Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD73F264F6BF11EF83ED2175762E951A.roa
File: DD73F264F6BF11EF83ED2175762E951A.roa (raw, json)
Hash identifier: RRdtzS/+FV4MHCC+gLZpYYO8N6S9UBv5TZInlbFFXzI=
Subject key identifier: 7D:16:30:61:7D:2F:EF:4B:74:60:9A:73:7B:1C:29:4B:ED:9B:2B:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD73F264F6BF11EF83ED2175762E951A.roa
Signing time: Sat 01 Mar 2025 17:08:59 +0000
ROA not before: Sat 01 Mar 2025 17:08:55 +0000
ROA not after: Mon 31 Mar 2025 17:08:55 +0000
asID: 202656
IP address blocks: 154.219.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93973 (0x16f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 17:08:55 2025 GMT
Not After : Mar 31 17:08:55 2025 GMT
Subject: CN=67c33f2b-c127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:5c:c4:e8:ff:8b:55:d2:2d:92:da:c4:f2:
9f:a9:fb:c2:bf:e0:85:fe:8b:29:18:4b:1c:f5:7b:
8e:b8:d6:2a:70:40:06:75:e5:13:53:25:75:b4:d2:
ec:1d:ff:2a:59:b0:37:52:d1:e7:0f:fd:9f:c7:ed:
eb:fd:a0:e6:38:42:08:10:69:22:a3:fb:48:50:2d:
ba:c2:88:23:e6:4f:2b:90:58:87:9a:5e:2d:8c:20:
20:ee:d9:c4:15:0b:d3:88:c6:75:af:a3:2f:18:66:
bc:ff:a8:21:fd:53:b7:78:af:8e:03:3b:17:e3:54:
60:0a:9f:d6:c8:b1:26:dd:52:4d:a0:ab:6d:b9:83:
82:63:18:b1:f4:25:09:2f:1a:d6:8d:3b:6e:ef:0a:
16:64:4c:a1:f4:3d:63:09:72:89:ae:49:7e:d1:ea:
4f:26:10:64:7f:13:e6:d5:2e:53:67:52:ef:08:45:
c7:1b:06:ce:73:23:a1:ce:4c:8c:52:6e:5e:fe:0b:
62:0b:9e:51:ca:fb:e5:43:18:49:5a:c7:43:97:91:
85:b8:96:a8:d1:96:5f:e2:7e:3d:57:4b:2e:6f:e1:
aa:8e:9f:e3:0f:5b:79:0d:a3:ab:92:8e:79:5b:1f:
39:0e:01:43:dd:b3:a2:69:4e:3d:b1:cb:3d:98:7d:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:16:30:61:7D:2F:EF:4B:74:60:9A:73:7B:1C:29:4B:ED:9B:2B:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD73F264F6BF11EF83ED2175762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8b:65:99:f0:4e:7c:fd:bd:de:8c:b9:48:2d:e5:e6:8f:94:
af:7a:71:ed:a3:b7:bc:2e:5b:df:01:f3:08:4b:eb:1d:52:7b:
e6:21:e9:fd:c7:19:90:5f:b6:57:6b:80:51:eb:cc:48:60:29:
77:82:47:d0:2d:36:f7:4a:26:9d:ba:e3:42:e2:8a:56:94:7e:
9d:a8:6c:dd:43:de:0f:eb:7a:19:3e:0d:a3:7d:22:34:79:af:
53:ce:13:51:ae:4b:80:ca:1d:67:96:90:5f:ed:f1:73:a8:f3:
11:e3:b5:1b:9e:21:5b:4f:0c:4d:20:04:ca:61:4f:6b:80:59:
48:c3:dd:00:24:74:a3:66:d6:58:1f:f5:32:0a:b9:f5:6e:68:
e9:ca:47:8a:96:22:aa:5f:5b:25:34:98:4b:ab:3c:eb:e4:57:
b9:8c:d8:f3:4a:c9:f7:56:ad:cf:30:67:02:4d:9e:8d:56:70:
d2:cc:97:8e:1c:8f:9e:d0:37:9d:9d:89:fc:bf:87:6e:ed:cd:
de:2e:24:01:0c:0e:cb:96:e3:e1:54:8b:4a:86:78:3a:47:bd:
7f:bc:a7:a7:51:34:f7:91:87:72:e4:a3:1f:48:18:cf:a0:ce:
9b:3d:7d:c7:4c:a7:e1:23:7e:dc:5e:ef:81:7d:8d:f0:7b:ea:
e2:da:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:43:15 2025 by rpki-client