Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D823043EF4EF11EFA15D0C8F762E951A.roa
File: D823043EF4EF11EFA15D0C8F762E951A.roa (raw, json)
Hash identifier: +gIRzafHcav8SCOaDdrEGpmm/J/jtTH8C6NTX10wyhA=
Subject key identifier: D2:5E:0D:EF:F5:0F:DD:B9:67:1F:ED:6B:0C:F2:73:37:3E:3C:3C:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01675E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D823043EF4EF11EFA15D0C8F762E951A.roa
Signing time: Thu 27 Feb 2025 09:47:23 +0000
ROA not before: Thu 27 Feb 2025 09:47:19 +0000
ROA not after: Wed 26 Mar 2025 09:47:19 +0000
asID: 62240
IP address blocks: 154.195.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91998 (0x1675e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:47:19 2025 GMT
Not After : Mar 26 09:47:19 2025 GMT
Subject: CN=67c034ab-790f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:af:11:67:9f:62:0f:9c:ca:dd:31:a6:39:
88:6c:10:a5:2e:14:33:df:55:05:74:ef:5e:6c:e5:
8a:8b:4f:75:28:83:2b:40:55:c1:fc:99:5e:dc:2f:
ee:8f:04:ab:fd:e8:e4:d0:70:fa:d5:96:e6:45:32:
fc:af:40:c6:31:b8:6d:88:d1:dd:80:fc:d5:3d:5e:
27:9a:3e:e5:1f:ea:90:ee:97:a3:2e:d1:7f:e4:7d:
8e:84:9c:1b:35:b7:7a:82:0d:57:a9:5b:43:9e:a7:
68:1b:e1:0a:36:bf:25:97:83:b5:b7:fe:08:99:fd:
6c:18:0f:19:2a:e5:b9:54:84:7a:38:00:18:64:bc:
dc:c6:d8:de:05:49:4f:58:65:fc:70:78:21:9f:78:
37:ec:4c:8d:4f:77:9c:75:0b:6c:64:46:13:ac:cb:
71:61:41:5f:c4:b8:d2:19:e1:7f:8f:58:9f:e8:6c:
ad:7f:87:da:00:df:07:69:f7:aa:cc:bf:ba:ad:65:
be:e5:ec:67:6d:92:ef:24:4e:bd:5c:a5:05:bd:55:
f3:92:e6:50:ea:f1:b5:9b:e9:ea:ed:5f:3a:79:e0:
97:50:da:90:75:69:2b:2c:0f:d9:4c:f7:fe:23:69:
27:2b:4f:c8:67:a3:96:7f:cb:db:db:81:5b:da:9a:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5E:0D:EF:F5:0F:DD:B9:67:1F:ED:6B:0C:F2:73:37:3E:3C:3C:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D823043EF4EF11EFA15D0C8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.101.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:59:d7:1c:4c:21:86:4d:91:56:ae:ec:c4:8b:c6:a4:e3:32:
2b:e7:a6:66:f8:23:32:8a:ae:32:95:43:89:39:40:64:88:b0:
70:20:e3:b2:b2:a7:97:a8:3a:2d:97:42:5b:3a:30:35:62:64:
ad:40:46:bf:c7:07:dc:5d:ce:6d:a2:5c:07:8c:5b:bd:5c:cf:
2f:a4:0b:8d:0d:f8:c1:2b:53:c1:93:16:ee:22:ba:bd:13:ed:
61:65:d1:26:dc:7c:ff:8d:af:90:ed:e5:ed:f5:5e:b7:55:4e:
28:da:7b:42:97:11:d7:fa:b8:f9:66:4c:4a:8e:4f:4d:29:82:
4e:23:f3:a3:9e:b6:72:72:8b:41:a4:79:c8:4e:a7:c4:0c:cd:
cb:c3:b7:79:f7:99:d3:23:c7:ca:bd:0b:fc:ac:1e:8e:40:7c:
86:70:bc:bb:1a:48:34:07:58:48:4d:61:b2:15:75:2b:43:6a:
e2:08:34:6c:ca:a2:64:63:5d:f6:0d:21:bd:f1:8b:22:59:65:
e2:e7:fa:2a:bf:fc:9e:8f:f8:00:5c:77:d0:0d:37:d9:21:72:
37:5b:20:a6:3e:aa:12:5c:5e:e6:5a:dc:42:6b:3b:e1:2f:bc:
0c:06:c9:85:1d:9e:2e:eb:06:ab:5f:dd:e5:df:fb:61:ff:81:
c2:06:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:16:21 2025 by rpki-client