Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF1843D4F4F311EF82B209AC762E951A.roa
File: FF1843D4F4F311EF82B209AC762E951A.roa (raw, json)
Hash identifier: Dwq0C1/JU/Y8MypvlH4uioyBKx2IxcLbN0grO48PxLU=
Subject key identifier: 12:CB:23:50:E5:C6:CB:49:2B:F1:10:9E:81:5A:48:2C:46:22:A8:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0167A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF1843D4F4F311EF82B209AC762E951A.roa
Signing time: Thu 27 Feb 2025 10:17:07 +0000
ROA not before: Thu 27 Feb 2025 10:17:02 +0000
ROA not after: Wed 26 Mar 2025 10:17:02 +0000
asID: 62240
IP address blocks: 154.195.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92067 (0x167a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:17:02 2025 GMT
Not After : Mar 26 10:17:02 2025 GMT
Subject: CN=67c03ba3-7e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:9b:02:2a:6d:e4:c5:97:8d:7d:61:de:c6:
68:87:0a:80:b0:36:d0:38:9c:2b:15:ca:08:6b:20:
6f:e1:33:90:35:3a:22:e5:cc:50:23:81:3c:dd:83:
a5:1e:87:80:8e:4c:a4:c9:3c:c5:9b:d8:05:c0:e2:
19:11:80:d2:61:0d:93:2c:1e:f4:29:fc:f2:51:4b:
9f:19:30:70:0c:e4:53:e9:e2:e0:90:d8:b5:62:fb:
ef:4b:49:1b:c4:f7:9e:42:1b:b8:51:87:61:d3:57:
98:50:4e:1d:85:df:4e:e8:ff:93:e8:3e:8a:d4:73:
cd:cf:c7:bc:4d:e2:36:eb:7d:f2:5f:e9:cd:9a:b9:
07:16:51:6a:28:f7:fe:52:c0:b5:07:32:11:aa:bb:
fa:e3:a6:5f:57:df:5e:8a:ab:8f:83:71:44:c0:8f:
45:74:2c:68:8b:c9:10:6e:6d:a7:ad:6c:92:70:8e:
12:8d:12:ef:47:bd:1f:79:00:26:47:99:44:2c:8b:
44:cd:1d:3c:4e:4f:00:f4:25:bb:82:96:d7:d2:bc:
bb:99:48:f3:a6:b6:a6:53:55:1d:6f:66:07:d5:de:
25:7c:86:52:b1:b3:13:dc:44:cf:d6:f7:5e:35:45:
54:5d:12:2e:d2:d9:38:9a:7b:39:a8:6a:df:68:a3:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:23:50:E5:C6:CB:49:2B:F1:10:9E:81:5A:48:2C:46:22:A8:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF1843D4F4F311EF82B209AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:15:b7:42:fc:b1:bd:06:40:f5:80:39:85:b3:be:4f:22:76:
31:fe:54:8c:d2:08:9b:9d:10:45:4f:87:79:cf:13:d2:ee:93:
5d:2c:fd:b8:2b:03:6d:c4:1c:3b:97:b1:c3:b1:55:98:91:b2:
90:cf:40:ac:00:77:cd:65:93:4c:b3:75:d8:62:b2:b2:8d:52:
ea:2e:c8:54:8c:38:ec:50:9c:56:c1:56:ec:90:b2:1b:94:8e:
28:5e:b4:7e:8e:c5:73:6e:c5:f9:fb:02:27:91:fa:32:67:b3:
df:cf:1a:d9:30:f1:e5:4c:81:2c:34:84:01:7f:6d:e8:d6:14:
2e:e8:c3:4c:e9:05:cc:6e:59:d5:e8:c8:0a:9e:91:1c:1c:31:
57:42:57:9b:83:18:dc:cc:f1:80:8c:1f:61:30:ae:43:b8:ff:
b7:a7:6e:ee:69:30:9d:ac:80:32:88:e2:da:24:99:24:55:5c:
6d:43:68:30:6b:0e:fe:89:b9:ae:70:a8:d4:fd:d8:ef:07:38:
1f:74:a1:43:13:9c:6d:85:5c:d3:56:25:a2:fc:f3:a0:25:f6:
b1:fe:bb:da:67:2d:8e:3e:9f:ac:3e:0c:ae:9c:eb:4f:1d:f8:
f7:6f:22:91:1c:eb:a5:3e:94:87:e0:29:2d:c8:e9:1d:ee:5a:
2f:dc:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:54:23 2025 by rpki-client