Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F995459AF68A11EFA5616390762E951A.roa
File: F995459AF68A11EFA5616390762E951A.roa (raw, json)
Hash identifier: AJTSa7RyHysxoNv6QZqA+oCFCwvqp16DIFmOApsme9o=
Subject key identifier: 42:D0:E4:5C:30:6F:2B:F7:C6:BD:E4:81:74:C2:67:97:84:A6:FC:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F995459AF68A11EFA5616390762E951A.roa
Signing time: Sat 01 Mar 2025 10:50:22 +0000
ROA not before: Sat 01 Mar 2025 10:50:19 +0000
ROA not after: Sat 05 Apr 2025 10:50:19 +0000
asID: 203020
IP address blocks: 154.204.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93666 (0x16de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 10:50:19 2025 GMT
Not After : Apr 5 10:50:19 2025 GMT
Subject: CN=67c2e66e-bb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:89:69:5f:69:e6:cf:c5:a3:7c:51:85:d6:
ca:6f:2d:e5:c5:c0:f2:3b:3b:44:16:de:fe:00:de:
45:b3:96:65:16:86:3b:4e:cb:5c:40:74:c6:d0:c2:
59:ec:a1:95:ff:94:e6:f3:94:a9:dd:70:6f:b3:0a:
34:2d:42:ee:e3:5c:3f:54:14:c8:28:3a:4f:68:a5:
67:c5:8b:05:6e:e5:a4:63:95:0a:82:0c:4c:62:47:
15:a4:aa:f2:7e:0e:4f:75:84:aa:c4:a3:1f:5f:3c:
bf:92:af:6e:25:78:bb:ca:3b:0b:4a:35:e9:9c:2b:
f0:53:4a:27:6c:d2:19:0d:81:b1:bf:2d:c5:1d:05:
2e:db:d3:e9:a2:03:83:f8:9b:3f:c4:17:96:af:5d:
23:6c:5b:44:83:69:b6:0b:97:bd:c3:d6:2f:b8:7f:
df:4b:fc:8a:26:76:1c:32:46:f3:ed:79:05:4c:01:
96:21:5c:31:36:fa:8b:f5:c3:a4:a4:46:7c:3e:69:
2e:13:7b:0f:65:b4:d6:fd:d1:5e:6c:21:c8:10:83:
af:d7:8e:bd:1e:3e:3e:c3:c9:97:0e:c5:c0:66:8f:
9c:af:2d:fb:66:77:92:3a:52:47:f4:1d:b6:1f:58:
18:74:ed:27:0f:ab:d2:84:42:43:68:09:20:66:90:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D0:E4:5C:30:6F:2B:F7:C6:BD:E4:81:74:C2:67:97:84:A6:FC:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F995459AF68A11EFA5616390762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7b:76:c3:1a:11:a2:51:b7:3d:d7:78:7f:d3:4c:7f:36:7d:
fd:c3:80:1c:a5:0c:fd:10:c8:ae:8b:ab:22:ea:10:24:6a:ba:
13:e9:81:69:51:38:fc:4d:51:cb:2c:4d:05:e1:7a:24:4a:8f:
53:f0:b1:44:c5:3d:90:7b:a2:10:e9:48:ee:8e:f6:f2:91:78:
65:a4:ff:f3:35:8e:80:41:2d:05:ba:f8:f1:7e:91:1b:82:1d:
c8:6b:57:6f:a7:f7:44:13:03:ce:46:fa:2c:82:ab:cf:48:08:
6c:64:c1:12:aa:52:ef:b0:26:10:e8:a5:dd:24:10:1d:d8:87:
66:10:2b:1d:87:7a:db:05:50:03:d4:48:57:24:80:34:68:0f:
2e:79:ee:9a:d0:0f:92:4e:95:ed:95:57:06:9c:b6:0c:99:9b:
f7:c7:72:c9:07:6b:22:9c:78:fe:09:27:03:82:f8:a6:5c:f6:
20:00:c9:5b:14:61:51:36:9c:27:b9:1c:e4:a5:3c:65:d9:b9:
6e:e4:95:2e:5c:a5:69:25:7d:82:bf:26:19:a9:d0:d3:6a:8f:
a6:d4:04:b9:5e:59:6c:58:90:33:72:62:31:85:76:aa:2c:3e:
19:2e:8b:87:d3:62:30:14:5c:0a:82:a1:51:46:bd:4a:ab:7d:
20:6c:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:52:31 2025 by rpki-client