Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10F57E56F5B611EFA825305D762E951A.roa
File: 10F57E56F5B611EFA825305D762E951A.roa (raw, json)
Hash identifier: 7iXZy0Zcuby3+p6lYnfNUqp25XhwBZB1ad9eb/cjkUY=
Subject key identifier: 17:E5:08:13:1E:DF:EE:BA:B4:4C:18:20:E2:85:44:C3:68:DB:AE:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10F57E56F5B611EFA825305D762E951A.roa
Signing time: Fri 28 Feb 2025 09:26:19 +0000
ROA not before: Fri 28 Feb 2025 09:26:15 +0000
ROA not after: Mon 31 Mar 2025 09:26:15 +0000
asID: 395793
IP address blocks: 154.200.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92742 (0x16a46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:26:15 2025 GMT
Not After : Mar 31 09:26:15 2025 GMT
Subject: CN=67c1813b-d159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:ec:97:c0:de:6d:bb:1a:15:b5:fa:a0:b7:
c5:72:60:b8:78:62:98:87:88:de:a1:fe:a0:38:30:
ac:e0:68:6f:a2:0f:46:d8:0d:b1:bd:83:f6:6b:e1:
40:5b:66:63:b5:2e:e6:18:b9:b5:28:da:3c:a7:52:
14:db:5f:35:8a:00:fa:e3:96:ac:12:5e:d8:cb:46:
d4:e4:ec:c1:4d:cc:53:73:98:71:54:74:a6:0a:d1:
97:4f:74:af:5c:80:fa:ac:10:18:fc:01:da:e2:ad:
0a:66:19:00:a6:07:90:02:e0:7c:4d:7f:02:e4:ce:
26:6e:60:3a:0a:b4:d3:49:48:2f:90:84:57:53:c8:
5d:65:ab:ad:d9:bf:f8:72:0c:85:45:63:70:84:ce:
4e:fd:22:5a:d3:fb:60:f4:e7:2e:3d:6d:ff:5b:bf:
b9:99:d3:e2:b1:49:e2:0c:ca:b7:ad:62:7c:33:fb:
7d:de:38:09:71:b9:10:cd:3a:91:d3:fe:33:a3:fa:
24:86:26:39:73:3d:f0:2f:67:26:d2:2c:35:ef:75:
fd:5c:25:cf:ab:3f:3a:bc:db:40:45:db:0f:f6:61:
3b:2b:d0:c2:02:df:d1:55:b4:c9:1c:c3:1b:b1:2f:
47:0a:f9:d0:25:84:1a:27:0b:62:9e:72:ae:3c:85:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E5:08:13:1E:DF:EE:BA:B4:4C:18:20:E2:85:44:C3:68:DB:AE:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10F57E56F5B611EFA825305D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:40:fd:69:11:64:d3:29:76:cd:6a:07:ce:4a:a2:cf:c7:18:
b2:91:db:bb:ae:05:ec:c8:b8:0e:80:bb:17:3f:3b:42:bb:05:
ce:e2:6d:72:c5:97:79:8e:02:04:57:78:d4:46:e1:52:2d:51:
3f:67:94:2e:84:34:e6:0b:b6:e6:59:de:95:b6:1c:e2:2b:04:
38:1a:04:73:5f:66:ad:a6:d3:7d:d6:bf:4a:49:5a:8e:00:56:
d4:4c:0c:37:b4:ba:4e:ca:df:7e:8b:0e:fa:59:48:2d:35:a4:
cf:f0:a4:de:16:5c:60:f4:8b:a3:34:f9:6b:00:78:a8:b7:a7:
41:ba:a2:20:a1:cc:b5:95:88:26:91:19:e9:fb:fd:31:07:76:
20:2c:df:c1:5d:19:5d:e2:94:42:b0:15:62:d6:17:7b:e6:e9:
c1:f1:e8:fb:f4:0d:c1:77:c9:fb:47:3c:fb:df:c7:09:a6:ba:
06:ad:ac:b7:49:44:47:df:3a:b6:39:fa:16:3b:7c:df:a2:13:
88:a1:8b:fc:17:e9:6b:07:c6:b4:99:7f:73:3a:ff:6e:44:0c:
ae:1c:1f:37:99:8f:e2:3f:e7:92:86:81:8e:86:7a:5c:ba:23:
c5:3d:26:ce:10:47:61:f5:d1:5e:8a:df:28:90:f4:a4:af:c7:
5f:19:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:00:07 2025 by rpki-client