Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A2A8B4DA4B11EF99516FB2762E951A.roa
File: 16A2A8B4DA4B11EF99516FB2762E951A.roa (raw, json)
Hash identifier: UwX2KgipaRUCukchmZS9mhLjHmvHd1Ttq0GwQnkoDGY=
Subject key identifier: 55:60:95:F1:AB:5A:FC:65:EB:8A:2E:E0:A6:2E:74:0D:14:0D:FF:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01466D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A2A8B4DA4B11EF99516FB2762E951A.roa
Signing time: Fri 24 Jan 2025 12:02:31 +0000
ROA not before: Fri 24 Jan 2025 12:02:26 +0000
ROA not after: Wed 05 Mar 2025 12:02:26 +0000
asID: 49505
IP address blocks: 154.211.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83565 (0x1466d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 12:02:26 2025 GMT
Not After : Mar 5 12:02:26 2025 GMT
Subject: CN=67938157-1e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:41:0f:23:88:f5:47:0b:b6:83:dd:8a:d8:d4:
69:3e:4f:6d:2b:1c:4d:87:d0:5d:cf:d3:82:5d:06:
9e:57:6a:4e:cf:73:b1:53:e9:5f:57:ef:71:48:8d:
b2:3f:80:3e:30:68:a5:ce:74:f5:97:cd:5e:d7:f7:
77:0c:9d:1f:7b:59:f4:73:57:57:91:e3:01:47:b6:
61:89:bd:56:f4:bc:04:45:bc:6b:e8:0e:0e:b7:71:
b7:a5:90:23:d4:f3:8a:fc:22:22:31:49:ad:28:37:
25:ba:bc:0e:c9:77:75:54:d0:e6:a9:45:37:6a:46:
82:53:e0:ea:a0:73:24:60:a8:d4:e9:24:b4:1c:9c:
ac:8b:68:7b:2d:ad:00:2e:c2:87:d1:d5:80:68:4b:
62:8f:00:ec:1a:0e:c6:c1:40:c7:07:b5:43:af:6c:
dc:da:41:c6:06:61:99:4f:bc:bb:e1:01:15:52:16:
32:86:fa:ee:05:3e:0c:9a:6d:df:aa:39:89:ae:a5:
cd:ec:16:e7:28:80:26:fe:77:a6:53:05:c2:f0:4f:
e2:f7:08:5c:6c:f3:f9:fc:52:aa:bd:78:17:9c:ee:
cf:7f:ca:04:45:66:53:4a:f2:0d:b2:67:6d:97:f1:
8e:93:b5:55:a2:78:c8:40:67:08:1f:77:55:20:78:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:60:95:F1:AB:5A:FC:65:EB:8A:2E:E0:A6:2E:74:0D:14:0D:FF:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A2A8B4DA4B11EF99516FB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.16.0/24
Signature Algorithm: sha256WithRSAEncryption
37:63:0c:92:32:ff:31:d8:cf:8d:f1:82:fa:f8:d1:b6:5d:86:
8e:a7:72:91:2d:c5:1d:d9:c1:53:cd:cd:60:ff:75:05:d0:8c:
14:e7:1a:71:4d:83:b6:71:e6:47:dd:c6:37:12:ad:74:83:91:
0f:89:56:4f:04:c2:ce:e5:aa:22:44:c8:2c:6f:47:75:91:b1:
9f:30:74:e8:93:da:43:6e:60:b0:94:3b:68:e3:82:d6:61:fc:
68:da:60:77:ae:72:eb:cb:59:52:50:0e:36:3d:18:ce:f6:c3:
cf:74:b4:89:4b:e3:42:7b:24:0c:75:72:e2:36:db:bf:5f:af:
52:62:e2:f4:c5:d7:e8:e8:c6:24:6d:d7:17:a9:29:b9:22:e3:
44:0d:ba:5f:c9:6e:8a:46:af:46:45:4e:89:78:a2:4f:36:39:
de:59:7e:e1:2f:73:92:2d:13:7d:6a:7a:51:fc:f6:16:dd:46:
05:b6:21:58:5b:e5:66:df:cf:c5:c6:c5:35:b6:1e:3a:5e:f5:
90:7c:93:c9:26:c6:13:3c:97:56:d5:f2:ee:b8:a3:d2:c3:c4:
8a:b4:27:da:39:73:4e:5e:22:2c:42:d3:dc:b2:35:8a:dd:4c:
c9:07:ff:d2:6c:00:07:64:ed:95:1b:0f:44:64:7c:09:97:84:
91:37:63:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:53:48 2025 by rpki-client