Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF1B0E76F62511EF817AFC53762E951A.roa
File: DF1B0E76F62511EF817AFC53762E951A.roa (raw, json)
Hash identifier: nXwnNeYQpu8uZwp8229xqnrolSFxNqi3YaBMgqLuz4c=
Subject key identifier: 4D:0D:AE:2D:1F:8D:42:E3:68:3E:2F:49:66:CF:1B:48:4F:4C:DC:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF1B0E76F62511EF817AFC53762E951A.roa
Signing time: Fri 28 Feb 2025 22:46:39 +0000
ROA not before: Fri 28 Feb 2025 22:46:35 +0000
ROA not after: Wed 26 Mar 2025 22:46:35 +0000
asID: 62240
IP address blocks: 154.194.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93341 (0x16c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:46:35 2025 GMT
Not After : Mar 26 22:46:35 2025 GMT
Subject: CN=67c23ccf-1eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:93:d8:64:07:b3:52:28:ba:ce:28:a0:ed:
36:be:d2:78:3c:ba:40:c3:51:b4:2e:07:8b:09:17:
47:22:50:40:e7:ed:a1:a1:dd:17:21:b7:ed:9e:8a:
34:87:df:31:ee:2c:61:8e:80:10:f6:f1:2b:a4:37:
17:a8:2f:eb:84:68:63:77:69:51:e5:c5:fb:4a:a1:
72:bb:46:89:9c:76:5d:4e:e0:f8:3a:20:37:f7:5f:
2f:84:6c:e0:7f:8d:24:3d:a6:b5:50:6d:7e:a5:04:
4f:04:ed:1c:e4:ad:79:d9:1a:7b:b4:cc:3b:7f:07:
a7:2d:80:a6:6e:32:d4:8a:6c:bb:86:11:46:c8:c4:
8f:96:9c:97:e4:48:78:bb:13:cb:d5:cf:21:76:87:
f5:f8:a8:ff:02:8a:0b:04:d9:8b:4b:94:12:c4:02:
5b:22:84:51:9c:32:5e:63:6c:92:f2:63:ad:c8:c8:
b0:8a:bd:03:81:30:10:6b:32:ed:94:20:56:77:9e:
98:6d:bd:2a:c1:19:67:4c:67:70:f2:fa:b7:8f:d2:
90:1d:6b:86:c4:72:ab:17:ee:a3:71:75:ff:b5:a0:
1e:a8:74:9f:5f:19:e0:85:6b:79:85:3f:72:14:a2:
c1:49:39:d8:24:d1:46:be:06:54:4d:2b:bf:ba:57:
2a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0D:AE:2D:1F:8D:42:E3:68:3E:2F:49:66:CF:1B:48:4F:4C:DC:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF1B0E76F62511EF817AFC53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.81.0/24
Signature Algorithm: sha256WithRSAEncryption
00:64:e0:52:e1:ef:d6:a3:55:b0:d2:88:46:ba:73:a8:df:16:
e1:39:cc:9e:fa:59:36:7d:87:57:af:1c:ac:fa:b9:f3:03:e9:
0d:7e:6d:ee:5f:50:30:75:84:90:c9:95:25:d4:6b:8a:4f:11:
93:16:f0:c9:a9:7e:bb:37:1d:95:ab:35:4c:4e:d2:92:64:d5:
5d:14:7b:c1:16:bc:ed:12:8f:8e:04:46:ce:ab:80:74:62:fa:
c8:df:8b:5a:50:4d:61:54:ce:dc:6a:1c:cd:d5:d2:ad:3c:4b:
9b:b5:65:08:23:16:7a:13:c9:d3:3d:89:3e:c3:06:57:32:7f:
82:5e:49:63:af:71:a2:44:81:8e:6c:1c:05:5b:5f:ec:5d:df:
4b:2a:3c:85:6e:fc:0f:ea:41:d5:2f:45:c3:57:99:24:18:3d:
4b:94:75:28:6f:9e:96:e0:09:82:52:ef:6d:81:7f:85:ea:a1:
48:eb:af:cf:44:5d:e1:f5:0f:fb:b9:f1:67:36:f3:bd:52:31:
27:94:3a:b1:01:ee:b1:87:9c:ed:e6:5e:f7:ff:f1:65:84:f7:
17:6e:fd:94:b4:e1:13:6b:c0:a5:5a:30:c7:84:85:7d:3d:8b:
fb:a7:ab:9b:d1:b1:79:63:6a:a4:23:d8:66:92:6c:0e:64:ee:
f7:54:98:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:17:16 2025 by rpki-client