Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB3AFC36F67C11EFB279BCB1762E951A.roa
File: FB3AFC36F67C11EFB279BCB1762E951A.roa (raw, json)
Hash identifier: IxlPdiadUlpvY9KxCsyzfyXKPuliAE7m5hHMeYm7wro=
Subject key identifier: EA:80:3F:FD:AE:E6:A3:01:B6:D9:DC:79:17:44:9F:5C:70:44:C6:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB3AFC36F67C11EFB279BCB1762E951A.roa
Signing time: Sat 01 Mar 2025 09:10:12 +0000
ROA not before: Sat 01 Mar 2025 09:10:09 +0000
ROA not after: Mon 31 Mar 2025 09:10:09 +0000
asID: 44559
IP address blocks: 154.209.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93569 (0x16d81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 09:10:09 2025 GMT
Not After : Mar 31 09:10:09 2025 GMT
Subject: CN=67c2cef4-6458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:8d:20:bd:01:df:29:76:85:77:0b:af:57:
18:46:0c:85:40:52:7f:30:65:b4:30:66:e0:b5:1b:
e2:50:f2:58:94:4c:29:1a:23:11:f8:72:03:6b:8b:
41:7c:3c:e5:b6:f4:71:51:3b:44:ca:d9:50:77:69:
e0:a3:c2:fb:b1:fd:28:54:f9:6c:e2:74:20:c6:89:
98:e0:02:94:41:0d:6b:40:bb:17:75:1b:b6:f9:95:
be:c2:5f:36:ca:fc:08:01:4f:de:2f:c3:d4:d8:bf:
36:42:ee:e7:4c:f2:4c:6f:c6:ff:fa:cd:b9:4d:fd:
55:75:e8:e8:bf:93:02:6a:62:0e:be:73:21:6a:69:
a8:e0:50:bb:8f:a0:ee:0a:c1:8c:37:7d:7f:33:ef:
56:87:20:04:3e:a1:de:a4:69:c9:91:b7:65:90:ed:
64:8b:53:86:37:4e:6d:3b:2e:30:7a:0e:7e:08:33:
53:dc:fc:29:1b:88:37:c7:63:bb:55:68:e1:12:f4:
0b:6b:5f:45:d4:b8:43:63:d5:60:bd:66:6c:ef:c4:
cd:41:6b:0c:9f:7e:81:61:c8:b9:46:60:47:0b:c2:
07:ac:a6:86:91:a8:5c:37:d4:c9:5a:fc:57:fa:5c:
88:2e:df:74:f9:c9:2e:da:17:61:b6:ca:13:19:8c:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:3F:FD:AE:E6:A3:01:B6:D9:DC:79:17:44:9F:5C:70:44:C6:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB3AFC36F67C11EFB279BCB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f6:d9:e0:a8:76:40:44:85:4d:41:12:5f:24:a0:b6:3c:93:
e5:ce:c3:17:fc:a4:58:ac:bb:f8:1c:b0:66:68:95:83:cc:f2:
3a:18:9d:65:e2:07:52:69:ae:07:8b:f6:69:98:d4:92:22:37:
2e:05:b9:ea:df:f5:b2:7c:08:6c:3f:20:6d:5e:3a:d1:c7:3b:
ab:ef:cf:6f:5d:f5:ab:78:a5:4e:27:a5:8c:72:24:e3:1a:91:
dc:9c:7c:bb:dd:f1:c5:0a:84:3e:9c:e0:19:22:07:d2:6c:75:
41:8f:22:57:7c:01:84:91:26:dd:68:14:e0:2f:c3:93:92:9a:
6e:82:34:3a:a7:4f:de:9a:cb:6d:ea:b4:a1:d7:a4:55:be:a6:
48:9d:f3:4f:19:9e:bc:57:5f:71:25:06:d0:d0:26:93:40:81:
59:7a:44:8e:a1:4e:c0:09:82:87:4a:be:40:ba:79:a5:9f:78:
d9:4e:1c:45:54:56:dc:6c:6b:0f:eb:98:c1:4c:a0:fd:0b:da:
24:50:82:44:57:6a:db:42:d6:46:41:8b:d6:b9:24:07:e4:a9:
0a:b4:ac:9e:c6:f5:6f:fb:95:ae:bf:56:15:08:4f:e8:9b:97:
5e:52:e6:8c:fe:13:0f:a2:f9:8c:36:22:48:a6:0a:ac:61:8a:
22:b4:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:42:51 2025 by rpki-client