Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED21CB2F4E311EFBC2BE3BD762E951A.roa
File: EED21CB2F4E311EFBC2BE3BD762E951A.roa (raw, json)
Hash identifier: fMEV5QmcBc9Eo3W/XYKaWHhlQOx8CAuV9WGUGK9NrI0=
Subject key identifier: B4:0C:8D:CE:F7:44:A6:CC:4D:7A:F9:3B:0D:91:C4:C9:97:7E:13:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED21CB2F4E311EFBC2BE3BD762E951A.roa
Signing time: Thu 27 Feb 2025 08:22:07 +0000
ROA not before: Thu 27 Feb 2025 08:22:03 +0000
ROA not after: Wed 26 Mar 2025 08:22:03 +0000
asID: 62240
IP address blocks: 154.195.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91869 (0x166dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:22:03 2025 GMT
Not After : Mar 26 08:22:03 2025 GMT
Subject: CN=67c020af-0106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:51:fa:2e:bc:0c:d5:a7:63:4e:a5:09:38:73:
3e:31:47:77:7a:c0:7c:4d:b0:e5:25:40:60:35:ec:
f4:f7:be:99:f8:68:f5:1e:02:4b:82:46:a5:55:09:
8c:00:9d:5c:38:98:e8:d3:ed:0f:aa:16:99:09:c9:
10:97:a9:9d:91:1a:c4:30:e1:0f:9d:40:35:8f:b3:
1c:8c:53:7e:a9:e9:e6:3c:5b:7e:a1:20:7e:01:6c:
5c:97:35:bf:10:a4:35:f1:35:77:98:99:0b:c9:69:
74:c7:03:c3:13:44:5f:14:5e:fb:4a:7a:57:b6:38:
a2:77:c0:82:90:c1:82:fa:a1:3d:b0:09:39:23:b7:
08:45:b7:56:7e:ca:98:2f:a9:cc:89:1d:7c:21:18:
45:63:f8:4c:3e:1e:38:5f:a4:16:bd:8c:a7:f8:db:
88:33:78:a9:de:ca:0f:d8:d4:ae:92:b4:36:35:c0:
b7:2a:45:24:29:22:fb:eb:26:94:bf:41:f4:d7:bb:
8f:b9:f0:a2:f1:81:7a:fb:86:a9:49:08:a8:84:c7:
d0:32:ad:e6:ac:ee:5d:02:0b:05:bb:3d:50:74:16:
d2:01:76:d1:b2:f7:9e:81:79:14:3a:e9:8f:82:ac:
cd:f8:9f:2f:37:7b:d2:ab:d6:cb:78:51:ec:cd:f0:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:8D:CE:F7:44:A6:CC:4D:7A:F9:3B:0D:91:C4:C9:97:7E:13:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED21CB2F4E311EFBC2BE3BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.182.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:cf:fb:db:f5:7c:b3:7a:9b:af:ec:bc:c3:e2:c4:ce:d0:3d:
bc:c0:38:87:55:61:17:3f:db:66:c4:f9:3b:90:1f:75:06:10:
fe:c4:47:0a:28:49:3d:9b:18:5c:60:e3:05:b0:5f:df:76:ab:
a4:bb:15:07:65:59:0f:62:1b:2c:5c:f5:86:77:b0:1b:91:d8:
46:33:73:38:52:71:3c:da:59:dc:c1:95:e6:42:37:8a:5a:37:
6d:58:06:64:d4:9b:aa:d2:c1:10:63:a6:47:73:85:d5:51:b5:
ca:83:82:80:92:15:f3:54:32:8d:8e:30:7e:62:8d:78:54:7a:
84:31:5d:92:e3:ce:55:0e:f6:ce:10:e5:26:e4:03:2e:0d:84:
bd:df:74:ae:2d:22:ee:8c:2b:fd:d1:b1:4c:85:9e:4d:8d:7c:
b3:f7:43:b2:25:e4:ea:d6:31:47:4f:71:16:f2:ab:76:f5:2b:
d1:2f:ba:ad:a0:64:3a:47:97:c7:ce:65:9a:b0:54:a7:b9:22:
dc:ce:e6:2c:74:e5:59:af:b3:bc:41:c1:3c:5a:e3:ef:60:36:
2a:b4:57:34:4f:31:fa:32:dd:df:13:70:57:17:14:08:4b:c1:
a1:72:74:f9:05:40:09:fe:24:19:75:67:4f:b3:bc:ae:d4:5e:
55:cb:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:57:13 2025 by rpki-client