Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F70AA428FA5E11EFB1560286762E951A.roa
File: F70AA428FA5E11EFB1560286762E951A.roa (raw, json)
Hash identifier: a4/CeynXisfMylZTcpFM2uK9dbyuEcxvrmutPwEEVKU=
Subject key identifier: 01:6D:AA:3C:E8:0A:4F:9E:67:D3:5C:B5:3A:F9:D0:DC:ED:C1:A5:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017286
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F70AA428FA5E11EFB1560286762E951A.roa
Signing time: Thu 06 Mar 2025 07:45:25 +0000
ROA not before: Thu 06 Mar 2025 07:45:21 +0000
ROA not after: Wed 26 Mar 2025 07:45:21 +0000
asID: 400619
IP address blocks: 154.204.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94854 (0x17286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 07:45:21 2025 GMT
Not After : Mar 26 07:45:21 2025 GMT
Subject: CN=67c95295-0350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:6b:cf:4d:9a:e5:6c:18:9f:87:de:7b:ad:
76:23:86:f5:c0:0f:21:db:d3:8e:90:db:69:ac:c0:
4a:66:ef:11:aa:e8:d0:f4:27:02:f2:c4:a3:b1:02:
a6:56:35:a5:81:cf:05:27:1d:56:59:03:26:ea:00:
eb:71:f5:94:e0:d6:8a:d3:f6:b2:ec:37:ed:90:9d:
70:04:65:fe:22:7d:e6:47:25:b2:2b:1a:30:7d:70:
14:c1:e9:96:4f:9a:96:14:3e:9f:5f:86:f8:75:c7:
fe:88:44:0f:1d:81:fc:54:bd:b8:e9:9b:e2:72:32:
f7:e0:b5:17:5e:45:97:a1:82:20:78:f7:99:eb:24:
bc:98:8f:92:bc:b0:8b:b1:b9:b0:3f:d0:df:33:1e:
9a:63:93:0e:bf:fd:5c:25:e5:ba:fe:62:f7:45:d7:
5a:82:8f:03:85:e0:75:e8:3d:78:b0:20:d2:01:40:
51:64:1e:07:c8:e9:ce:cd:dc:77:cb:e1:d0:20:5e:
70:23:bd:e0:c1:36:ba:7d:96:4d:3e:fb:f3:e5:4b:
d8:f4:c1:ab:39:94:44:6f:dd:ac:95:19:94:06:ef:
76:19:55:34:22:54:14:52:3f:58:fa:9a:b7:9a:f3:
2f:25:c8:06:eb:59:b7:7a:c2:c6:ad:bc:39:39:e2:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:AA:3C:E8:0A:4F:9E:67:D3:5C:B5:3A:F9:D0:DC:ED:C1:A5:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F70AA428FA5E11EFB1560286762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:50:74:be:30:30:a9:52:da:75:d0:7c:59:b6:dd:89:10:2a:
8e:93:8d:44:4a:d6:82:42:c1:6b:e5:03:61:0f:07:e6:55:d0:
17:b2:98:3e:7b:c4:d5:8f:f9:fd:28:d3:25:08:f6:7d:f6:e8:
3a:32:3f:c5:89:3a:34:bb:be:97:50:95:a6:c0:55:8e:cf:08:
d8:4e:50:ec:4c:b5:74:21:6e:b1:eb:2c:42:64:dc:5b:95:95:
70:ee:f3:23:2a:a6:c7:a7:a0:93:b0:21:a9:05:59:b8:e0:34:
7c:3c:0f:b8:a1:1a:f0:23:fd:07:af:11:13:63:ff:d6:ec:b5:
19:60:ab:2f:bd:6a:62:9d:52:98:14:30:8b:3f:37:e6:f3:5e:
d1:94:1c:56:a0:c6:41:46:4c:d8:e2:54:29:58:6e:7b:05:6c:
ec:c0:25:b2:e6:93:48:c3:55:8f:06:3e:eb:10:0d:91:f7:3a:
d0:bd:e9:3c:ea:82:7a:2c:8c:e7:22:f4:cd:cc:32:a4:31:4b:
37:5d:c2:cd:52:93:ec:ca:cc:18:b7:cf:b6:ab:f5:71:86:92:
ac:ff:13:f8:bc:13:dd:57:dd:81:09:5c:4a:48:dc:12:64:ba:
44:ae:e7:cc:cc:a3:18:44:8c:e8:87:dc:eb:8a:0f:f7:79:96:
0d:c1:1b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:07:04 2025 by rpki-client