Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15CB9B24F62211EF985E99B8762E951A.roa
File: 15CB9B24F62211EF985E99B8762E951A.roa (raw, json)
Hash identifier: SzdWuumAAM4KJoXs2ReEfaZgVnl0+e8vdiBKqPQZBY0=
Subject key identifier: A5:BD:0F:98:1F:64:A6:18:17:F2:61:1F:80:9D:77:09:18:96:55:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15CB9B24F62211EF985E99B8762E951A.roa
Signing time: Fri 28 Feb 2025 22:19:33 +0000
ROA not before: Fri 28 Feb 2025 22:19:29 +0000
ROA not after: Mon 31 Mar 2025 22:19:29 +0000
asID: 5065
IP address blocks: 154.86.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93317 (0x16c85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:19:29 2025 GMT
Not After : Mar 31 22:19:29 2025 GMT
Subject: CN=67c23675-a8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:0a:4d:f6:41:cd:3e:1c:99:8f:1a:21:48:
51:74:2b:22:74:9e:66:fe:15:6c:f5:bc:61:97:e7:
2f:ee:96:cb:f6:c6:55:10:d7:33:af:1a:f6:05:46:
b4:97:5f:64:88:64:25:c6:c9:dd:70:18:d1:4b:e6:
96:db:87:63:d8:f8:3f:10:82:9e:27:8e:d6:29:e6:
53:7f:1a:cb:ba:b6:39:6b:58:bc:99:cf:f3:4f:c3:
85:c7:64:ee:88:f8:57:a7:93:cf:63:e5:ba:b3:33:
96:7a:d8:09:8b:6d:83:f0:9e:7f:1b:04:04:f3:b3:
e4:f1:6f:49:9a:8a:02:a6:48:ee:f3:36:92:b7:49:
c6:fa:eb:5b:9a:9d:35:c7:e4:0b:83:98:d1:28:47:
81:11:04:e9:0c:4e:b8:27:54:73:89:4a:9c:71:58:
f8:3c:d1:3d:8d:91:0e:85:72:d3:ad:75:72:0c:d6:
03:3a:d1:7d:f6:5c:b5:63:3b:1e:38:93:c3:ca:cd:
96:09:a7:ca:86:e7:b3:38:44:58:38:fe:17:ba:e6:
0e:23:f0:c4:ab:1b:bb:82:be:38:bd:a2:ce:9c:08:
2a:e3:c6:02:30:bc:76:9a:3e:9b:64:26:12:17:1c:
0c:2f:9a:f3:cf:f3:50:92:17:48:7c:5d:da:2e:15:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BD:0F:98:1F:64:A6:18:17:F2:61:1F:80:9D:77:09:18:96:55:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15CB9B24F62211EF985E99B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.9.0/24
Signature Algorithm: sha256WithRSAEncryption
99:35:90:c1:c8:b8:47:63:f9:b8:68:50:e8:9e:5a:cb:93:0c:
f8:2b:55:dd:53:f5:e4:fe:33:b7:12:3f:9b:0b:5d:1e:e4:76:
72:b1:85:03:48:f7:af:a2:cb:c1:2b:44:51:07:be:47:5d:1f:
88:cb:82:2d:a6:e4:ec:bd:20:9c:f1:06:ee:e8:87:6c:66:c2:
3d:97:a9:ac:59:bf:62:d4:f2:9d:0d:24:91:99:0b:90:50:0c:
03:c5:78:4f:b5:e0:9e:2c:de:13:5d:af:f4:a4:6e:16:ce:ea:
96:3c:99:07:29:3e:46:76:bd:c7:59:e5:00:b0:62:af:73:79:
b5:f8:5b:80:69:cc:62:15:38:63:c9:e7:0c:04:b0:de:1c:98:
a3:b1:e0:3e:d5:f7:38:34:55:9c:ed:48:d3:aa:fa:72:4f:a1:
77:9a:31:7c:98:93:d3:ef:15:87:16:be:77:6d:d4:9e:6c:12:
b1:f8:5c:d8:87:aa:83:bf:fe:1f:bc:c9:67:26:04:b3:57:7e:
38:54:4f:41:9f:81:aa:75:8c:5c:70:4a:67:91:ad:ce:57:ba:
d7:fd:45:f1:96:32:21:39:eb:fb:13:1d:6b:66:aa:39:a4:60:
9c:6e:d6:15:94:46:7b:c5:14:79:1f:9e:bc:b8:46:e6:6a:db:
32:36:41:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:24:05 2025 by rpki-client