Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F17C5B1EFCE811EFAF274CA4762E951A.roa
File: F17C5B1EFCE811EFAF274CA4762E951A.roa (raw, json)
Hash identifier: IH9Aas7IpAx7l2E122NXum8PTqAKCscDqve3LwHQuXg=
Subject key identifier: DC:43:40:CD:04:FA:03:65:1F:DB:9A:5F:B0:A4:ED:A2:B2:B0:2D:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01732C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F17C5B1EFCE811EFAF274CA4762E951A.roa
Signing time: Sun 09 Mar 2025 13:18:09 +0000
ROA not before: Sun 09 Mar 2025 13:18:05 +0000
ROA not after: Fri 21 Mar 2025 13:18:05 +0000
asID: 272369
IP address blocks: 154.197.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95020 (0x1732c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 13:18:05 2025 GMT
Not After : Mar 21 13:18:05 2025 GMT
Subject: CN=67cd9510-892b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b9:54:0d:cb:d2:98:c0:bb:e8:e9:a2:97:02:
49:c0:3d:17:f5:c0:82:8a:bc:83:f6:26:0c:d5:bf:
95:44:07:39:92:db:47:ce:09:76:63:49:02:85:46:
a2:40:65:bb:e6:57:9f:51:ed:d7:ae:d1:82:41:fc:
a3:fa:7b:26:b6:13:86:5f:f0:42:4d:12:8c:3c:c9:
60:2b:aa:4d:19:c8:72:d8:c9:b0:b0:90:b9:61:b2:
76:96:b7:61:43:48:dc:2a:47:eb:23:22:b8:a9:69:
ca:b7:7d:5c:5b:ff:ab:d7:90:2e:40:c0:cc:3e:8e:
67:08:80:e5:ab:22:e0:59:28:41:40:d3:27:75:47:
81:a3:8b:4c:17:52:d1:3b:ac:e7:b1:7a:b2:2a:25:
f7:43:6b:c3:73:be:f2:fe:56:f8:7d:69:2c:11:0a:
ba:6a:88:8d:23:b5:f9:4b:0b:d3:06:7f:93:5d:85:
5f:ef:ac:b2:76:9c:b5:8a:6d:bb:8d:a3:b7:7d:91:
a8:5a:97:9d:aa:cc:89:bc:7d:e4:4c:ad:cd:ff:b3:
41:26:2e:31:d4:14:4a:b7:51:d5:bc:25:72:e2:8a:
f8:61:8f:03:c3:d2:4e:c3:2a:b3:e0:02:d1:5e:93:
bb:d8:a1:cc:ab:10:5d:5e:81:62:82:39:1a:a5:63:
ce:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:40:CD:04:FA:03:65:1F:DB:9A:5F:B0:A4:ED:A2:B2:B0:2D:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F17C5B1EFCE811EFAF274CA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.90.0/24
Signature Algorithm: sha256WithRSAEncryption
77:86:32:37:e7:6a:93:db:4e:e8:73:f1:71:b4:f0:d8:97:70:
d8:fa:1c:fe:72:b2:79:e9:76:18:91:80:4e:22:66:8a:ea:ce:
15:6e:5a:d9:65:64:82:44:15:66:bd:4f:b6:10:96:c1:6f:cd:
db:6f:bb:9a:84:a4:c2:49:da:3b:2a:09:fa:70:ac:1b:74:9b:
c6:7f:d8:f8:c4:3e:53:48:e5:88:a0:36:3d:ef:c6:46:6b:40:
33:e5:32:f9:41:e6:09:b1:fd:3f:13:f8:4e:b1:12:d2:1b:e9:
d0:c2:fa:35:66:f0:c5:f3:8f:24:20:13:b1:94:2d:71:8b:44:
69:1b:15:ec:3d:5a:a7:c7:f8:c2:06:e8:a1:5f:e7:24:77:57:
88:a7:7a:92:3e:92:d4:a6:b9:95:ba:cd:74:29:dc:b7:9c:be:
1b:2d:b1:64:64:07:34:f0:96:94:a3:48:36:94:5f:34:27:16:
34:a4:24:d1:44:4b:f7:f6:cd:fa:b4:26:c7:bc:bf:38:e6:2d:
25:4f:9a:7d:f6:ea:96:d1:41:c3:3e:6c:60:f5:2b:a1:64:ba:
2e:55:ef:eb:3f:02:c5:68:2f:97:4b:6e:6b:de:5d:c5:7e:b1:
91:24:5d:12:0d:d2:f8:e1:14:0e:a8:91:ee:fa:b6:28:29:15:
4c:d2:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:25:02 2025 by rpki-client