4d:46:41:21:1c:ff:b4:a3:42:25:
a1:a1:5d:87:8d:e3:ae:9c:49:32:85:24:45:f7:2c:
46:56:2d:f7:b6:b4:03:52:e2:60:0f:1a:5d:f4:28:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:7A:81:C9:06:FB:A0:A8:06:6D:1C:1C:69:2B:DE:B4:EA:CB:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7D16B36F5D211EF9A86B3A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:56:81:7c:0e:fb:05:12:52:3d:1b:24:a7:f3:97:5b:24:d5:
37:aa:c1:7b:fe:4f:52:ef:97:9b:17:92:fc:7e:33:bc:a9:aa:
9e:50:4a:04:75:58:f3:b8:bf:6a:bf:dc:38:b1:ab:5d:5c:6e:
0b:3e:4c:68:c0:cc:7f:3d:f9:19:d2:ab:73:d3:02:e5:c3:34:
34:13:60:b9:31:69:fc:90:09:91:91:58:e6:9f:10:4c:1e:57:
63:6f:55:58:f5:d8:63:d0:3e:a3:07:cb:27:36:d0:b1:ae:65:
4a:e8:7a:34:50:a0:ca:31:fe:a7:cd:ba:1d:e4:54:5f:f2:75:
0a:64:a6:64:3b:0e:3e:08:3d:93:d4:0f:1a:05:b6:b8:d0:c2:
e3:6a:3f:4b:ec:00:45:45:8f:66:1d:8a:10:22:d7:3b:e9:be:
df:0c:0b:53:ee:6b:2d:1b:2e:c5:97:f6:38:2f:ab:51:00:13:
8a:e6:c2:16:d4:8f:90:91:27:f2:c4:fb:b0:7a:70:9b:bf:5a:
0c:b5:52:2a:7c:ff:d6:d2:23:b3:18:25:3d:bf:61:d3:2a:55:
1f:b6:64:ad:61:05:1d:ed:8d:73:06:99:f8:a3:6e:50:16:3c:
1d:56:66:90:88:cb:76:8d:3e:ba:db:bd:4a:eb:84:7c:2e:0b:
60:3d:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:19:03 2025 by rpki-client