Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E62080E8F2C911EFA52C3344762E951A.roa
File: E62080E8F2C911EFA52C3344762E951A.roa (raw, json)
Hash identifier: vdG7ajy5SXSur5rcQGsX6hVLZPOO9QL8frsGTkEf4oE=
Subject key identifier: E1:24:D9:0D:A0:D1:EE:72:7F:BB:A2:63:E8:6A:F9:12:01:1D:6B:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E62080E8F2C911EFA52C3344762E951A.roa
Signing time: Mon 24 Feb 2025 16:10:43 +0000
ROA not before: Mon 24 Feb 2025 16:10:40 +0000
ROA not after: Thu 27 Mar 2025 16:10:40 +0000
asID: 395793
IP address blocks: 154.194.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89176 (0x15c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 16:10:40 2025 GMT
Not After : Mar 27 16:10:40 2025 GMT
Subject: CN=67bc9a03-41c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:b3:69:24:fa:e5:81:2b:59:fc:a3:81:d2:
5c:83:2c:0e:2d:79:e1:ab:76:97:e8:9b:30:2c:44:
cc:2a:ef:3e:3b:24:9c:68:6f:5f:26:d9:20:10:82:
64:04:34:a3:be:3c:57:c8:96:b4:71:c1:32:d8:83:
55:f2:5a:64:b1:8b:52:15:78:4b:87:bd:28:08:db:
9c:7f:61:6d:7a:96:0c:d2:9f:ad:95:d4:55:70:1e:
c0:7d:9f:bc:19:69:91:cc:82:ed:3b:6d:91:79:98:
8c:0a:c8:2c:96:2b:64:17:f1:d3:ef:ff:fd:9d:54:
43:4a:75:6c:14:e7:ef:75:92:08:2a:e5:0d:f7:12:
13:a4:b4:90:b7:07:c6:2a:bf:4e:71:11:1f:88:96:
5d:87:f9:a1:f0:2b:26:e0:85:d3:7a:e5:51:ad:33:
06:a9:77:77:6d:93:c2:25:8b:09:d8:e9:d8:0c:b0:
7c:96:41:37:42:02:33:bf:ad:e8:f8:8f:d4:90:5b:
c0:65:85:0d:8e:c8:77:d5:05:49:cb:c9:91:6e:7e:
b0:cc:49:cf:54:36:4d:c0:88:25:68:87:3c:53:22:
4e:c2:60:af:ca:4c:5c:55:2e:23:aa:04:d5:61:11:
84:77:20:08:73:6e:4c:87:14:3f:1a:4d:49:14:fb:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:D9:0D:A0:D1:EE:72:7F:BB:A2:63:E8:6A:F9:12:01:1D:6B:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E62080E8F2C911EFA52C3344762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:81:dc:e5:d4:2b:be:94:19:d3:02:ef:3c:ad:82:5b:f5:17:
5c:90:e1:ad:69:b0:11:f5:b0:5b:f0:58:90:e7:03:bc:f4:cd:
03:4f:f1:73:83:78:b8:92:4c:8d:df:4f:34:1b:80:89:80:c1:
47:50:8f:d5:27:82:fc:31:27:a2:4c:dc:f3:69:3e:fd:03:32:
5b:c1:ca:fa:d0:c5:83:5f:30:9f:1a:3d:3b:15:08:25:43:fa:
57:9c:bb:31:f4:5e:8b:f7:69:a7:32:90:1d:ec:1d:66:fd:bf:
72:e3:c5:67:df:86:92:94:27:6b:5a:73:ac:ab:c1:ec:a5:ed:
0e:27:68:4f:75:e4:ee:8f:51:00:b6:42:31:2d:29:7f:d2:8a:
d2:f0:b6:38:5c:ea:97:76:85:84:07:fb:67:82:72:5e:7d:d2:
8d:3e:1e:95:ac:f2:4b:3d:23:90:c8:92:5b:e8:85:1f:3f:a0:
14:cc:e1:0c:1b:f0:aa:60:76:d0:10:cb:3a:ee:dc:9c:af:d2:
4d:fd:5d:21:a4:c7:48:2f:d0:4c:eb:97:af:a4:c2:83:34:4a:
c0:8c:4d:9f:bd:a7:dc:72:05:11:c9:3b:48:8f:83:49:b6:37:
44:42:ab:df:3a:18:eb:a7:24:bf:f5:73:46:0f:42:0e:ec:19:
0b:92:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:59:05 2025 by rpki-client