Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3D2C968F29C11EF8E88E5A2762E951A.roa
File: E3D2C968F29C11EF8E88E5A2762E951A.roa (raw, json)
Hash identifier: ubyrdse0K2tVNk/3CG944bWsKCfuRksZJKmTC06kOxc=
Subject key identifier: A6:86:58:6F:CC:71:CF:86:2E:6F:94:63:03:44:6E:DD:8F:72:F7:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015BC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3D2C968F29C11EF8E88E5A2762E951A.roa
Signing time: Mon 24 Feb 2025 10:48:32 +0000
ROA not before: Mon 24 Feb 2025 10:48:29 +0000
ROA not after: Wed 26 Mar 2025 10:48:29 +0000
asID: 5065
IP address blocks: 154.94.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89024 (0x15bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:48:29 2025 GMT
Not After : Mar 26 10:48:29 2025 GMT
Subject: CN=67bc4e80-b573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:9a:8a:e9:d5:fc:ef:6e:3a:36:ff:06:d4:
44:5c:d9:6d:38:12:d6:33:25:a2:18:fa:90:8b:f7:
46:c2:fb:85:52:e4:7e:03:8c:ad:0e:62:13:93:51:
5b:7a:ac:f0:e8:6f:55:b8:7f:76:2a:28:0e:9f:e2:
44:92:ee:1c:fa:35:1c:cb:d0:32:d9:e1:3a:ca:b8:
79:72:10:ed:0d:3c:bb:45:4c:32:33:be:a3:00:96:
9b:95:17:63:b2:40:86:2a:a6:05:65:7c:61:8f:c9:
75:57:f4:3d:2f:da:ba:ae:88:0b:3b:19:98:96:d5:
42:64:00:68:dc:c9:86:1c:33:50:03:a8:bd:09:ee:
75:3c:01:5a:a5:7c:01:1e:66:19:19:6d:41:e9:d6:
74:91:4a:38:6a:e6:a2:be:26:38:6f:49:d0:2b:95:
91:c7:3e:5b:45:ee:db:dc:37:44:c4:ff:23:3f:9f:
12:19:37:6e:52:4b:6f:9b:6b:ee:72:80:6d:29:d1:
d3:e1:11:e9:49:31:73:7c:5c:15:81:6c:27:ba:35:
5b:02:32:d8:7b:26:68:7d:71:e9:14:97:45:b4:c3:
58:93:de:a0:ea:d7:f0:c3:74:61:eb:9c:45:33:39:
34:2d:0a:39:9b:8c:eb:43:dc:c6:77:2c:82:2c:c0:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:86:58:6F:CC:71:CF:86:2E:6F:94:63:03:44:6E:DD:8F:72:F7:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3D2C968F29C11EF8E88E5A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.52.0/24
Signature Algorithm: sha256WithRSAEncryption
87:53:9b:49:87:57:09:0c:d4:c1:8f:1a:15:bb:bd:57:d1:27:
7a:e8:e2:99:0f:f6:57:52:d9:3d:1d:93:62:53:47:20:91:36:
e8:66:63:59:b0:bd:b2:a9:79:b9:f5:a9:a8:29:6e:ba:ed:2b:
2c:12:62:3d:d9:e3:22:e2:5f:bd:48:81:ff:bd:03:fa:39:1b:
3f:8f:d8:e8:3e:23:df:47:49:76:71:48:0c:20:b8:3d:b3:68:
51:74:15:41:5b:50:b8:7f:cb:d0:60:d5:94:31:f8:a7:a7:9b:
da:72:6c:59:97:cf:5c:b5:03:a2:eb:a1:9f:31:e2:2b:e6:61:
5d:f2:82:5e:24:ac:fc:45:d2:89:98:81:00:2c:50:14:cc:f2:
86:c6:8b:95:1a:07:a3:01:f7:3d:a5:48:8b:d3:44:09:ed:87:
84:ea:2f:a0:0c:2b:80:10:d9:ac:aa:c2:d7:ef:6c:79:f3:98:
92:aa:7f:c3:9f:65:1d:ec:55:ba:5c:58:e4:f4:8a:0d:26:4f:
49:fd:13:e8:5c:ea:d0:5d:06:f6:aa:84:f2:4a:bd:cd:b2:4d:
c4:84:18:24:e7:2d:98:75:7e:8d:69:ad:8d:b6:a4:1a:3f:5f:
34:f0:ae:0d:6e:d6:ec:05:e6:5f:7d:d8:3d:ca:d2:fa:4d:58:
5e:28:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:16:17 2025 by rpki-client