Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECC077BAF5B611EF93046865762E951A.roa
File: ECC077BAF5B611EF93046865762E951A.roa (raw, json)
Hash identifier: yDeZhEOxpeNXkzFAgTd+ekqA5Fz2CFzWnvE7Ao7oBhY=
Subject key identifier: 5D:00:90:C1:6B:D9:A3:23:9B:46:37:B9:BE:B9:76:BE:9F:2E:9B:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A4D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECC077BAF5B611EF93046865762E951A.roa
Signing time: Fri 28 Feb 2025 09:32:28 +0000
ROA not before: Fri 28 Feb 2025 09:32:24 +0000
ROA not after: Mon 31 Mar 2025 09:32:24 +0000
asID: 398823
IP address blocks: 154.213.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92749 (0x16a4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:32:24 2025 GMT
Not After : Mar 31 09:32:24 2025 GMT
Subject: CN=67c182ac-afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7f:27:ae:9d:73:de:77:1a:74:ee:bc:79:87:
a5:d3:9f:d2:37:e5:c6:0d:bc:01:30:ab:68:05:2a:
18:dc:11:34:4e:6d:3b:4e:a2:75:86:fc:3a:40:67:
3d:23:30:05:90:58:47:fc:a2:b8:ed:7b:f1:1f:07:
ef:37:6d:3b:8a:45:18:2c:07:bc:f1:f7:57:35:b9:
d0:1d:73:98:43:71:9d:16:3c:35:99:41:08:c1:b8:
c4:db:bc:92:f6:ac:92:4d:d9:df:f7:9d:87:2e:e1:
c6:aa:ea:36:07:31:79:6d:78:68:7b:d9:53:f3:d0:
85:1a:24:57:bb:fb:1b:e9:57:10:25:65:29:f9:37:
30:36:a1:af:1e:a9:e7:91:66:94:25:e9:bf:c5:0e:
b7:d3:c9:26:f3:c6:89:75:df:ee:b8:18:01:b4:7c:
9b:2d:f1:47:48:58:13:85:19:1c:0c:20:82:8b:52:
d0:95:7a:87:c0:ad:fd:ff:20:2b:d1:bf:98:65:e8:
2c:80:81:67:91:39:26:72:a8:3a:22:41:89:ee:c0:
00:50:ee:6f:c5:11:26:f4:64:ed:da:f5:5a:0a:0e:
41:7e:81:60:ab:73:85:f0:8d:24:7d:4a:e2:80:8a:
5f:8d:92:21:4c:ef:86:df:05:55:5e:1f:27:13:2e:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:00:90:C1:6B:D9:A3:23:9B:46:37:B9:BE:B9:76:BE:9F:2E:9B:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECC077BAF5B611EF93046865762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.168.0/21
Signature Algorithm: sha256WithRSAEncryption
23:89:63:ca:46:f9:ab:d4:18:a9:87:32:50:b8:22:78:d6:76:
6c:3b:db:bd:24:23:08:61:68:ac:91:a2:8a:08:6c:9e:cd:0b:
e9:be:fd:cf:55:ab:86:9a:9c:e9:0f:4a:3b:90:b8:a6:95:74:
33:f5:4c:80:df:36:f6:f3:69:b4:8c:02:8a:79:b6:67:10:1a:
9a:70:7a:5e:f7:4c:b7:a0:09:2a:ed:d4:17:78:70:20:5c:5d:
ba:6c:3d:dc:2f:fb:fc:46:6a:9a:a6:cb:ff:a7:aa:a6:6e:c1:
85:6b:27:47:89:b2:a2:e7:e2:3b:46:7a:96:23:a6:8d:e4:41:
d3:23:59:1c:f5:19:ea:6c:80:c4:d2:e1:ef:81:a2:b6:d8:cf:
86:5e:6c:54:10:58:70:78:28:ee:d8:15:b6:a2:41:b3:81:8c:
40:23:ca:c7:c0:ca:11:54:e3:b4:63:40:35:03:ad:a6:45:9f:
96:ea:01:c8:b1:d7:8c:e2:84:26:b4:ae:92:83:cf:3a:c5:6e:
73:ee:5c:42:fe:28:7a:07:ec:35:bb:69:80:9b:9a:ce:bb:e1:
32:0c:74:a1:db:d4:33:4f:d2:b3:cb:ca:8f:56:79:f6:d9:3f:
58:91:dc:20:98:35:24:05:50:b1:a5:0f:f3:84:3a:a5:c5:07:
c7:e5:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:26:45 2025 by rpki-client