Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26EEF96F59F11EFB5C42949762E951A.roa
File: F26EEF96F59F11EFB5C42949762E951A.roa (raw, json)
Hash identifier: 5NnuugR+bVW9jVudb6Lz0pes6oNZLYP3orJ5Pz9EvPc=
Subject key identifier: C5:CF:80:2B:F9:83:50:38:E8:1B:3C:B5:FC:3A:F0:E1:78:B3:59:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26EEF96F59F11EFB5C42949762E951A.roa
Signing time: Fri 28 Feb 2025 06:47:59 +0000
ROA not before: Fri 28 Feb 2025 06:47:55 +0000
ROA not after: Sat 29 Mar 2025 06:47:55 +0000
asID: 174
IP address blocks: 154.88.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92642 (0x169e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 06:47:55 2025 GMT
Not After : Mar 29 06:47:55 2025 GMT
Subject: CN=67c15c1f-110f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:78:80:c5:77:e7:19:db:50:4b:60:08:61:3c:
55:8f:68:81:be:23:4e:5a:8c:98:0c:87:43:79:ae:
45:f6:ca:52:c5:bd:f3:56:30:66:93:33:8d:7f:0c:
43:3d:aa:74:14:ab:8b:29:50:50:35:94:cd:bb:4b:
96:c7:d8:d2:01:9b:3a:a6:68:a5:d8:fd:31:b2:65:
37:b7:47:4d:91:9c:3c:59:79:fa:bf:51:fe:d8:1f:
8b:a3:59:13:e6:9c:d8:3d:73:a6:cf:c3:7c:ec:2d:
cb:1b:20:5a:49:e9:81:95:7d:9e:f9:6c:96:de:fa:
79:13:63:1e:fc:09:84:d9:2d:e3:68:2e:ab:07:9e:
d6:e0:53:c6:1a:07:66:63:22:c3:2d:e4:34:a2:74:
83:69:0e:82:49:c8:e7:fd:b7:ed:98:ca:1e:dc:2c:
6a:47:9c:b8:9d:31:f1:bd:90:e4:27:75:29:16:0f:
92:c8:ad:4d:b0:5b:51:40:79:d7:6a:e1:34:2d:6c:
10:4f:e5:12:99:49:e9:c9:5f:76:1d:2a:55:f5:4a:
da:39:a9:c9:02:c1:66:9a:89:69:3b:58:0f:48:97:
45:c8:0c:ce:7a:62:b4:92:b4:3d:05:55:1c:a8:16:
77:ef:aa:0d:94:f8:e2:dd:5d:18:54:14:79:0a:c5:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CF:80:2B:F9:83:50:38:E8:1B:3C:B5:FC:3A:F0:E1:78:B3:59:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26EEF96F59F11EFB5C42949762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.32.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ca:91:e3:cb:f6:7b:20:41:d3:f0:63:9c:36:b2:59:02:3a:
43:69:1c:b7:e7:e3:29:f6:21:39:38:c2:24:98:2a:4d:4b:5b:
14:f0:a5:91:5e:dc:40:cd:78:a3:66:e1:19:30:7d:ba:8c:29:
cb:9e:b5:88:31:fe:a8:f3:39:72:79:0c:f9:66:a1:72:a2:85:
0c:b2:ac:6e:9e:6a:01:b1:5c:b6:b0:3f:b3:87:13:60:fb:e7:
d1:e4:fd:ae:6e:47:d9:1a:66:5d:55:ad:ab:77:42:7a:c1:dd:
25:d6:bb:64:91:dc:a4:f8:fd:0a:9f:09:49:8f:84:bd:53:a6:
df:ad:17:e5:f2:f9:54:c7:3a:cb:97:76:2b:66:44:0f:8a:f4:
8f:27:59:f0:2d:76:53:80:bc:ca:03:ad:23:14:52:d6:0b:38:
c2:f5:38:1c:50:d6:71:14:eb:02:d6:66:6f:99:a4:e0:93:72:
72:3a:a3:c3:c1:84:a7:21:ae:3a:15:fc:dd:bf:11:ba:a9:b9:
90:20:61:6c:60:8a:d3:af:4c:b3:68:e6:fb:fa:1f:5d:bb:0e:
74:a4:79:a0:ef:fa:4b:34:7a:c8:75:cd:c4:31:83:d4:22:19:
1f:8c:f8:70:e8:3d:b1:64:9c:55:33:7d:f3:35:9d:aa:a0:6c:
72:97:72:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:23:22 2025 by rpki-client