Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0481A220F52111EFAB74165D762E951A.roa
File: 0481A220F52111EFAB74165D762E951A.roa (raw, json)
Hash identifier: hCIgfPJd2F8Ksg7KP4/3e5P+Z/8EdGhYhpx0sMwAR5w=
Subject key identifier: C0:AB:54:9B:B9:7F:84:88:2B:6C:D9:36:68:B8:6C:15:9A:D3:3F:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016918
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0481A220F52111EFAB74165D762E951A.roa
Signing time: Thu 27 Feb 2025 15:39:23 +0000
ROA not before: Thu 27 Feb 2025 15:39:19 +0000
ROA not after: Wed 26 Mar 2025 15:39:19 +0000
asID: 62240
IP address blocks: 154.196.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92440 (0x16918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:39:19 2025 GMT
Not After : Mar 26 15:39:19 2025 GMT
Subject: CN=67c0872b-dba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6d:5c:b3:b2:4b:20:48:38:87:4e:3a:93:6c:
71:19:47:fe:00:26:06:9d:29:34:62:1f:41:89:11:
a4:09:e3:ce:d8:a1:ef:38:82:a5:cd:69:62:a1:ba:
34:87:4b:ab:ea:3d:ff:7b:22:84:3b:63:1d:82:07:
56:be:7f:86:3a:d4:2e:55:c1:13:15:69:47:1e:00:
53:da:ae:8f:79:b5:5b:19:e2:84:26:bc:38:13:97:
d6:7a:07:de:21:16:dd:f1:41:a5:6e:99:64:32:43:
0e:4c:29:19:81:a0:ef:05:b6:c6:e7:bb:08:6a:20:
4f:ab:b6:ca:b4:70:d6:92:a8:5a:92:28:1a:c7:a8:
30:52:6a:ed:d0:b4:4f:ad:68:80:f4:b8:36:49:29:
a0:e2:96:d2:b7:dc:8e:8a:7e:34:90:1f:1b:13:60:
71:e8:7c:9f:71:11:47:eb:4c:eb:76:53:89:97:15:
9f:78:cc:7b:5c:70:67:17:55:89:05:f6:ff:3d:ac:
ee:9f:de:bb:08:24:68:f1:45:dd:1e:c8:91:ca:07:
5c:e4:b2:41:8f:06:0b:5a:6e:10:03:35:c7:bd:86:
97:72:7e:26:cd:36:f4:cf:d6:51:de:e9:85:f1:be:
41:20:1d:21:1c:4d:bd:e2:b8:65:5a:93:82:99:03:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AB:54:9B:B9:7F:84:88:2B:6C:D9:36:68:B8:6C:15:9A:D3:3F:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0481A220F52111EFAB74165D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.75.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c9:6c:72:9c:b5:a1:7f:c0:2e:a5:ae:3b:ee:f5:55:cf:ee:
88:11:af:07:8d:53:50:6b:66:58:55:f0:81:a6:19:d3:5d:eb:
ef:f0:14:6a:f0:6c:64:10:0b:f5:6e:07:d7:a0:b1:d5:d0:e6:
a9:e4:42:20:56:00:fa:93:2a:e8:44:f0:c8:9d:16:a5:42:b5:
37:20:4a:a4:ef:46:24:9c:b3:9b:aa:aa:1c:d5:04:07:af:41:
3e:78:d0:88:48:70:ad:64:6a:aa:f0:b9:5a:9c:25:32:de:42:
17:2b:d2:22:7a:14:74:2d:c1:a3:a5:e4:61:54:7b:3f:a0:bf:
2f:0a:b2:6c:e5:1b:a5:80:fb:c6:03:a2:70:bd:19:fe:16:22:
f5:96:59:bc:fd:ea:aa:0d:55:b5:b4:3a:a5:b9:78:d9:55:61:
13:f2:6c:77:7c:6b:0e:be:4c:42:3f:4e:0f:07:ba:f3:c5:c1:
b6:c5:85:69:56:6a:13:b4:05:c8:21:10:fd:ff:be:c2:42:91:
c4:97:2f:56:f5:f6:7b:6b:9a:00:38:5d:46:f5:57:95:87:22:
66:29:b9:3b:1a:5b:5e:51:57:7a:c2:c9:55:e2:a9:ae:3f:e8:
7e:c5:3c:9c:21:bb:11:18:53:60:24:f4:09:25:a4:e3:14:f6:
d2:8a:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:01:53 2025 by rpki-client