Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC1B8038F67611EFB702D386762E951A.roa
File: DC1B8038F67611EFB702D386762E951A.roa (raw, json)
Hash identifier: BHC3okQWKGXfWuNIxBc77c0O/0gcXprjLGbigqkyfMY=
Subject key identifier: 91:3C:A8:9E:14:55:68:F2:9F:18:1A:FA:B3:14:86:7B:26:B8:2A:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC1B8038F67611EFB702D386762E951A.roa
Signing time: Sat 01 Mar 2025 08:26:23 +0000
ROA not before: Sat 01 Mar 2025 08:26:19 +0000
ROA not after: Mon 31 Mar 2025 08:26:19 +0000
asID: 202656
IP address blocks: 154.219.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93526 (0x16d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 08:26:19 2025 GMT
Not After : Mar 31 08:26:19 2025 GMT
Subject: CN=67c2c4af-73dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:71:b3:e2:d0:ea:bb:43:a5:30:e7:d9:93:
d1:51:28:54:a1:64:8e:9c:40:4e:7c:9b:7a:3f:93:
53:d6:b5:91:3d:a9:14:ee:01:71:bd:61:6a:14:41:
00:5d:38:cc:87:8c:dd:dd:7a:5f:f1:2d:95:2e:3d:
cd:50:44:29:69:03:24:14:78:cc:0d:df:ff:92:e1:
e7:a6:43:62:07:80:32:b1:dd:69:f8:a6:3e:06:fe:
ed:8b:73:20:ea:c1:48:6d:36:44:f6:31:04:25:3b:
c7:12:fc:92:32:2b:a8:10:d4:40:ae:bc:82:23:cc:
d7:a5:25:91:7d:ac:dc:8e:48:c8:b3:73:8a:f0:03:
6d:1b:68:ac:bc:b0:8e:72:f5:10:3a:fb:21:cc:0e:
e4:37:cc:c2:dc:1b:64:53:85:d8:7f:0e:91:01:cc:
06:78:a4:5c:64:9a:7a:14:8f:b6:30:c5:d6:34:e7:
33:0f:e6:02:9c:2f:7a:20:77:e6:03:3a:ba:fb:98:
3a:cd:ff:ff:e0:fa:09:df:1f:f6:8e:5d:15:fe:49:
1c:12:1d:b5:bb:f3:96:e6:fe:ac:1a:9c:10:2d:26:
7b:69:09:a8:2c:9c:b0:f6:40:3f:be:7e:4b:22:47:
9c:33:62:29:a1:56:26:da:71:ca:3d:9d:6a:67:f2:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3C:A8:9E:14:55:68:F2:9F:18:1A:FA:B3:14:86:7B:26:B8:2A:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC1B8038F67611EFB702D386762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.230.0/24
Signature Algorithm: sha256WithRSAEncryption
85:95:be:e5:ba:b9:32:0d:04:89:8f:37:76:5a:be:eb:21:fb:
27:3a:2b:84:85:98:a7:3b:c2:ea:d3:cc:70:d8:f2:6b:6b:f0:
5f:3f:4d:13:13:b3:6d:5d:4e:c5:69:fd:15:06:1a:af:bc:71:
d1:b7:a9:4b:cd:96:a2:a6:c3:79:fe:c9:95:f2:31:87:85:a7:
57:a3:c3:3a:aa:48:40:3f:85:3e:0a:d1:cf:4e:24:f4:e9:88:
72:38:50:5e:e7:d4:28:c2:66:15:51:92:31:e4:8f:8e:f3:08:
5a:cb:26:88:a4:23:5e:42:eb:e9:83:2c:f8:5f:f3:75:a4:49:
d4:a4:db:bb:a6:0d:79:b7:f4:c2:15:58:d6:00:f8:39:84:86:
95:a5:04:a6:8f:48:8e:b6:b8:c4:6f:64:c9:97:a4:4d:91:31:
8d:d1:b9:a3:b5:23:21:c6:2c:d0:a7:7f:12:dc:03:44:0c:4a:
5e:00:8b:ac:0c:18:45:d2:95:2d:8f:c1:96:e4:3e:58:07:f6:
72:34:c6:85:da:ca:c3:ab:4f:63:e2:28:b5:77:fb:d2:88:ac:
1b:59:19:93:e5:4a:a5:f4:17:a4:9f:42:82:f4:84:41:d2:59:
41:8f:90:60:25:bf:e0:05:91:93:b7:ce:f1:fc:ec:e8:04:89:
46:a9:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:39:37 2025 by rpki-client