Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B7A5BAF6AE11EFBE8F6283762E951A.roa
File: D8B7A5BAF6AE11EFBE8F6283762E951A.roa (raw, json)
Hash identifier: 15iqZR5JgGj4DI1YzRrVsKUWzMeWWXkpCmUw3/olzlI=
Subject key identifier: 9D:D1:12:E0:A4:5A:0E:3B:4F:CC:73:C3:EA:AB:4D:D0:25:6B:C2:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B7A5BAF6AE11EFBE8F6283762E951A.roa
Signing time: Sat 01 Mar 2025 15:07:09 +0000
ROA not before: Sat 01 Mar 2025 15:07:05 +0000
ROA not after: Mon 31 Mar 2025 15:07:05 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93839 (0x16e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 15:07:05 2025 GMT
Not After : Mar 31 15:07:05 2025 GMT
Subject: CN=67c3229d-200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:78:cc:9f:f7:0c:2f:47:ef:e4:62:8a:16:
8a:6a:8d:22:b1:4c:7b:fc:16:e4:23:c0:eb:ec:f3:
58:34:4e:a1:ad:65:ef:7a:ae:35:95:e4:34:e6:ec:
fd:08:8d:31:4d:82:c6:fd:83:8e:f5:c1:8e:99:15:
9f:04:c6:72:53:b8:bd:c2:3f:63:4f:bb:b0:b6:12:
68:8a:cc:d6:93:2c:09:63:ce:2e:a5:40:8e:7d:81:
84:99:59:da:e0:4a:0a:22:aa:b9:5c:29:90:cd:7a:
d8:3e:3e:44:9d:a7:90:11:60:2a:32:2a:4f:c0:e9:
d9:b3:66:12:42:d5:97:19:f3:d6:d5:0d:86:88:df:
e5:43:89:87:fc:3c:21:89:35:7b:12:75:86:f3:61:
a6:79:c7:3f:21:0e:f5:af:f9:09:fc:bc:55:a2:f7:
24:1d:b1:f4:b7:f3:83:73:b1:51:38:d5:a2:6f:00:
92:e5:c8:1b:d4:0d:c0:f4:7a:1a:e1:88:18:2a:a1:
a6:fb:ae:6f:94:58:7b:e6:1f:06:d7:a1:f5:78:f1:
71:1b:f8:e7:39:2e:b5:dd:5d:9d:ef:15:a9:44:9e:
57:fb:6c:5f:9a:b6:83:ab:97:bc:88:42:3e:4e:ed:
79:4c:ec:d7:8b:2c:8a:82:8c:70:7e:b6:7e:81:f2:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:12:E0:A4:5A:0E:3B:4F:CC:73:C3:EA:AB:4D:D0:25:6B:C2:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B7A5BAF6AE11EFBE8F6283762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0b:5f:85:61:86:e5:d2:2b:11:94:ea:a0:67:f7:9f:8b:fe:
e7:15:4f:e2:8c:c6:2b:8d:25:67:d6:35:0a:97:9f:06:f4:07:
d3:f6:64:31:6a:8c:c2:a7:72:1d:de:e7:96:89:40:7e:ce:4e:
6b:aa:95:5d:55:a6:ff:6d:7d:5d:55:ce:92:ed:fd:96:1f:2d:
6b:b5:d4:29:64:a3:b6:10:5f:c0:b9:ff:be:71:aa:be:a2:4a:
27:cf:b2:6b:24:fe:53:fd:bd:86:45:48:cb:61:aa:dc:38:73:
52:57:38:3f:c5:a8:d7:a4:d5:9d:98:70:a4:3a:1b:01:d8:2b:
63:30:a2:15:1b:b2:4b:e8:88:c7:1e:5f:69:78:20:6e:65:76:
e4:7d:41:04:ef:65:1c:08:94:e5:f0:b7:dc:0b:d9:72:d9:c0:
b5:ab:49:4d:da:b7:5e:83:13:9e:78:fc:4e:ba:d5:74:1a:66:
0b:02:8c:19:ea:f4:da:ff:06:97:61:13:82:3d:4e:07:6e:75:
25:92:39:23:7d:a5:e9:46:1d:43:5f:a6:6e:9e:be:c7:27:c1:
4e:9e:2e:c0:d9:78:d3:1b:1e:0a:88:0c:bc:41:88:4f:0d:d7:
7c:37:38:53:0e:05:6e:de:a1:3c:1c:4e:d0:73:f2:c1:aa:b4:
96:36:ac:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:48:24 2025 by rpki-client