Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/155671DCF68611EFB0490170762E951A.roa
File: 155671DCF68611EFB0490170762E951A.roa (raw, json)
Hash identifier: sTu7zAMr4B9VxPLEF8rlo6bsyK186tGQ+Pbo0pIy72U=
Subject key identifier: 88:10:CA:C0:05:C0:51:26:06:08:BD:43:34:D7:85:04:C6:47:66:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/155671DCF68611EFB0490170762E951A.roa
Signing time: Sat 01 Mar 2025 10:15:22 +0000
ROA not before: Sat 01 Mar 2025 10:15:18 +0000
ROA not after: Mon 31 Mar 2025 10:15:18 +0000
asID: 202656
IP address blocks: 154.222.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93637 (0x16dc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 10:15:18 2025 GMT
Not After : Mar 31 10:15:18 2025 GMT
Subject: CN=67c2de39-e14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:c0:b8:93:8e:43:d6:23:25:9b:b4:1a:bd:
b5:20:20:11:35:2d:5f:d7:e5:7c:4d:1c:4d:75:02:
e4:02:74:28:43:d3:83:ed:b0:85:79:34:8f:96:14:
2f:55:9d:5f:fd:9c:f7:96:10:49:82:83:86:23:a6:
10:fe:8f:75:9e:a9:95:fc:50:0b:2b:a2:ee:2b:44:
18:52:76:64:28:83:72:39:bf:e6:04:d8:96:e2:dc:
d2:de:ed:ff:7e:72:3d:b6:b7:7d:39:60:f6:c8:09:
9b:56:d0:57:c6:01:c3:31:a9:a2:5c:89:56:2c:94:
54:e6:7b:81:57:b5:66:3f:01:1b:38:f0:f0:83:7a:
fb:c3:44:66:f4:b5:32:bf:ae:af:d3:6a:7f:8f:df:
6f:37:ca:43:cb:d3:8d:b9:dc:5d:8d:db:65:ed:6b:
42:29:4f:92:36:49:1a:a7:58:34:cb:a1:67:77:e6:
ab:27:88:89:eb:27:27:54:70:66:d9:0d:01:17:21:
61:18:02:92:3d:8d:ed:ef:13:30:1b:3e:a0:93:12:
e4:fb:9b:b0:63:dd:e2:3e:9e:8e:a9:2a:80:ad:5a:
64:64:7b:8a:3c:31:d8:83:5e:cb:cc:05:54:ac:1f:
c4:6f:66:6c:f1:44:11:bc:9f:91:18:f7:ea:25:01:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:10:CA:C0:05:C0:51:26:06:08:BD:43:34:D7:85:04:C6:47:66:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/155671DCF68611EFB0490170762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.195.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:c6:4c:fa:4a:c2:0f:a0:15:78:ff:78:4d:60:0f:b4:fd:a1:
ca:30:75:0e:17:74:88:50:69:20:5f:b5:2f:e9:cd:c6:40:5e:
e2:18:01:6b:11:2d:97:7a:30:40:1e:b5:cd:c6:86:1a:c6:0d:
0b:0f:f4:67:4b:47:ef:6d:85:43:a0:b3:0e:1b:7a:d2:0b:6a:
9a:83:c7:3a:1b:21:05:b2:d3:0d:a9:ed:91:cf:a2:ca:16:5e:
89:fa:47:32:72:68:2f:ed:59:a9:82:56:29:f7:0a:4c:c1:8a:
8a:fe:90:53:0f:2a:e2:ca:97:4f:1e:a8:2e:be:c8:11:4f:30:
41:57:70:13:5c:91:60:13:09:c0:e4:63:f9:a6:02:c9:7e:95:
f6:16:45:f7:f3:e6:7f:6f:f0:bb:a7:b9:9c:c4:4b:74:1a:30:
9d:06:ef:b6:9a:b1:8a:6e:99:95:87:2f:2a:e9:c6:ba:d0:71:
d7:2b:52:88:21:f4:de:cc:9d:e0:23:28:a2:d9:23:80:42:8d:
03:11:fa:c6:71:b5:16:45:b9:f1:a4:66:24:25:b0:41:73:1c:
9f:63:00:03:b5:cd:4d:f7:aa:66:62:78:2e:56:12:b8:df:bd:
b0:a5:0d:a7:f0:8d:bc:eb:03:c2:44:d3:81:df:ce:ab:a9:f2:
92:ea:f0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:39:31 2025 by rpki-client