Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F15D2902F61B11EF83D9868E762E951A.roa
File: F15D2902F61B11EF83D9868E762E951A.roa (raw, json)
Hash identifier: U4gJsNzOGv/uBYmwVHs9YsctuT5BC2NVk+dqDuOPaDo=
Subject key identifier: 5D:57:41:B4:A0:2A:91:16:FD:6A:16:BE:FF:7C:59:F5:99:DE:4D:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C4D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F15D2902F61B11EF83D9868E762E951A.roa
Signing time: Fri 28 Feb 2025 21:35:35 +0000
ROA not before: Fri 28 Feb 2025 21:35:31 +0000
ROA not after: Wed 26 Mar 2025 21:35:31 +0000
asID: 62240
IP address blocks: 154.194.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93261 (0x16c4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 21:35:31 2025 GMT
Not After : Mar 26 21:35:31 2025 GMT
Subject: CN=67c22c26-ad8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:31:d1:a4:8d:8c:dc:09:4b:89:7c:e3:9e:97:
44:12:b7:b7:01:cd:4e:5c:39:e3:b6:a2:d9:6f:b2:
cc:65:98:6a:09:ff:69:b5:ae:da:27:ac:fa:f2:4e:
43:bc:af:bf:ea:e2:59:ca:dd:8d:21:47:77:f9:4c:
0d:a9:9c:13:39:7c:63:33:ee:4d:09:b6:e9:e8:36:
f2:dc:9d:91:a7:9e:fc:1d:56:61:89:84:c8:5c:41:
45:3c:e8:84:d2:13:d4:f7:77:c1:ef:6a:07:1a:4b:
48:46:ce:cf:b7:e9:34:e6:b9:36:7f:2f:cd:47:42:
f3:17:09:50:47:da:66:de:80:da:ec:77:31:fe:a7:
2f:06:e7:6c:0a:d7:83:77:90:9f:b0:f6:37:00:d9:
28:3f:84:06:f9:51:d8:20:c0:a6:a7:01:d5:1d:0b:
01:cd:bc:8d:6e:b7:c8:92:dc:db:40:d4:e0:ce:a7:
3a:3f:71:3c:59:76:94:82:2c:e5:05:3a:e1:f6:be:
cd:a5:54:b1:df:cd:c2:0e:fb:6d:e5:40:3b:9c:e2:
10:51:b0:91:16:6d:59:9c:66:c2:4c:b2:28:43:42:
b8:7b:1e:75:a0:34:ad:d0:73:6b:fa:19:af:2c:13:
a9:bc:cb:2a:ae:7f:b8:58:16:1e:01:a1:f4:f0:f0:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:57:41:B4:A0:2A:91:16:FD:6A:16:BE:FF:7C:59:F5:99:DE:4D:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F15D2902F61B11EF83D9868E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.107.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9b:f7:0d:8c:b3:d2:f3:23:8f:8b:e1:1f:f9:91:1e:49:54:
ab:2c:ab:cf:23:17:0c:ef:44:cd:47:5b:7b:6f:c6:51:d3:41:
a4:e6:bd:77:34:2f:53:76:5f:ae:ab:1f:3a:8d:68:f6:2e:09:
6e:1a:81:fe:43:cb:26:43:87:f8:09:64:11:e2:1e:14:54:f4:
c8:95:e5:74:df:2d:98:8f:ba:e0:4c:8a:4a:5d:3a:10:61:9d:
43:29:25:8d:cc:67:d3:0b:fe:e2:c7:67:98:06:5a:5e:55:1b:
1c:fa:ab:d0:73:b2:6e:8a:b6:f1:3c:1b:21:7f:6a:1d:da:ce:
19:75:a4:12:68:a2:33:be:73:37:b5:53:fa:60:10:78:3f:3c:
c0:d2:ed:61:59:31:ae:4e:0d:7e:2d:d4:f2:40:38:76:bd:fc:
fa:d0:49:ce:44:15:9b:b2:55:53:42:43:c7:8e:e2:df:c0:ef:
92:25:cc:ee:b4:e9:0b:79:c7:7f:53:77:0f:b3:f6:74:5e:17:
6b:c1:e6:8e:29:1c:96:0e:6b:27:d7:3e:47:fa:d2:38:a4:1d:
51:76:51:08:d4:be:f6:2d:ca:b4:79:f5:0b:ed:5d:d6:d4:5d:
80:ce:63:af:10:64:1c:69:fe:de:d9:7b:bf:21:f5:57:2c:5c:
71:34:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:20:30 2025 by rpki-client