Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4792806027F411F0B02571CBDAE4EC9C.roa
File: 4792806027F411F0B02571CBDAE4EC9C.roa (raw, json)
Hash identifier: cHI52cnVewO2WJhYLktK1gh+Qp0dmMqlREpo2+EdYVI=
Subject key identifier: 2E:29:7B:86:E3:00:BF:1D:1F:89:27:03:84:9E:26:A7:7B:CA:47:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4792806027F411F0B02571CBDAE4EC9C.roa
Signing time: Sat 03 May 2025 07:57:38 +0000
ROA not before: Sat 03 May 2025 07:57:33 +0000
ROA not after: Mon 12 May 2025 07:57:33 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97938 (0x17e92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 3 07:57:33 2025 GMT
Not After : May 12 07:57:33 2025 GMT
Subject: CN=6815cc72-c5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:9b:e0:25:13:4f:30:98:5f:a2:d6:d6:54:
85:14:09:08:9e:da:b7:f7:11:55:af:a1:6f:94:67:
27:42:04:f7:9d:69:c5:1b:be:49:9e:c9:6a:0c:45:
3b:7d:7c:dd:d1:6f:18:f0:89:ad:7b:51:f0:14:f6:
31:9d:09:64:23:d1:e3:08:4a:29:ac:46:5e:9e:7a:
f2:f9:d8:8a:32:1b:e8:09:a5:bc:03:09:fc:d4:2d:
3f:5d:e5:5d:34:6c:01:a1:0b:a0:b1:41:56:11:e7:
57:4c:79:3f:e4:de:11:36:fb:95:3e:28:9c:86:89:
04:47:70:cb:27:39:f5:7e:ae:38:dd:95:99:12:44:
ea:d5:b0:fc:7d:a7:f9:23:37:34:2e:7d:20:c1:0e:
18:15:70:4e:ac:21:1f:c0:3c:cc:f9:3e:67:fc:bb:
76:e1:d9:08:f6:1f:2e:b2:8b:24:9b:fc:9d:23:11:
72:4b:33:dd:ae:73:53:40:0f:55:7a:bc:ea:87:a5:
07:9a:4b:8e:9d:85:c5:2f:99:e7:14:95:92:90:45:
2e:af:3d:48:bf:1d:bf:45:ca:f2:d9:f7:fb:83:1d:
7e:df:71:f2:e3:33:b1:86:60:e1:ea:a0:96:b0:fc:
87:fc:7c:99:f2:3b:07:9a:12:c9:e0:6d:a5:d0:ed:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:29:7B:86:E3:00:BF:1D:1F:89:27:03:84:9E:26:A7:7B:CA:47:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4792806027F411F0B02571CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
54:8a:ca:bb:2c:52:ee:e1:9c:8a:0b:46:96:35:de:92:10:e0:
2b:90:81:bb:5b:1b:17:32:ac:e6:45:47:e9:51:27:1f:39:24:
6b:2c:73:c2:91:7a:23:14:9d:bd:5c:4d:3b:8c:55:70:ad:da:
59:fc:7f:35:e7:21:40:19:7c:48:f5:1c:88:8d:6f:3b:7e:ce:
c7:50:77:66:0a:4d:1e:03:70:9f:e9:d6:23:fe:96:e8:54:fb:
ed:90:8a:26:e5:c3:49:ec:84:17:37:70:a8:9d:8c:e1:b9:98:
f1:3b:48:b3:b7:ea:39:7e:a4:57:08:e5:66:0b:35:1e:70:58:
2a:28:bd:88:8a:1c:bf:18:fb:72:5a:b1:e1:ea:3a:66:b5:7f:
7a:4d:c9:cb:18:7c:42:4a:79:11:80:11:58:d1:0f:b4:1a:23:
7f:f0:b2:28:0d:43:3f:4e:ce:5b:2c:2a:6a:1f:59:0d:ad:0b:
09:ab:71:60:79:09:9a:8e:3e:ee:36:6b:8d:86:18:14:ec:df:
5c:40:32:60:56:eb:ed:c6:8b:13:c9:76:f1:70:f5:a7:a8:0e:
69:15:a9:3e:a6:94:6c:1d:81:57:43:5b:d9:1c:d5:1f:3e:b6:
04:42:1e:70:6a:d8:01:f6:24:b6:59:71:ad:00:aa:c2:63:8e:
43:12:64:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:35:41 2025 by rpki-client