Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19BC4604F59E11EF91A47FB9762E951A.roa
File: 19BC4604F59E11EF91A47FB9762E951A.roa (raw, json)
Hash identifier: GTp/6JrWSKYhqFOFGosnoDmiUxxqD6OF53IsHHPSUtU=
Subject key identifier: 95:34:2A:A7:55:2C:7C:A0:8C:4C:00:51:83:83:A5:93:47:9D:6B:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19BC4604F59E11EF91A47FB9762E951A.roa
Signing time: Fri 28 Feb 2025 06:34:46 +0000
ROA not before: Fri 28 Feb 2025 06:34:42 +0000
ROA not after: Sat 29 Mar 2025 06:34:42 +0000
asID: 174
IP address blocks: 154.202.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92615 (0x169c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 06:34:42 2025 GMT
Not After : Mar 29 06:34:42 2025 GMT
Subject: CN=67c15906-3321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:fe:21:b9:61:fb:c3:48:3e:2e:fd:93:ca:
be:bc:c7:6a:30:53:a4:3c:30:4e:3e:1e:6e:fb:5d:
9d:f5:7c:7f:83:48:39:5f:24:15:e2:22:95:1c:56:
b8:75:62:47:6d:84:81:e4:a1:f0:86:61:51:c3:74:
69:dd:11:c9:df:a2:c8:33:bc:6d:30:a4:94:a3:b4:
96:04:12:f8:86:12:b0:75:cb:3d:4c:b2:51:ee:7f:
ed:fa:3f:b8:3d:7e:c7:2c:a6:3e:0d:fb:ff:f5:ba:
76:7a:51:76:e8:11:5b:c5:6b:be:73:0d:b5:7a:b6:
c4:95:35:36:c1:d6:62:4e:cb:57:a1:4a:c5:9b:6e:
87:bb:56:d7:eb:b6:6d:ef:78:90:ea:e5:ac:10:9e:
95:a1:ce:cd:aa:d9:9e:46:a0:de:14:fe:b4:3f:25:
6c:b1:71:03:43:bd:f9:7f:3c:cd:a9:ce:62:7d:2b:
66:55:02:9a:5c:25:ac:83:10:06:5d:82:73:62:73:
01:2e:3d:cd:5c:07:a5:1c:37:f9:44:f8:e7:4a:ad:
e8:66:4f:9a:2b:74:6b:28:5e:06:33:69:fd:1e:67:
29:20:0e:01:d6:fe:9f:7f:3c:fd:43:e7:f6:88:29:
9f:1e:c2:db:e8:de:79:f3:2a:03:ac:1c:25:d9:7f:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:2A:A7:55:2C:7C:A0:8C:4C:00:51:83:83:A5:93:47:9D:6B:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19BC4604F59E11EF91A47FB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.105.0/24
Signature Algorithm: sha256WithRSAEncryption
16:2b:ef:c3:fd:35:d2:02:33:e3:65:e2:63:24:15:61:38:a5:
24:0f:5a:9f:8c:d1:59:2f:d7:f4:25:6d:57:f4:76:5e:07:c5:
c3:38:41:0c:60:ea:1e:b7:95:14:3a:66:59:ae:f4:f3:c1:c9:
cd:1e:83:a8:01:f4:a9:0b:80:b4:38:89:30:a1:fe:37:74:cb:
db:98:9d:cc:eb:b4:6c:bc:b6:1c:cb:85:e3:28:83:de:91:f4:
aa:66:84:34:91:50:27:c4:a1:93:f9:36:d8:fa:33:f0:77:80:
29:c5:b7:67:38:07:cf:ac:c0:c3:88:3d:a3:b2:83:8b:1b:f0:
f4:00:2e:52:b0:26:3a:58:53:98:82:72:7b:68:ff:f9:ae:43:
3d:a4:23:fb:f9:b5:8a:7c:a2:72:1e:60:92:97:07:95:22:92:
35:f7:98:e5:a1:86:1b:3e:90:06:9b:d0:8b:7f:7e:2f:1b:fa:
35:39:bf:22:58:a6:04:d1:c7:dd:1a:7f:2f:fe:b5:76:40:86:
d0:d5:f2:66:92:75:2f:9b:ec:2c:63:fa:19:1d:c1:af:41:ed:
c6:3e:34:99:08:a2:a5:5f:90:36:25:d5:41:27:7e:eb:3d:e0:
3e:3b:13:b4:41:94:b2:97:5e:ec:53:85:3f:a2:66:67:54:a4:
68:68:33:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:00:17 2025 by rpki-client