Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7D85206F81611EF9FD4E58E762E951A.roa
File: E7D85206F81611EF9FD4E58E762E951A.roa (raw, json)
Hash identifier: /9R1+Hbggfm1Rr3p1ougF1adkGVlveL+ku6/OMFZ7Z4=
Subject key identifier: 4A:98:1C:3C:CA:5F:0A:E0:72:4A:00:D6:AD:FA:E2:4F:EE:BC:16:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7D85206F81611EF9FD4E58E762E951A.roa
Signing time: Mon 03 Mar 2025 10:04:33 +0000
ROA not before: Mon 03 Mar 2025 10:04:29 +0000
ROA not after: Mon 31 Mar 2025 10:04:29 +0000
asID: 202656
IP address blocks: 154.219.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94190 (0x16fee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:04:29 2025 GMT
Not After : Mar 31 10:04:29 2025 GMT
Subject: CN=67c57eb1-e664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:9a:be:1a:9b:9b:18:4b:2c:82:1d:b2:b5:
0c:61:19:27:e1:b9:bb:bd:00:fd:48:00:80:db:70:
c6:9e:70:f3:4a:71:e4:8d:25:25:21:c6:32:f2:32:
52:41:0a:20:94:f0:39:f7:49:45:8b:8b:04:ce:fd:
bd:83:de:fe:a9:ad:b5:d4:c1:c4:f2:42:97:85:49:
6d:0b:5b:80:12:73:50:20:63:45:9b:c6:17:9d:a7:
c0:c1:7d:22:96:4e:a6:e2:87:a8:44:3e:5f:0b:e4:
40:f6:a2:1c:da:c8:1b:aa:c2:fd:48:a9:b4:7c:be:
df:33:4c:97:3b:cd:f7:2a:22:70:23:db:8f:09:41:
58:fc:95:8b:d3:1e:81:f6:8d:ca:8e:e8:27:c8:9a:
2c:05:b7:d4:45:2e:17:e9:ea:16:44:a8:0a:37:c4:
f2:a1:44:49:aa:a0:4f:c7:68:72:4d:1d:56:27:ec:
a4:a0:62:b3:94:e6:b3:60:a4:77:85:12:15:89:73:
27:0d:24:2b:06:75:69:bc:77:5a:0b:15:4c:43:c8:
14:c5:82:3d:57:9a:86:9d:cc:41:75:20:96:20:1b:
c9:47:53:04:c7:1d:ea:19:cb:16:53:30:5f:ed:fd:
a3:d4:ab:82:a8:18:5f:ba:1d:7d:8e:4a:6c:62:5a:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:98:1C:3C:CA:5F:0A:E0:72:4A:00:D6:AD:FA:E2:4F:EE:BC:16:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7D85206F81611EF9FD4E58E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.16.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bb:0a:5f:1d:c9:00:c6:99:d5:d3:f4:94:44:ae:58:44:b2:
5c:23:26:9e:52:55:e0:25:71:f2:d9:94:50:c1:8b:d2:ad:8e:
93:41:f1:10:a6:5c:3a:be:b5:f1:c7:9f:09:1c:3f:7e:78:f8:
a7:32:66:93:6e:07:cd:2a:4c:b7:d4:76:f3:39:91:31:8d:36:
1d:bc:5d:cb:38:b7:e4:d3:5e:32:b7:5a:50:84:29:6e:39:15:
29:86:35:e7:03:69:5f:dc:57:da:a2:93:00:de:08:09:8a:ec:
5c:e9:e0:63:03:d2:24:08:4f:fc:9e:69:57:d4:86:3c:56:f8:
48:d9:fd:6f:ec:de:37:1d:fd:18:42:b2:d4:de:35:9e:d8:b3:
69:f2:4d:a4:6e:48:8a:cc:2c:35:2f:31:27:78:ae:a5:bb:23:
a2:41:4e:47:a7:cf:4f:d8:41:9a:4a:62:5b:3d:a6:4a:16:55:
cd:56:10:c7:d2:49:d3:69:3f:55:bb:13:6c:b0:9f:fc:d8:95:
f5:5d:99:d9:c6:1a:50:8d:10:26:73:51:de:7c:cb:25:63:93:
47:7b:df:95:f7:4f:b9:de:af:81:59:54:02:fc:d5:2f:bc:22:
fb:9b:6c:f4:c3:65:06:9a:cd:af:0f:c6:9a:85:e4:71:15:f5:
29:bf:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:29:34 2025 by rpki-client