Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA588B1AF85B11EFB3290261762E951A.roa
File: DA588B1AF85B11EFB3290261762E951A.roa (raw, json)
Hash identifier: AEmRISe5hXarcdoofJQ9R37jP91CrWXaYKfMgEKcC/8=
Subject key identifier: 43:A6:6A:4F:3D:ED:28:C2:68:88:9A:2C:AF:07:E8:65:6B:8B:25:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017109
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA588B1AF85B11EFB3290261762E951A.roa
Signing time: Mon 03 Mar 2025 18:18:06 +0000
ROA not before: Mon 03 Mar 2025 18:18:02 +0000
ROA not after: Mon 31 Mar 2025 18:18:02 +0000
asID: 202656
IP address blocks: 154.221.50.0/24 maxlen: 24
154.221.51.0/24 maxlen: 24
154.222.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94473 (0x17109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 18:18:02 2025 GMT
Not After : Mar 31 18:18:02 2025 GMT
Subject: CN=67c5f25e-4309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:ac:9a:c8:68:e3:15:d0:e1:cb:43:22:5b:
06:00:b4:27:32:96:26:c7:18:01:cc:bf:74:57:aa:
08:55:9d:52:1e:f7:f8:82:88:77:ed:03:76:e7:95:
1f:8e:56:bf:c3:40:fa:c7:4a:46:46:44:2f:c4:2b:
3a:57:25:af:db:cb:72:cc:48:69:e3:fc:4e:7b:66:
4b:fc:54:98:35:00:ce:a6:54:38:40:4d:9c:ab:4b:
89:aa:21:cc:47:38:1e:dc:1b:e5:d3:6a:13:7e:0b:
77:0a:39:57:01:85:28:99:44:6b:e6:03:52:a2:b6:
9a:b8:1b:c6:ea:97:fe:53:f0:7a:9a:98:e2:0e:eb:
0f:5d:dc:7c:3a:93:15:41:b9:09:5c:38:96:e0:e5:
ee:1b:98:5a:fe:22:27:8d:37:c3:69:c0:d7:36:cd:
16:41:16:60:59:9c:f5:64:30:45:0f:7f:a5:c5:2b:
94:82:7a:3d:9a:e4:bf:89:4d:2d:66:4d:b9:71:75:
c4:09:00:23:20:99:d3:64:56:79:b8:31:26:b7:19:
6e:31:b9:a7:81:aa:46:ce:c8:71:f8:71:93:3e:46:
97:2c:15:07:b3:de:15:f2:90:c4:ef:89:6c:15:88:
9c:2e:14:1c:ac:94:c2:f7:2f:ec:1d:4c:11:1c:1e:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A6:6A:4F:3D:ED:28:C2:68:88:9A:2C:AF:07:E8:65:6B:8B:25:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA588B1AF85B11EFB3290261762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.50.0/23
154.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e3:d8:41:cc:87:df:a3:0f:8f:16:2d:95:d6:5e:b9:77:77:
58:a4:ee:f7:69:71:82:a6:96:9f:e0:a7:f4:24:4b:22:cb:7a:
2b:0e:47:bd:2c:e4:ef:c8:c2:be:cc:af:52:05:13:fe:8a:fc:
5e:ad:73:13:5e:d7:a9:1e:75:59:87:16:eb:e4:b6:41:32:8f:
49:bf:0c:de:82:ff:83:74:0d:86:b5:d8:9e:50:8d:3a:ee:07:
62:3e:0f:ba:68:c6:fb:92:c5:7a:7e:16:98:ca:72:e6:74:19:
ad:ad:54:dd:4c:c5:26:ca:63:8b:cd:cb:7f:be:a7:40:1f:58:
a9:6a:1e:62:7f:68:66:65:d3:ba:a8:21:0c:68:49:36:5a:48:
99:df:25:c1:86:12:15:ca:4e:41:03:0b:89:50:76:96:ad:a3:
96:7e:92:57:5e:d5:f3:2a:e6:df:68:84:76:0c:55:de:6e:c7:
6c:70:ff:59:a6:92:cc:5d:d0:c5:79:c1:0c:93:2e:b5:fc:7a:
28:6e:b6:6f:71:64:c7:b9:c2:bf:17:79:af:f4:b0:25:04:bf:
f8:be:58:1f:23:f0:dc:d5:b5:f3:ef:66:8f:8b:c7:58:95:53:
2b:cb:5c:3f:97:03:bc:b5:98:34:7b:e3:5d:54:e4:62:a3:58:
6e:ca:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:55:28 2025 by rpki-client