Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9BBD9E8F69711EF8917136A762E951A.roa
File: D9BBD9E8F69711EF8917136A762E951A.roa (raw, json)
Hash identifier: yWqxpSU+DMo9kxztmZpHtf8lE4RTc8SwyrlfOSnbqm8=
Subject key identifier: 1E:A4:E8:36:CC:62:7F:63:5B:D4:51:E3:D1:C4:AB:F1:82:34:53:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9BBD9E8F69711EF8917136A762E951A.roa
Signing time: Sat 01 Mar 2025 12:22:33 +0000
ROA not before: Sat 01 Mar 2025 12:22:29 +0000
ROA not after: Mon 31 Mar 2025 12:22:29 +0000
asID: 202656
IP address blocks: 154.220.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93754 (0x16e3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:22:29 2025 GMT
Not After : Mar 31 12:22:29 2025 GMT
Subject: CN=67c2fc08-58c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:12:63:03:30:51:e7:17:7d:12:30:ff:8d:
13:2e:90:ef:f4:46:a4:b9:6f:d0:92:fe:01:a3:01:
97:31:ec:2f:dd:f3:41:e4:6f:32:af:3a:02:d9:1b:
52:9a:2b:cf:38:45:dd:1f:a6:03:fa:5e:29:73:4b:
1a:95:4e:c0:73:65:76:5e:9e:76:e1:83:74:4b:e9:
0b:a9:bf:93:83:ec:62:c6:a7:25:13:f1:72:18:0e:
a3:14:4c:e1:57:60:e5:6a:50:ce:ec:44:5e:bd:62:
64:83:6b:d9:2f:23:87:9a:60:f1:d7:40:b4:c4:0c:
ca:94:4e:5c:6e:19:b9:33:83:12:01:9d:1b:5f:7c:
9a:16:90:f5:f5:f4:69:86:00:c2:42:d3:1c:6e:a8:
69:4d:90:12:fa:4e:df:9c:40:b2:73:57:e6:06:4f:
68:3d:cb:a6:b4:77:e5:1d:b3:d4:91:08:95:b7:54:
17:2e:9c:fe:2e:51:04:e1:20:33:a2:0c:e2:7f:a7:
fc:9b:53:b1:55:32:15:9b:b8:5f:c2:44:ce:cd:55:
83:b7:6c:4d:75:a0:52:75:4b:a6:5a:bc:d0:4b:7e:
6b:a9:62:45:7e:4d:4f:1e:01:28:c9:a7:0d:2d:a0:
9f:41:2e:b7:fa:d9:e6:4b:9d:8f:37:dc:69:8c:b0:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:E8:36:CC:62:7F:63:5B:D4:51:E3:D1:C4:AB:F1:82:34:53:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9BBD9E8F69711EF8917136A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.1.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3e:ee:56:24:18:4f:69:f5:1e:32:33:bd:e3:1d:3e:d4:c5:
04:65:56:c7:c8:ae:fb:f3:51:e5:62:b6:cd:9d:d2:d6:fa:0b:
06:33:ab:90:27:22:37:28:79:78:72:5e:eb:86:20:1e:cb:dd:
4e:5a:9e:f9:8c:9c:cd:70:2c:79:05:ea:b3:1a:ce:ab:dc:84:
69:68:a5:f2:1f:be:10:5c:5d:d9:24:ef:f8:4d:09:1e:f6:68:
8a:b8:64:d4:f0:cc:6a:7c:b2:35:24:a5:92:eb:c9:af:a2:9e:
c1:2d:7d:20:51:07:0b:5c:19:3f:61:f9:ec:4c:f4:16:43:d9:
d5:e0:04:ef:72:3f:30:82:a4:89:03:af:7e:89:41:80:7e:18:
78:90:c2:c6:df:9c:21:f4:62:24:79:1d:d9:59:c2:a9:e4:70:
0d:be:26:9b:24:c9:74:9a:9d:9d:61:78:0e:85:5d:2a:cd:39:
f0:a2:0f:8a:7e:87:60:06:d3:13:71:8d:86:d2:fa:4c:1e:ef:
d5:c8:74:24:7f:7b:e2:9e:85:24:d5:ac:0e:d6:1e:82:f4:d5:
80:0a:e3:0b:0d:b7:a8:c1:16:df:70:8d:04:b8:a5:66:08:15:
f8:54:35:01:a5:86:46:67:30:1c:01:35:e2:38:e6:72:2a:1e:
c7:53:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:07:34 2025 by rpki-client