Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78D1562F62F11EF948BAF96762E951A.roa
File: F78D1562F62F11EF948BAF96762E951A.roa (raw, json)
Hash identifier: dZ+yDGzKOfH3EKN8ls5wBtqPBKwCAIWVKr6WzPfA/+Y=
Subject key identifier: 0E:07:5D:87:71:CC:69:2C:20:46:B9:94:45:FA:E1:C0:BA:6C:F0:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78D1562F62F11EF948BAF96762E951A.roa
Signing time: Fri 28 Feb 2025 23:58:55 +0000
ROA not before: Fri 28 Feb 2025 23:58:50 +0000
ROA not after: Wed 26 Mar 2025 23:58:50 +0000
asID: 62240
IP address blocks: 154.195.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93425 (0x16cf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 23:58:50 2025 GMT
Not After : Mar 26 23:58:50 2025 GMT
Subject: CN=67c24dbf-e29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:ff:9c:33:3d:21:8c:76:2a:44:75:e3:dc:
49:0f:71:4b:bc:3a:8a:64:71:c3:de:5e:d3:1f:a1:
11:a6:0d:d0:c4:ba:c8:a7:6c:7a:c8:5d:cf:4e:74:
cb:92:38:24:fe:21:2d:33:b6:f0:9c:91:4d:ee:31:
ec:7a:67:e8:d2:39:2e:36:c4:88:a2:80:34:00:d0:
8a:23:21:fd:45:c9:46:b3:af:8d:db:15:51:86:b9:
0a:f1:db:51:76:7e:44:14:6c:55:0f:e0:2d:ea:03:
83:dd:5a:5f:16:67:43:8c:ec:a7:41:89:c9:5c:82:
d8:4b:30:7c:10:b6:25:36:7c:bd:13:54:a3:df:6a:
d8:fa:a0:04:81:2e:c2:0a:32:8d:16:cb:37:58:b9:
73:ae:81:fb:c8:4a:a3:26:c9:38:d3:3a:bb:0e:a9:
39:3f:20:eb:8b:f0:1b:56:68:75:b2:05:d9:b4:48:
6f:8b:a2:68:cd:7f:3c:d6:87:f8:33:b5:59:35:56:
07:13:d8:40:19:d2:2d:c1:a7:11:c4:c5:4b:bd:ff:
d1:32:1b:34:0e:9a:3d:fc:d6:41:c1:6f:44:74:62:
2e:18:99:1a:f2:bd:2c:55:57:73:f8:0c:69:28:b5:
94:06:60:71:a3:f9:68:41:d5:b5:ab:6d:a7:c6:74:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:07:5D:87:71:CC:69:2C:20:46:B9:94:45:FA:E1:C0:BA:6C:F0:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78D1562F62F11EF948BAF96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.1.0/24
Signature Algorithm: sha256WithRSAEncryption
21:bd:42:34:61:dc:94:fe:15:b8:f6:15:c5:9a:3c:76:2b:5e:
23:f2:76:58:fa:2e:6b:22:ec:35:07:34:c3:a0:c2:93:f1:28:
77:f0:45:59:6f:f4:c4:56:f6:d4:d0:5b:aa:77:53:10:28:d8:
63:26:3c:f1:98:fd:ec:4f:4c:a6:f0:3c:a3:3f:e5:3e:e6:3b:
89:06:5e:e5:99:7d:e8:3f:eb:e2:04:45:4d:58:1c:35:45:50:
21:3c:73:16:7c:7c:25:43:3d:2e:a8:fa:b2:07:71:77:b5:9e:
a5:21:57:8d:32:b9:74:5e:ee:03:66:1c:77:29:5f:b6:c4:ff:
6b:be:6c:da:ad:54:22:ba:63:99:bb:e6:83:da:50:c0:09:0b:
30:64:5a:ba:17:d9:4b:d0:1a:a9:ad:c1:71:3b:c8:57:c0:93:
f4:e7:7b:86:77:de:12:7a:04:46:86:ee:7e:20:72:98:78:96:
a4:6c:91:a0:c8:98:9a:80:8d:aa:41:3f:2a:11:9e:ac:ab:6d:
db:55:5e:44:d9:62:76:d4:d6:c9:08:15:86:9d:00:c0:8d:2a:
d6:62:1e:bc:ab:3d:09:81:5a:cd:5b:01:3e:4d:ec:e5:d5:34:
8d:ad:5e:2d:ce:1e:82:7d:1d:e8:87:45:8b:b9:45:21:70:9e:
3d:0e:fb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:21:23 2025 by rpki-client