Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E08E917AF52511EF94BB8F7D762E951A.roa
File: E08E917AF52511EF94BB8F7D762E951A.roa (raw, json)
Hash identifier: M1wltp3DQIvh4ZYaFkYFYE+K+6g5PMxlQbXnEiJfwMU=
Subject key identifier: 11:25:9F:22:80:25:58:DA:E4:76:44:63:0F:02:6C:F2:7D:D4:31:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016944
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E08E917AF52511EF94BB8F7D762E951A.roa
Signing time: Thu 27 Feb 2025 16:14:10 +0000
ROA not before: Thu 27 Feb 2025 16:14:06 +0000
ROA not after: Fri 28 Mar 2025 16:14:06 +0000
asID: 395793
IP address blocks: 154.193.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92484 (0x16944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 16:14:06 2025 GMT
Not After : Mar 28 16:14:06 2025 GMT
Subject: CN=67c08f52-d828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:d4:77:27:8f:2a:ad:80:9f:87:df:fd:20:
6c:f5:7a:64:40:28:f8:de:4e:2c:a4:79:00:e7:ef:
55:cc:df:d0:ab:80:0a:22:69:96:b4:78:be:03:b6:
cc:fd:da:28:e5:00:70:a2:3a:cb:8f:9b:c0:ce:63:
d6:36:09:c6:21:99:48:37:8d:c6:9d:4d:d6:b6:20:
dc:65:b8:fc:86:82:44:ed:6d:9e:d7:27:32:8f:58:
e3:2a:c9:d2:ce:f4:cf:62:9d:6b:d7:84:80:97:b4:
2d:cc:82:e0:67:5e:68:b1:35:80:51:05:47:cb:77:
f0:a2:89:1b:84:a5:84:03:d1:ce:b5:ea:9e:b3:30:
d5:f6:5f:b5:f3:71:24:5b:72:64:3e:e5:29:5d:75:
35:7f:95:a9:ab:e9:a7:b8:28:6f:7f:a4:77:d3:9f:
bf:76:66:de:f9:dc:a4:e1:de:f5:a4:12:94:ae:49:
b0:f5:00:5c:df:c9:e7:3c:7c:fc:02:e2:b7:00:60:
72:6c:15:23:dd:ef:0d:00:32:b5:0b:70:10:7e:2a:
d9:57:b3:c0:96:10:e3:61:b6:99:58:de:1c:5c:9c:
c4:a7:9d:ff:b9:7b:89:7a:96:8a:3e:87:47:f2:da:
15:a9:3f:1a:b1:02:2a:f4:8c:cc:45:4b:d7:92:50:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:25:9F:22:80:25:58:DA:E4:76:44:63:0F:02:6C:F2:7D:D4:31:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E08E917AF52511EF94BB8F7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.103.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:c9:33:3c:f1:02:6c:58:2a:64:f6:03:fc:90:ff:c2:98:54:
69:12:45:6c:ae:ee:53:30:70:5c:c6:64:af:5e:2b:74:b5:0e:
7d:e0:bf:52:bb:f1:f1:25:eb:9a:6d:9d:2c:6a:bb:1c:06:fd:
56:13:c8:8c:c7:37:72:97:9b:3d:60:a4:dc:f0:f1:75:6f:32:
13:7d:64:97:e7:7f:fe:cd:ab:a7:5a:4c:cb:08:07:74:eb:05:
d8:56:50:5c:9d:fd:88:13:0a:e6:f5:16:bd:1e:9b:75:24:7d:
40:a9:bd:8d:dd:04:e3:50:13:07:0d:ed:97:ab:40:b1:ef:d9:
da:7e:06:04:9f:24:53:70:8d:d8:d4:ae:c3:f9:26:c5:fc:89:
11:b4:06:f7:55:bb:ba:a5:89:df:72:30:65:80:8a:87:44:6a:
04:f0:ff:e3:2a:e5:b7:99:17:d7:ad:c3:47:f3:b3:16:36:85:
41:9e:72:4b:a7:f4:e8:cd:1a:fb:05:e3:a4:01:83:94:32:3b:
77:85:ee:f1:fd:51:37:b4:b8:ad:b4:1a:bf:6e:0b:0a:f8:e7:
6e:1d:9f:c1:52:de:08:e8:fd:19:d5:ae:dd:6e:43:0d:22:cc:
f6:2b:dd:3e:e9:5a:ba:66:9f:e1:d1:53:c0:43:84:02:45:fa:
eb:58:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:34:39 2025 by rpki-client