Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBDA5C7CF5AB11EFB3AF5298762E951A.roa
File: EBDA5C7CF5AB11EFB3AF5298762E951A.roa (raw, json)
Hash identifier: CByAeVICbk4OQYipltHTWw+UpwGBQtNvu6uw6WX6dS4=
Subject key identifier: C2:5C:37:E9:74:10:49:3A:DB:65:95:A6:B9:8B:20:94:2B:B1:29:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBDA5C7CF5AB11EFB3AF5298762E951A.roa
Signing time: Fri 28 Feb 2025 08:13:42 +0000
ROA not before: Fri 28 Feb 2025 08:13:38 +0000
ROA not after: Sat 29 Mar 2025 08:13:38 +0000
asID: 147176
IP address blocks: 154.215.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92665 (0x169f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 08:13:38 2025 GMT
Not After : Mar 29 08:13:38 2025 GMT
Subject: CN=67c17036-c504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:1f:3c:0f:d0:eb:3e:71:1c:7e:5f:99:b3:
cd:c4:f9:be:79:4f:ae:f9:ae:4b:4c:81:39:a6:05:
2f:8b:4b:de:c8:0f:98:62:6a:5c:cf:c7:c2:77:83:
73:ad:6f:e2:62:e7:d8:d7:b3:36:b2:b4:69:d4:35:
b3:3f:c9:2c:d8:0a:bf:84:ff:84:bb:b8:49:41:02:
cf:6f:7f:b4:dc:f3:5f:7f:3e:00:c7:bb:44:79:b9:
ff:ea:37:44:92:8b:0b:ef:f3:ec:2b:33:7e:a7:9c:
63:a8:ee:85:e0:c5:4d:9b:e3:b5:1f:79:05:58:a2:
72:2f:b8:3d:72:d4:fb:16:4f:69:9c:bd:65:d7:bb:
5d:46:32:5a:35:e1:3d:3d:e8:8c:e3:5b:8b:fb:47:
11:2a:d6:ca:9a:6d:e6:16:1f:8c:93:a2:d1:af:40:
86:a3:ea:35:56:20:19:b1:87:9c:16:ca:31:1b:18:
1e:7c:92:3f:03:9b:74:40:af:5b:2b:e1:cd:71:05:
3a:98:08:70:2f:32:f1:fe:9a:21:3e:cb:3e:c2:e0:
f4:b1:36:9a:c3:26:2a:7e:f0:4c:5c:dd:56:85:a9:
12:68:90:a6:1c:5d:c7:fd:84:a2:8d:d8:16:6f:cb:
ba:42:9a:27:5f:a7:d5:20:35:ae:aa:d8:c3:a7:14:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5C:37:E9:74:10:49:3A:DB:65:95:A6:B9:8B:20:94:2B:B1:29:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBDA5C7CF5AB11EFB3AF5298762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:c6:2c:5f:5d:a1:69:7f:9b:97:48:18:a2:9f:00:ae:66:d0:
33:a5:c3:e4:44:90:f5:38:0b:49:5c:01:d5:b8:3e:fc:98:8f:
59:a3:a1:88:af:6f:a6:9a:9b:d9:64:a5:9f:90:aa:91:33:83:
03:0c:9e:20:a2:64:2e:d4:80:5f:79:d7:d5:e4:d5:30:91:5d:
9b:4f:96:6a:ea:29:4f:90:9c:c5:98:dd:d4:c3:8f:6c:c5:d1:
fe:0e:a0:ee:8a:29:e6:6b:93:dc:b9:79:75:40:89:59:1c:f6:
98:fa:30:90:f2:94:4f:bd:40:c2:0d:80:e2:bf:6f:f2:e3:cc:
9e:e9:ab:78:3c:3d:9b:00:dd:b4:4d:f3:80:e8:52:8d:b3:37:
a4:98:c2:d0:d7:34:9e:1e:81:bf:c7:66:1d:c3:66:e4:c7:c1:
38:bb:38:f0:86:60:a6:44:53:17:d9:2d:91:8e:4f:b7:cf:d3:
59:10:7e:5a:df:c8:eb:93:63:d5:53:19:26:b3:23:0a:49:68:
b2:e1:2d:59:e4:05:22:9c:7c:a3:42:ad:da:58:14:4f:35:c6:
79:74:a1:fc:b8:09:d7:30:68:1a:dd:15:2c:71:d8:fd:22:96:
ed:8d:a0:30:9a:e5:c2:17:c2:1c:86:98:58:02:0a:88:eb:e2:
0e:dc:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:29 2025 by rpki-client