Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8091482F4D311EF8A7FD751762E951A.roa
File: D8091482F4D311EF8A7FD751762E951A.roa (raw, json)
Hash identifier: Jkln3MWq39SWcFGLUgG5UW+FJm8FgwV8MV+yl7EAhgs=
Subject key identifier: D6:4A:7E:35:A0:0E:02:45:7E:01:8F:1F:17:46:55:6F:EB:92:54:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016665
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8091482F4D311EF8A7FD751762E951A.roa
Signing time: Thu 27 Feb 2025 06:26:57 +0000
ROA not before: Thu 27 Feb 2025 06:26:53 +0000
ROA not after: Wed 26 Mar 2025 06:26:53 +0000
asID: 62240
IP address blocks: 154.195.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91749 (0x16665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 06:26:53 2025 GMT
Not After : Mar 26 06:26:53 2025 GMT
Subject: CN=67c005b1-7e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:4f:0d:c9:ac:ff:00:ba:84:10:a1:8d:92:
f0:bf:8d:50:fd:ca:70:ee:15:a1:89:21:58:48:f9:
4d:ff:39:1c:f5:b1:5f:54:22:d2:03:51:22:92:2c:
1a:fa:9d:ad:83:b6:fc:a9:7c:b7:36:26:86:d4:c3:
33:1c:d7:ee:47:69:b3:84:a6:b8:8e:4e:f0:cb:39:
27:f6:66:1a:a2:77:49:09:41:19:69:38:f7:42:aa:
d4:bc:ec:2c:b4:44:45:7a:a2:aa:6c:ab:37:56:c5:
ff:d1:22:5c:f7:ce:6d:f1:70:d8:98:52:cf:ee:49:
97:82:96:9c:e1:4f:6a:89:51:9f:c3:09:1b:76:0e:
05:de:01:68:b7:3e:f7:f4:02:6b:dd:b1:9e:c4:6c:
10:68:f6:eb:77:05:66:94:fa:56:15:55:22:f6:cb:
45:ab:de:d6:56:18:92:c3:25:5a:dd:ed:2a:ee:5b:
04:13:a0:86:98:1f:90:ad:7c:2d:2b:f7:c0:40:8d:
31:7e:c3:60:8e:01:ff:be:a5:54:e2:5e:40:25:4e:
b8:29:8d:5b:65:fe:b5:ab:d4:12:cb:0d:1a:7e:eb:
01:48:c8:65:29:11:5b:69:4a:1e:26:c7:05:ee:2f:
52:2a:24:c3:75:5a:96:e9:91:71:cf:c0:04:84:7f:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4A:7E:35:A0:0E:02:45:7E:01:8F:1F:17:46:55:6F:EB:92:54:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8091482F4D311EF8A7FD751762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.151.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:3c:4e:8d:fe:e2:b8:a7:4e:20:00:86:6a:f1:01:76:29:af:
f0:a0:73:fe:36:38:ae:77:49:19:0b:7e:fa:ae:26:9a:30:7e:
6a:e4:18:2b:2e:a8:ab:60:26:71:7f:26:0b:d6:64:f4:c2:59:
30:f1:83:c8:9f:17:e2:40:94:ba:ed:60:83:c0:f3:f8:21:73:
41:77:f7:34:e7:5a:ef:21:9f:a2:b1:33:79:5c:94:26:24:9b:
c0:40:a3:a7:67:4c:ea:cf:7e:b9:b5:b0:ea:58:d5:bb:c9:95:
11:2e:55:79:ad:a6:44:d5:11:02:52:b1:a4:b4:b5:79:8c:d5:
b1:0d:da:8c:54:45:93:e0:b3:05:2b:67:b5:d3:57:b5:c3:13:
96:aa:e9:ad:86:81:4f:b4:2a:33:4c:db:43:56:85:78:1d:b8:
0e:8d:a7:28:2f:be:89:dc:62:bd:dd:1c:47:0d:67:8a:c8:c3:
4a:af:5f:d0:20:ed:22:28:2c:30:80:33:30:e5:30:c6:30:90:
78:f1:60:e2:4d:38:71:50:ca:b6:a0:f2:75:6c:0d:bf:c3:8e:
19:8e:15:fb:c1:b9:38:f1:d7:4d:c8:66:17:d9:1b:ae:79:d7:
b6:df:3e:07:d3:24:70:f9:0f:57:24:be:5e:39:d6:09:cd:1b:
95:12:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:19:04 2025 by rpki-client