Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18090E46F51C11EF8F82ABBA762E951A.roa
File: 18090E46F51C11EF8F82ABBA762E951A.roa (raw, json)
Hash identifier: 5eRKf9pIiWtAK+f3xdiVBtworA/KXREbkYHCG+NvqrM=
Subject key identifier: 1A:65:40:A4:79:6B:25:B2:89:37:31:09:2D:58:B7:03:DF:B1:76:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0168E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18090E46F51C11EF8F82ABBA762E951A.roa
Signing time: Thu 27 Feb 2025 15:04:08 +0000
ROA not before: Thu 27 Feb 2025 15:04:04 +0000
ROA not after: Wed 26 Mar 2025 15:04:04 +0000
asID: 62240
IP address blocks: 154.196.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92388 (0x168e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:04:04 2025 GMT
Not After : Mar 26 15:04:04 2025 GMT
Subject: CN=67c07ee8-0b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:54:92:e8:ed:e7:65:b3:c0:11:53:b8:26:
f6:fb:cf:51:f4:aa:1d:51:e5:be:33:b7:cf:36:ee:
e2:36:0d:19:d1:70:1e:24:15:0a:f1:ab:8d:a0:d3:
cc:70:c5:21:73:ea:b5:53:0b:55:5f:b5:e3:b1:5e:
ef:64:aa:0c:62:21:64:f5:72:64:39:bc:c6:8c:77:
d2:16:97:c0:1a:04:0d:33:02:28:16:b8:2a:24:ea:
f6:f1:93:8f:52:1b:04:d9:b7:c9:43:c4:23:5a:f1:
11:ab:b1:6e:f5:18:b5:86:39:86:d5:d8:a2:16:63:
eb:40:fe:cd:1e:d5:c7:ab:f1:db:29:5c:9a:6d:dc:
e3:92:8c:6f:70:41:2b:d8:90:d6:9f:af:3c:42:55:
ea:57:04:6f:f8:20:2f:60:37:05:9f:20:93:52:b3:
55:97:88:f5:ea:b5:1a:57:8f:14:9c:e2:ca:42:0b:
f2:1b:b7:a2:69:48:33:f9:5f:42:03:8c:00:3e:2e:
9d:b3:21:d7:ce:c3:7b:46:35:4c:1f:f2:21:db:08:
90:70:2e:9d:f6:d5:7c:9c:67:2f:aa:77:99:87:4a:
29:ba:b5:08:9b:c8:05:52:14:32:49:a7:c9:c6:74:
f3:90:b5:3f:80:0f:d2:2a:21:94:36:4a:90:46:b3:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:40:A4:79:6B:25:B2:89:37:31:09:2D:58:B7:03:DF:B1:76:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18090E46F51C11EF8F82ABBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.58.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a0:0f:8f:52:cc:96:60:15:16:b0:71:ae:a2:8c:62:8f:3d:
9f:5c:51:64:e3:ee:b8:39:e8:8e:64:cc:7b:ba:8e:e4:47:c9:
8f:94:fa:a1:41:c7:54:f6:c0:b8:f5:ff:37:36:d8:49:19:92:
a2:0b:35:6b:1f:a9:6e:44:88:fd:59:9e:34:2a:18:d2:60:3b:
9f:a7:b6:97:8b:86:e9:3d:28:2d:00:29:b4:fe:2f:fa:e9:f3:
bc:a2:c2:b9:a2:cd:dc:e4:0a:c4:5f:5d:fa:45:eb:cd:39:b4:
1e:7b:f4:25:71:8e:50:d9:20:32:1a:0b:68:3c:b0:41:1b:49:
ee:9d:22:7a:06:23:d3:79:97:86:13:fe:2b:a3:43:f4:67:17:
30:c0:3d:5c:d4:8c:72:a1:b9:f1:d2:9c:37:20:a0:f3:15:30:
70:89:40:a8:9c:a9:1b:09:4c:5c:57:90:2b:33:40:93:d8:55:
cf:65:89:c2:ca:7b:e1:13:ea:80:a3:c4:ae:b3:48:33:89:4a:
25:14:80:05:c9:c9:98:8e:fc:4d:25:1c:6a:ef:d4:dc:12:a4:
3d:93:f9:05:4a:b3:ce:cb:08:32:9a:6a:9d:c8:33:a6:46:15:
e7:22:e1:2d:63:20:ed:06:11:19:d9:40:7e:6b:7e:50:c4:eb:
74:96:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:15:25 2025 by rpki-client