Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10BAC74AF4FB11EF9FA6EF5C762E951A.roa
File: 10BAC74AF4FB11EF9FA6EF5C762E951A.roa (raw, json)
Hash identifier: bpJ5j+8Rc0JDK3YoSZ5v7r4LoOJmRHdFu24K2/d/KU8=
Subject key identifier: E2:FD:FB:AB:E5:21:06:C4:19:15:C8:E3:04:B0:57:1E:89:7A:B2:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016804
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10BAC74AF4FB11EF9FA6EF5C762E951A.roa
Signing time: Thu 27 Feb 2025 11:07:43 +0000
ROA not before: Thu 27 Feb 2025 11:07:39 +0000
ROA not after: Wed 26 Mar 2025 11:07:39 +0000
asID: 62240
IP address blocks: 154.196.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92164 (0x16804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 11:07:39 2025 GMT
Not After : Mar 26 11:07:39 2025 GMT
Subject: CN=67c0477f-a0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:00:56:c3:bf:46:9a:bc:0a:35:e1:43:95:
8d:2a:dc:1b:59:1f:25:aa:b0:2d:3b:70:e8:90:6b:
f9:09:17:3a:18:9f:31:ea:9b:8e:89:6b:58:c6:5f:
fe:60:3f:4e:25:7c:6c:58:05:2a:c3:ab:b5:16:de:
98:b4:bc:59:49:02:41:39:00:1c:e0:d0:46:90:20:
83:8d:af:44:2b:d9:f9:80:26:d4:2e:56:7f:06:2b:
43:63:74:a0:12:86:3f:4a:01:be:1f:e0:ca:6f:57:
3a:57:96:d7:e4:a9:39:40:97:57:17:66:24:bf:a0:
cb:d3:bb:44:20:39:0c:12:a2:1e:af:7e:99:92:f7:
ae:48:66:02:4e:fc:aa:4c:39:6f:52:eb:56:0c:02:
8c:38:9c:46:a2:a9:17:78:48:21:31:05:dd:78:e1:
87:3e:a3:63:1b:db:bb:25:5e:25:db:8e:ef:23:00:
a2:9c:b0:88:2d:b9:62:20:0f:0a:02:5e:dd:bf:15:
39:9f:c5:74:ef:02:42:74:6d:9d:54:e2:96:35:73:
17:37:3d:6d:83:ba:d1:f5:04:20:41:ae:24:93:8a:
07:e0:c8:0c:49:c0:58:23:c2:99:e7:48:f2:50:a6:
05:c5:06:f5:fe:68:7f:47:92:6e:a8:aa:68:a8:1b:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:FB:AB:E5:21:06:C4:19:15:C8:E3:04:B0:57:1E:89:7A:B2:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10BAC74AF4FB11EF9FA6EF5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0f:4e:b3:0d:62:4b:c8:7b:50:9a:34:6a:81:55:ab:bd:3e:
d6:f7:ce:bf:f1:b9:9d:4e:5a:68:43:c3:c1:3d:da:9a:b1:d4:
59:80:ff:19:70:47:f5:7e:f2:0e:ea:c7:a4:72:84:8e:ff:04:
7d:03:5b:b9:f1:b0:f8:93:19:b7:04:f6:d9:12:e2:7b:d2:ab:
4f:24:21:fa:68:9c:3c:05:58:c3:d1:d5:04:ce:c5:15:db:82:
05:4c:13:f3:be:f5:19:0b:be:3b:ba:a8:2f:32:08:fd:3c:7b:
45:bb:c8:51:ba:7a:94:2c:ad:fd:c0:e0:19:40:f5:92:6c:72:
c1:7c:64:76:68:bb:98:f8:71:a9:df:8b:8e:23:99:80:c4:e7:
c4:6e:c8:6c:94:bd:7f:8a:6c:fb:49:32:18:40:d3:00:44:c1:
e2:73:b6:bb:e2:04:ff:e0:1e:7f:19:e2:cb:bb:79:90:3e:9d:
c4:36:79:80:9a:36:32:c5:47:5c:c1:f2:48:8d:ba:6b:eb:1e:
f6:31:87:ed:74:66:e7:37:af:b0:e0:bc:01:a5:ec:a3:55:b5:
a2:15:70:90:ed:37:89:6e:7b:f1:96:80:f7:62:fa:1e:95:45:
9f:23:31:c9:ec:f7:07:96:e3:88:7a:c2:0c:4c:9c:98:d6:10:
0b:ce:57:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:27:34 2025 by rpki-client