Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE63F434F62D11EFA2EAFF88762E951A.roa
File: FE63F434F62D11EFA2EAFF88762E951A.roa (raw, json)
Hash identifier: nsfqN5PNYBLJFK4FaYFFugJ2rJJsWN9x3ePvBdy8vmI=
Subject key identifier: 8C:A6:0C:63:5E:E9:99:83:04:C1:92:DC:29:B7:7B:A4:76:3B:0A:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE63F434F62D11EFA2EAFF88762E951A.roa
Signing time: Fri 28 Feb 2025 23:44:47 +0000
ROA not before: Fri 28 Feb 2025 23:44:44 +0000
ROA not after: Wed 26 Mar 2025 23:44:44 +0000
asID: 62240
IP address blocks: 154.194.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93409 (0x16ce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 23:44:44 2025 GMT
Not After : Mar 26 23:44:44 2025 GMT
Subject: CN=67c24a6f-bd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:a3:08:74:f0:ad:65:72:c1:4f:63:d5:48:
a5:47:bb:5a:3b:25:1e:06:44:8f:d4:aa:61:08:9c:
33:90:56:2f:e6:50:5a:ee:b0:77:e9:cf:0b:76:e7:
21:fb:ee:10:09:72:54:b7:cf:64:16:ad:86:73:c0:
84:15:29:2c:74:53:db:14:e9:60:fa:39:54:cf:e2:
d6:79:07:19:5c:c9:1c:77:2a:24:3b:8f:01:9a:fa:
4d:23:ff:8a:dc:b0:d5:0d:da:64:0e:db:b0:b0:38:
42:7f:77:16:76:5f:63:5a:f0:e8:aa:3d:15:c4:cf:
dd:f1:5a:5b:86:94:c2:68:63:d3:ee:1f:67:1f:14:
ae:17:ef:7d:18:dd:e8:55:19:c3:d8:95:63:68:c3:
1b:fc:0f:cf:fb:53:05:4c:07:55:0b:b6:3b:1e:e7:
d3:c5:0b:84:69:2d:13:22:ff:80:54:a6:a6:3f:2d:
b7:74:dc:c8:35:fb:4d:ef:ab:1d:97:dd:c3:bb:d7:
26:66:ef:c7:94:11:05:90:58:40:9d:74:02:f4:84:
45:2c:51:0e:88:4e:f4:e6:4d:c9:45:c5:c8:0c:f9:
d1:58:98:86:9f:e4:de:7b:ef:8c:d6:f1:dc:27:a0:
6b:c4:8e:af:71:6e:59:81:47:6e:e5:f0:8a:23:4f:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A6:0C:63:5E:E9:99:83:04:C1:92:DC:29:B7:7B:A4:76:3B:0A:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE63F434F62D11EFA2EAFF88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.70.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3b:65:53:ce:1d:17:80:8b:f4:66:64:05:ec:89:d8:e0:bf:
8f:92:c4:05:ec:f8:f8:88:c6:bf:fa:a9:6b:33:6c:5f:cc:d7:
a1:c5:df:6d:be:bc:f7:b5:5a:80:40:41:8b:58:17:40:35:0d:
8f:6f:70:57:d4:89:9e:f0:ad:94:b7:1c:6e:6f:9d:75:b7:51:
33:49:3a:0a:3d:a8:ab:f9:c3:6b:c6:c3:c7:da:44:60:36:47:
64:52:25:4c:b6:80:d1:92:c9:d5:3b:fa:dc:3f:2d:4a:45:74:
82:77:8c:da:c9:42:ed:c4:30:23:3e:93:39:85:49:38:0b:2a:
cb:dc:c7:53:63:25:01:1a:f6:c8:eb:a9:9b:d9:0e:f7:93:45:
06:b2:4b:71:a0:f1:82:77:18:bb:37:b3:7c:2c:1b:84:a7:d1:
d9:42:8a:18:be:b4:ac:a2:26:bd:10:cd:0e:f0:c5:85:4a:46:
04:c1:ed:6b:e8:97:5e:6b:55:9d:5a:61:ed:cd:6c:82:74:af:
79:47:8b:87:95:21:3c:cb:0f:fb:b6:e8:e4:07:2b:87:3c:a2:
87:fc:b5:9e:7a:d4:95:1f:bc:b5:ae:b9:4d:c1:df:6b:2b:43:
cc:ca:a0:50:5e:ad:a9:f5:43:44:f9:d7:27:92:66:45:f1:4a:
2f:08:71:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:38:33 2025 by rpki-client