Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E495B0D4F62211EFBC27B6BD762E951A.roa
File: E495B0D4F62211EFBC27B6BD762E951A.roa (raw, json)
Hash identifier: CETy3H72gZZA6r7yuU00mBBve8l4atF8GNlEoc0s/Ic=
Subject key identifier: 4E:50:81:94:2F:86:98:60:3D:BD:FC:47:C0:DA:B1:9A:D9:06:F5:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C8D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E495B0D4F62211EFBC27B6BD762E951A.roa
Signing time: Fri 28 Feb 2025 22:25:20 +0000
ROA not before: Fri 28 Feb 2025 22:25:16 +0000
ROA not after: Mon 31 Mar 2025 22:25:16 +0000
asID: 5065
IP address blocks: 154.86.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93325 (0x16c8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:25:16 2025 GMT
Not After : Mar 31 22:25:16 2025 GMT
Subject: CN=67c237d0-6fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:83:4a:66:fc:62:e3:14:4d:e4:d5:d2:64:15:
30:75:6a:5e:04:a4:dc:c0:bc:09:28:22:f0:5e:f2:
8d:77:46:f0:2a:de:99:9d:69:ce:31:3d:6b:9a:a9:
bb:80:1a:a4:86:d1:b1:7d:46:85:d5:80:96:39:1b:
67:2d:54:0f:dc:2e:2a:3e:fb:5b:70:78:29:9e:c1:
07:50:3c:91:e0:50:0a:b7:75:36:83:af:c0:81:ec:
49:73:f3:bf:67:1e:26:b4:cc:a4:1c:b4:b2:93:b3:
5a:53:3b:d5:63:5d:f8:66:6b:6f:c1:27:ba:26:ae:
96:f4:bd:cb:9b:45:02:e1:4b:fe:8d:77:6f:c2:66:
3c:fd:56:69:9a:ed:64:b3:6f:cc:d4:c9:d0:a5:f5:
59:2f:44:96:25:36:ac:f6:5a:6a:f6:5c:6f:24:a7:
89:af:02:3d:32:08:58:ee:15:1a:4a:45:87:be:05:
58:68:e4:e4:ec:72:4c:03:d7:a3:26:37:36:94:23:
93:f9:ff:b2:3f:39:42:e0:01:13:d1:29:c6:89:c5:
f5:7d:32:c3:75:46:80:18:4b:0e:8d:b6:d4:64:ec:
e6:73:2f:35:73:bd:1b:53:42:25:f9:9b:24:a3:34:
34:13:ac:0e:eb:ee:4c:ab:7d:22:8e:5a:0c:51:ce:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:81:94:2F:86:98:60:3D:BD:FC:47:C0:DA:B1:9A:D9:06:F5:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E495B0D4F62211EFBC27B6BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:e5:c3:99:af:cf:9a:8e:18:7f:56:e3:64:87:ce:d1:12:83:
cc:fa:fe:7a:54:df:98:d1:23:ae:1c:fc:11:54:c4:dd:f3:5b:
c8:7c:fd:df:bb:14:35:9a:bf:62:38:b8:c3:dd:e2:e9:5f:43:
68:ff:a9:ce:40:50:2b:b9:97:0e:a5:8a:ce:94:9d:8c:43:25:
dc:34:a1:9b:dc:37:9d:9d:7c:28:78:5a:5c:11:74:ef:2b:c5:
0d:e8:ab:8a:00:30:81:67:68:42:46:ef:f9:09:25:cf:12:63:
5c:5d:f1:90:8a:a1:5c:85:d3:4d:6a:b6:da:05:c8:8d:a0:54:
61:70:28:64:90:58:d9:bf:dc:df:15:84:a8:5e:39:12:76:ab:
a5:73:ee:43:b3:9d:35:06:91:87:f7:13:f5:02:f0:f9:8d:3c:
1d:85:f4:93:45:01:91:d7:f6:31:5a:56:97:a8:7a:c8:dd:22:
47:6f:e6:42:9c:24:0b:77:10:06:7c:2b:01:6e:c1:ff:55:e0:
81:59:0c:27:4d:1c:0c:63:9c:e8:1b:64:32:6c:06:a1:bc:31:
73:29:c9:f0:bb:bd:8b:17:43:02:17:85:a8:31:aa:f5:7f:53:
e0:82:e7:6d:31:7f:da:2f:ee:0b:d1:eb:fb:74:d0:23:cd:36:
94:4d:91:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:19:28 2025 by rpki-client