Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12525726F4EC11EFB1792A74762E951A.roa
File: 12525726F4EC11EFB1792A74762E951A.roa (raw, json)
Hash identifier: 93aSueymK8Yh3ztJXuWSS9hgLVG+Ba6e1YEClni7wXQ=
Subject key identifier: C4:01:27:19:DA:CA:B7:52:E8:94:A3:9F:1B:1F:ED:0A:16:AC:BF:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016723
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12525726F4EC11EFB1792A74762E951A.roa
Signing time: Thu 27 Feb 2025 09:20:23 +0000
ROA not before: Thu 27 Feb 2025 09:20:19 +0000
ROA not after: Wed 26 Mar 2025 09:20:19 +0000
asID: 62240
IP address blocks: 154.195.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91939 (0x16723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:20:19 2025 GMT
Not After : Mar 26 09:20:19 2025 GMT
Subject: CN=67c02e57-6aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:9c:25:91:d3:cf:4f:b8:92:eb:28:b5:90:
3b:db:0c:8f:30:95:fb:57:8c:08:e5:c6:f5:2a:25:
c0:74:47:a5:25:6f:ee:a3:ba:52:75:ea:86:2c:8c:
53:f8:df:94:e0:1c:14:35:18:89:56:b3:e3:19:4a:
b7:83:10:27:42:9c:b6:77:03:e6:bf:c7:f9:cc:9c:
3e:45:59:b0:7e:a3:c4:c0:c9:6f:68:b5:1a:97:a0:
ce:5a:86:cb:2b:71:c5:de:db:54:64:ea:c0:a3:09:
66:e2:8d:72:3b:b3:d5:52:d8:e4:fc:7f:9c:63:d7:
ff:59:14:a9:d7:27:34:d3:8c:27:41:63:2a:9a:9a:
55:3c:07:87:f8:44:1b:38:da:56:2b:9b:1c:f3:31:
47:59:dd:82:4e:a6:ac:ca:a8:9e:62:f3:9f:f8:6a:
76:62:73:e8:97:79:a2:73:41:98:e6:a7:83:33:94:
01:e0:43:c1:7c:81:8a:c9:e6:b4:66:59:b5:9e:b4:
2e:a6:7b:37:12:db:93:c6:6d:84:7c:49:3d:99:44:
61:a4:56:08:b2:2e:a5:98:78:63:d3:80:b6:06:f2:
f5:3b:42:3b:28:00:0c:dd:de:be:9b:a3:8e:d5:78:
48:d1:3d:51:dd:57:75:9b:6b:59:32:3d:66:78:93:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:27:19:DA:CA:B7:52:E8:94:A3:9F:1B:1F:ED:0A:16:AC:BF:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12525726F4EC11EFB1792A74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.28.0/24
Signature Algorithm: sha256WithRSAEncryption
01:bf:4e:17:aa:2d:34:85:64:d9:bd:74:9b:ce:4d:e8:d9:b4:
36:d2:08:ae:0a:3c:fb:af:ae:90:8b:02:6b:3a:8f:c2:d2:70:
0c:c4:e2:e6:b5:8a:d9:44:4a:53:21:e3:d3:4d:15:b0:a9:83:
01:05:5b:09:83:3a:a2:d6:54:b9:13:c1:07:19:03:d9:96:85:
ea:27:e3:51:68:9f:d6:0d:c6:ff:7c:73:64:27:81:53:fb:1a:
1e:3c:0c:2f:b2:37:01:7c:a6:3a:b1:1b:fa:66:ed:d3:e1:a6:
de:b2:64:c5:92:21:a0:b4:6f:b7:af:ab:97:63:45:52:49:54:
66:e0:dc:29:52:87:4e:8e:4e:a4:a9:dc:18:73:6e:b6:99:69:
23:e2:7a:03:fd:a5:7f:8b:be:e4:7d:93:0a:aa:6c:b4:1e:a6:
f9:4b:b5:b0:5a:87:45:21:5b:6f:f8:64:20:5a:6f:23:d6:d1:
84:26:25:e7:67:90:9b:15:f8:74:67:36:27:6e:8e:65:84:28:
fa:bc:8f:4e:04:59:fa:3b:3c:2d:79:bc:c2:a7:40:c3:2a:25:
db:9d:0c:d9:20:19:49:4e:69:3a:e4:4f:e8:f3:65:15:dc:c2:
58:a5:7a:48:bf:d7:3d:5a:8e:2f:62:e5:8a:27:cb:5d:15:68:
b2:6c:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:04 2025 by rpki-client