Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE9E6FFEF4E111EFABD54EB0762E951A.roa
File: EE9E6FFEF4E111EFABD54EB0762E951A.roa (raw, json)
Hash identifier: +SusCFGqSV8GP9VYF4oXeZobnlKaNLfMlSnnmpaIfz8=
Subject key identifier: 28:C5:6B:E5:C2:3A:06:E2:73:C9:B4:06:D5:87:DC:DC:77:67:84:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE9E6FFEF4E111EFABD54EB0762E951A.roa
Signing time: Thu 27 Feb 2025 08:07:48 +0000
ROA not before: Thu 27 Feb 2025 08:07:44 +0000
ROA not after: Wed 26 Mar 2025 08:07:44 +0000
asID: 62240
IP address blocks: 154.195.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91859 (0x166d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:07:44 2025 GMT
Not After : Mar 26 08:07:44 2025 GMT
Subject: CN=67c01d54-6f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:d4:87:e1:48:35:af:57:ba:2c:29:96:25:
cf:2c:3f:b2:8e:6f:84:dd:a5:f1:bc:31:1c:d4:84:
c5:32:ef:ca:84:28:a9:54:82:34:e4:54:c1:d8:b5:
0c:44:36:bd:38:e7:3e:44:24:85:50:f0:f2:ef:52:
d5:e2:ed:15:25:7a:2e:ac:da:a6:f1:73:44:ee:8d:
24:d9:9b:66:07:60:38:31:72:27:51:fe:cb:72:7a:
cc:1e:94:2a:77:31:39:26:57:7d:0b:40:df:ae:6c:
a9:2e:d9:6f:c4:1a:c8:6c:3d:6b:f5:14:ee:88:a5:
c1:5c:5a:97:51:67:32:d6:79:f7:b6:2f:74:f2:4d:
f9:62:22:d6:0e:30:18:50:90:aa:e2:45:4a:a6:d5:
16:a8:ec:c0:17:65:77:0a:1f:64:90:dc:38:bf:cc:
6c:e0:75:a0:a3:48:95:e7:fb:4f:f9:77:8c:ad:2c:
26:ce:bb:d8:5f:1e:93:39:97:f1:e1:55:79:99:50:
2e:f1:19:15:cd:b5:07:a1:84:db:c5:8c:c7:80:b2:
e8:45:0b:e7:a8:71:51:55:9e:fd:f6:ea:a7:9c:e1:
56:49:a5:c5:51:14:a2:62:91:1a:9c:f4:bd:54:e5:
89:3e:ac:60:02:bf:e2:61:a3:6e:e9:4c:6c:e8:ba:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C5:6B:E5:C2:3A:06:E2:73:C9:B4:06:D5:87:DC:DC:77:67:84:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE9E6FFEF4E111EFABD54EB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.177.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:84:b6:00:0d:ec:9f:3d:63:66:a6:6b:90:c0:f4:05:56:53:
5e:a6:4e:df:8c:fe:0d:81:3e:e1:af:f2:16:07:54:78:6b:54:
75:d8:5d:b4:d3:ae:49:99:09:e0:c4:32:40:7c:c6:20:b3:bc:
6a:db:38:c5:ac:32:96:26:bc:65:21:47:f3:ff:bc:be:05:09:
88:a2:89:72:d2:6c:1f:ea:7c:14:95:3b:be:f3:53:50:aa:9c:
68:26:93:2c:ab:4b:3b:7c:aa:7e:92:e8:b4:6f:81:77:63:e7:
7a:e3:a1:40:21:ba:bc:83:24:90:28:5d:f1:d6:91:94:0b:61:
d9:6d:47:da:03:fa:0b:e8:46:8c:d1:a0:80:d1:2a:d0:77:f1:
8c:b5:35:4b:43:c2:46:19:c1:bf:e0:94:46:33:ab:3d:cb:72:
9b:8b:3e:a8:ef:d5:ca:3f:3f:7c:fc:3a:71:5b:b2:bf:ee:f0:
de:13:5a:cf:77:dd:1c:3e:ac:fd:c0:bb:30:ff:7b:7a:c6:b3:
33:ab:fc:68:be:d7:7d:be:cf:12:af:27:70:ef:11:07:7e:35:
36:cb:a1:f8:7b:42:85:c4:8d:af:c3:71:b9:d7:79:51:ba:28:
ff:3e:76:dd:64:51:cf:6d:a0:33:bd:51:b8:ac:25:b6:ba:db:
bd:0b:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:17:08 2025 by rpki-client