Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20A9114F16611EF979EE9BA762E951A.roa
File: F20A9114F16611EF979EE9BA762E951A.roa (raw, json)
Hash identifier: ux2Fw/Z9f02ZugztpYA3bz1hZMlJaSHuRhIh73uu5Tk=
Subject key identifier: 84:73:BF:48:08:F8:A7:D2:51:EC:D5:60:02:52:E7:AF:D5:A0:B6:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015A99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20A9114F16611EF979EE9BA762E951A.roa
Signing time: Sat 22 Feb 2025 21:49:52 +0000
ROA not before: Sat 22 Feb 2025 21:49:49 +0000
ROA not after: Tue 25 Mar 2025 21:49:49 +0000
asID: 135983
IP address blocks: 154.200.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88729 (0x15a99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 21:49:49 2025 GMT
Not After : Mar 25 21:49:49 2025 GMT
Subject: CN=67ba4680-6775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:87:72:a6:c9:d5:66:23:3a:8c:2a:7a:9c:
43:53:57:1f:eb:64:22:51:ce:80:c1:40:a2:da:10:
71:fa:b5:d9:d7:7e:e5:f3:91:0a:4b:cb:98:3d:ae:
70:44:a2:4f:5b:8f:16:56:d7:c4:db:ff:df:d3:20:
b7:ae:7c:6d:83:05:f7:44:1a:d5:4f:71:8b:6d:e7:
ec:2b:79:37:0e:ba:f4:1d:f2:26:d4:a3:3a:16:20:
b2:2a:0c:be:ca:bc:50:af:38:4d:df:15:b8:a2:3f:
69:5c:73:3f:3d:ae:93:70:01:7e:8e:de:e4:1c:bc:
fa:8b:19:ee:6f:2d:aa:bb:58:cb:91:b2:f6:5d:8a:
21:4e:8e:0b:ac:f2:01:43:7f:6f:aa:a1:ad:64:dd:
b2:28:fc:24:75:b4:f2:73:fc:0e:6c:09:94:fd:ae:
1b:19:7b:73:cb:45:fa:12:90:66:a4:db:30:41:de:
1a:bd:15:2d:0f:13:13:6d:5e:0e:a9:72:03:14:5d:
12:68:44:11:f4:d4:18:6a:c6:a2:93:0d:ea:eb:26:
9e:ce:5b:94:64:71:1b:5c:0d:0d:73:94:a0:c7:d4:
20:99:e4:13:0c:5f:b8:d5:bf:6a:f7:3c:d2:9e:c2:
33:8f:18:e9:a4:9a:76:18:3a:d8:b7:31:59:5d:b9:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:BF:48:08:F8:A7:D2:51:EC:D5:60:02:52:E7:AF:D5:A0:B6:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20A9114F16611EF979EE9BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.33.0/24
Signature Algorithm: sha256WithRSAEncryption
75:26:bf:5f:cb:54:f6:b6:47:00:bc:1e:43:96:4d:7a:dc:3c:
41:5c:3b:6f:72:52:bc:0f:b4:c5:b8:71:0a:58:a3:27:29:d4:
39:c7:5a:9f:cc:6b:97:16:0a:4d:13:2e:8b:26:1e:6b:06:06:
07:a7:9e:57:76:58:58:5d:83:51:84:8d:f3:d2:40:78:6e:e9:
62:8d:ab:92:e9:f9:59:23:4b:d1:a3:76:81:ee:31:25:17:a4:
e0:1d:3e:a3:f3:bf:fd:63:64:75:b3:8a:57:c8:32:33:9c:6e:
f6:1b:30:9d:d1:d1:10:e1:5c:de:f6:45:62:fd:1f:43:1b:36:
34:d7:e2:a5:eb:ed:fc:d8:97:76:e5:21:f1:24:2a:ff:69:11:
a9:20:9f:c3:d9:a8:83:b9:8e:26:8e:3a:cf:2b:25:31:0a:8a:
cb:fa:e3:27:a2:65:21:04:df:cf:d0:ea:84:5c:3d:6a:73:b9:
84:28:7b:7d:ef:88:59:29:e5:be:9d:00:f9:54:ac:43:c9:fd:
1b:84:92:66:b0:e0:26:da:c5:ed:36:9e:47:ff:a0:eb:4b:20:
ee:e4:a7:be:92:ee:fb:ee:b5:f5:b0:64:62:32:dd:93:c9:2f:
8b:a9:49:10:03:07:7f:30:a9:dc:43:95:8c:30:93:97:52:bf:
eb:7e:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:18:00 2025 by rpki-client