Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176F23D8F81611EFB38B268A762E951A.roa
File: 176F23D8F81611EFB38B268A762E951A.roa (raw, json)
Hash identifier: JxPtQ3yKqFMLTBtPCf+1LUL6b51M6OQOMB6BD7BgD1s=
Subject key identifier: 8D:13:4C:EC:2A:F2:EA:D5:39:46:0D:15:E9:2D:0F:54:15:D3:25:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176F23D8F81611EFB38B268A762E951A.roa
Signing time: Mon 03 Mar 2025 09:58:44 +0000
ROA not before: Mon 03 Mar 2025 09:58:40 +0000
ROA not after: Mon 31 Mar 2025 09:58:40 +0000
asID: 202656
IP address blocks: 154.219.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94181 (0x16fe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 09:58:40 2025 GMT
Not After : Mar 31 09:58:40 2025 GMT
Subject: CN=67c57d54-4497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:d6:8d:dc:e4:c8:6b:4a:b8:cf:c8:81:1c:
da:57:12:45:13:ef:f4:98:12:aa:ae:bb:e2:c9:c3:
e9:ec:9e:2b:68:c1:06:1c:46:a3:3c:e6:5e:0b:a5:
b4:b4:f0:06:2c:d0:15:f5:06:92:83:55:92:de:9d:
c3:d0:57:42:dc:40:19:74:44:c7:41:15:30:1f:ea:
33:7a:62:7c:71:18:81:d6:21:33:cb:8b:5c:3a:54:
f6:21:6a:3c:df:44:36:a1:06:00:12:7d:11:b7:3d:
f7:b1:c2:b4:f4:88:07:97:67:55:28:42:68:b1:52:
d7:21:7b:c9:08:9d:48:4b:39:6e:15:bb:14:de:3d:
b0:69:03:51:f3:28:59:d2:ab:2e:f9:fa:78:9b:3c:
53:a6:ce:72:22:d0:de:97:09:25:d8:13:86:f1:5f:
66:dd:e5:29:e2:37:59:6e:64:41:89:8c:5c:b1:7a:
23:30:b5:a7:6a:63:d8:f3:6c:54:f9:3d:6a:b7:fa:
e5:52:33:8a:da:d2:d0:7a:dd:51:0f:99:77:a7:34:
4d:a6:42:99:f0:72:33:35:95:34:73:1d:ed:d5:5a:
e2:d3:89:d9:c5:ee:fc:e7:a5:5d:b5:77:12:42:b4:
74:f8:d6:34:ce:1b:63:37:2c:cd:f7:20:89:6d:9f:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:4C:EC:2A:F2:EA:D5:39:46:0D:15:E9:2D:0F:54:15:D3:25:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176F23D8F81611EFB38B268A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.254.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5c:e9:38:9e:c4:30:6a:36:0e:c5:a3:eb:53:19:fc:14:90:
a4:91:94:c9:3f:b4:92:97:c4:a8:6d:05:8e:02:c8:68:d5:f3:
37:67:f7:42:8e:57:2f:cc:26:6d:e9:fc:ec:47:3c:a3:af:08:
00:4a:c5:23:e1:d4:63:83:67:6e:54:d6:3c:44:47:9f:2c:21:
5b:64:54:c2:fb:56:29:03:fe:43:77:7c:57:52:2e:84:bc:95:
b8:ed:ca:97:2a:74:18:21:e1:a1:62:1e:80:f4:6f:10:f2:e1:
96:51:bf:00:c6:a9:21:05:f9:41:bd:f0:9a:e0:8f:a4:26:c6:
ac:39:62:a9:de:89:4a:83:87:53:0b:95:74:88:2f:93:85:38:
bb:0e:47:0f:ee:b8:09:34:ef:7d:9a:b0:68:32:91:e1:0c:bc:
c7:33:9e:44:4f:b5:72:b7:4f:f9:f1:e4:bf:71:02:e9:45:92:
91:78:74:48:f3:69:4d:c1:82:24:6f:24:99:6e:f5:e1:28:30:
5a:db:2f:6e:7c:ec:7e:91:5b:03:33:52:f7:28:62:e3:44:27:
f4:94:b9:89:d7:27:1a:6d:45:9a:e1:be:14:d5:f4:17:68:58:
df:9b:e2:0a:ec:a7:22:70:20:fa:1b:32:34:24:ab:02:fa:4b:
cd:d0:98:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:52:33 2025 by rpki-client