Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F965279AF61F11EFAB01BFAA762E951A.roa
File: F965279AF61F11EFAB01BFAA762E951A.roa (raw, json)
Hash identifier: 8DkRqtbutnRUehrfHlZVn4iUc0jvi1O5UYrm2IqV6ik=
Subject key identifier: 1C:C6:A6:BC:19:1A:98:44:CB:C5:9B:6E:3F:1D:13:13:AA:BC:E3:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F965279AF61F11EFAB01BFAA762E951A.roa
Signing time: Fri 28 Feb 2025 22:04:26 +0000
ROA not before: Fri 28 Feb 2025 22:04:22 +0000
ROA not after: Wed 26 Mar 2025 22:04:22 +0000
asID: 62240
IP address blocks: 154.194.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93297 (0x16c71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:04:22 2025 GMT
Not After : Mar 26 22:04:22 2025 GMT
Subject: CN=67c232ea-2ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:7b:38:50:f1:df:1a:5b:ec:10:67:e1:51:
d7:09:44:3f:69:83:56:53:39:f2:16:8e:55:88:96:
91:0f:90:5a:21:9e:a9:58:13:84:ab:3d:92:0a:19:
d0:8a:56:17:df:49:a8:86:23:98:34:7f:a3:41:f3:
76:ec:f6:ca:7a:35:2e:77:e4:c8:00:9c:22:02:64:
11:5c:88:d2:67:b4:65:c8:bf:f3:26:7e:6b:a2:52:
f0:99:76:50:92:07:54:65:32:b0:50:4f:af:06:7e:
68:0a:d9:9d:40:b5:5a:be:da:3d:c0:c2:dd:6c:cc:
90:5d:28:9b:1b:e2:9e:c6:6e:60:61:6a:aa:d4:26:
77:3d:55:8e:a0:a4:6a:55:2e:c8:f9:cd:33:9d:b6:
69:dc:3e:32:10:71:d2:50:50:ea:ff:9b:bf:d8:f6:
16:8c:5b:53:47:18:3a:30:78:03:5d:8e:44:44:f0:
db:37:a2:15:b3:22:f9:7c:5e:46:2f:d7:08:fd:b1:
a4:37:ef:49:bf:c4:85:51:10:e0:ad:8a:24:92:73:
37:b0:8d:01:64:a4:25:41:29:28:f5:6c:51:f7:d0:
b6:ef:75:33:9c:c9:4c:6f:5a:99:86:1c:18:1b:58:
86:16:c6:c5:30:57:eb:bd:49:3a:34:5e:73:3c:04:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C6:A6:BC:19:1A:98:44:CB:C5:9B:6E:3F:1D:13:13:AA:BC:E3:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F965279AF61F11EFAB01BFAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:36:df:ee:0f:68:91:8e:c2:a8:76:ef:b1:a3:22:0c:04:a0:
6d:dd:62:f7:1b:86:32:e0:60:f6:fe:7b:4a:70:d6:ca:3d:ad:
4d:16:0c:2f:2a:29:c9:6b:63:5d:88:7b:3d:40:7f:e8:00:33:
73:70:ba:4b:10:86:38:19:e8:94:5a:9a:19:b9:a0:71:7a:0f:
d0:11:96:0d:d2:13:cb:de:72:be:2e:6e:1b:59:ad:4a:0d:eb:
14:50:78:89:4d:40:f5:9e:1e:ae:b1:00:1b:3b:b9:6a:ac:c8:
f4:bf:aa:6c:99:cf:64:ce:3b:fe:b0:69:d3:db:b5:b0:ab:2f:
3f:ad:ee:55:c2:c5:cf:16:8e:db:aa:86:fe:82:6c:6e:0d:e9:
97:ec:9e:07:ea:6e:9e:c4:0e:df:47:29:c4:cd:1b:f6:60:7a:
ad:a1:f8:77:77:06:da:46:69:9b:ee:6d:2f:75:fb:fd:be:2c:
b0:b5:d5:64:90:ab:7d:29:3b:90:97:34:ff:bf:ad:1e:9a:a7:
59:3f:2d:b5:07:6d:36:7b:59:5a:f4:9f:ad:55:09:d8:1c:38:
bd:a4:06:7b:db:56:d7:f4:6b:e7:97:5c:82:b8:b3:53:99:34:
5e:55:5a:19:75:49:00:db:1a:b3:b7:0b:7a:e7:8c:ae:41:6d:
26:02:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:35:59 2025 by rpki-client