Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B4A000FB4511EF8252199C762E951A.roa
File: E1B4A000FB4511EF8252199C762E951A.roa (raw, json)
Hash identifier: ZgJkU3wL97xFtGa42BLaEzNvuCk+CvtIZ/flzxnHXl8=
Subject key identifier: CD:25:28:CA:B5:22:6A:F4:57:53:41:B5:08:F8:D3:F3:48:77:CC:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B4A000FB4511EF8252199C762E951A.roa
Signing time: Fri 07 Mar 2025 11:18:23 +0000
ROA not before: Fri 07 Mar 2025 11:18:19 +0000
ROA not after: Fri 28 Mar 2025 11:18:19 +0000
asID: 141167
IP address blocks: 154.212.140.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94967 (0x172f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 11:18:19 2025 GMT
Not After : Mar 28 11:18:19 2025 GMT
Subject: CN=67cad5ff-bbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:3f:39:cf:e8:1a:29:db:c8:50:05:d4:c4:
f7:f5:c5:5c:7e:f8:27:b6:fb:60:d5:d0:f9:81:90:
6a:b9:8e:9d:0e:36:0c:39:b4:6c:14:8e:8b:76:56:
b9:7d:7b:70:50:20:e5:cd:13:99:8d:0a:97:62:9c:
13:6d:b7:68:fa:d6:8e:5c:0c:23:33:4a:67:73:96:
1e:3b:a3:1f:27:86:1f:2c:bd:4c:a3:1b:de:36:4b:
28:6f:7a:27:f7:87:f0:ea:f3:44:40:a1:f5:a8:a6:
f4:87:9d:41:d3:fd:ac:ab:38:d0:2c:ff:cc:ac:70:
76:08:75:2e:d9:78:63:95:56:76:04:13:31:4e:1f:
d6:20:f8:6a:4f:23:43:af:24:43:1e:12:f2:f4:4a:
ee:91:88:1c:d7:14:81:57:d4:20:ac:aa:24:28:59:
4c:1b:34:92:3d:8e:62:3e:51:0a:85:f5:fd:d3:90:
da:2f:57:eb:e1:51:7e:a3:02:a8:c6:53:83:6c:8d:
ba:59:95:7a:99:c5:6f:ca:cf:33:96:e3:c8:67:1a:
c2:7a:6e:45:7d:22:53:8f:18:25:43:6d:2f:fa:3b:
0e:53:21:9f:38:b8:76:08:c8:f9:69:5e:3a:30:20:
09:87:10:9a:6c:56:9f:3a:2c:a3:af:8b:7a:77:fa:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:25:28:CA:B5:22:6A:F4:57:53:41:B5:08:F8:D3:F3:48:77:CC:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B4A000FB4511EF8252199C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.140.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:44:74:38:8e:9d:52:76:05:2a:d9:b0:e2:46:47:93:26:2e:
e9:96:83:8b:bc:f1:c5:ac:21:25:27:86:91:24:25:a5:d6:33:
08:54:ae:f6:91:6a:e8:18:c6:fb:db:d4:11:bb:88:1d:06:29:
a6:90:ff:0f:02:e2:9b:ee:a8:71:51:cf:9c:05:fc:d8:74:c5:
7f:27:70:01:49:a8:91:e1:3a:8c:6a:cb:8e:dc:62:9e:9d:84:
37:b9:8b:98:8f:d5:57:fe:ca:4c:99:1c:35:fb:fe:8b:13:eb:
f8:8b:fa:85:ad:ab:75:53:38:57:3a:e9:f5:05:ee:98:53:1a:
da:37:62:68:bd:55:36:50:52:5b:6b:9c:80:18:9f:7d:83:07:
63:0f:48:e7:ec:48:b0:ee:0a:35:e1:20:84:bc:02:fc:fb:99:
25:33:02:ae:b9:ca:0a:15:9c:48:c8:0e:b2:9b:17:51:68:6b:
93:70:2e:4e:4c:21:72:95:6f:e9:8e:14:ad:32:ff:19:ff:97:
fb:ae:be:17:2d:84:03:27:a8:e9:15:f0:ca:8b:4f:a8:26:8c:
c3:52:fe:a2:07:32:2c:0d:72:03:44:1f:95:d4:2a:e6:24:8d:
e3:72:6f:0e:e0:20:b1:75:b8:54:19:71:22:de:7b:a0:da:07:
21:5e:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:13:59 2025 by rpki-client