Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AEC915AF82811EFA8E66185762E951A.roa
File: 1AEC915AF82811EFA8E66185762E951A.roa (raw, json)
Hash identifier: NsTIbPDHh6VDjOW2+CYRzkO17Nea4RN+EOOSYY/YuWI=
Subject key identifier: BA:92:FB:53:09:4D:9A:35:80:1D:E2:4F:86:92:24:A3:8C:E5:2A:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017079
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AEC915AF82811EFA8E66185762E951A.roa
Signing time: Mon 03 Mar 2025 12:07:41 +0000
ROA not before: Mon 03 Mar 2025 12:07:36 +0000
ROA not after: Wed 26 Mar 2025 12:07:36 +0000
asID: 62240
IP address blocks: 154.195.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94329 (0x17079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 12:07:36 2025 GMT
Not After : Mar 26 12:07:36 2025 GMT
Subject: CN=67c59b8d-3f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:5e:6a:69:c5:d3:b3:a3:18:c0:d7:fc:c1:
01:96:1c:f1:08:d1:a5:f2:91:d5:cf:07:7f:71:83:
c8:44:a6:42:72:87:a0:63:5d:94:e4:34:81:ab:d6:
fe:80:07:94:51:ad:48:72:ea:fe:6e:ed:2b:46:cc:
d5:d2:1c:38:db:82:3b:97:e6:fd:a6:55:21:cd:66:
8b:30:17:06:dc:46:4a:95:16:02:c8:96:c7:a7:e4:
fc:2a:bd:6e:a0:99:8c:c0:7d:be:54:5d:1f:ae:d2:
82:27:4d:90:8c:91:7a:ee:14:27:fb:2a:8c:4a:db:
7f:26:db:68:9e:8c:8c:ec:46:56:86:af:d8:5c:8b:
f5:84:4c:28:a4:a5:5f:d3:7e:6e:bb:00:46:09:c8:
c2:d2:46:fe:02:9e:3f:de:b1:0f:4b:9f:3c:5a:16:
c2:1e:51:f6:2e:c2:c5:73:ec:9a:b8:01:22:11:6b:
61:32:2f:71:5e:c8:74:47:b2:03:33:f8:ae:09:f1:
11:7e:57:94:3b:9e:a0:c5:42:a6:ad:96:92:1f:3d:
0b:28:62:ad:d8:a5:67:98:93:0e:b7:10:b5:c0:b5:
f8:24:48:89:36:e5:f2:1d:5e:27:ba:66:d3:ed:7f:
c3:f8:22:5f:17:07:09:b2:44:82:61:ba:b7:d2:72:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:FB:53:09:4D:9A:35:80:1D:E2:4F:86:92:24:A3:8C:E5:2A:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AEC915AF82811EFA8E66185762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.138.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a4:91:b4:3d:23:a9:f4:a3:07:ce:57:d4:a8:f8:45:4e:27:
2e:b4:03:98:8b:e0:2d:08:74:76:34:f6:90:70:f0:11:13:07:
9c:7b:dc:70:20:f3:a0:92:3b:95:3a:87:01:22:bf:0b:a5:3a:
2f:da:f3:aa:e9:65:0a:5f:d0:c7:b8:9f:c2:c0:33:f8:ad:79:
88:8f:68:ee:24:48:2a:76:4e:36:0c:9e:bd:60:df:7f:54:34:
b1:85:43:86:dd:ed:e6:ca:13:07:a7:70:33:7e:e8:71:0b:aa:
53:dd:58:1b:ad:45:de:3c:66:c9:59:4d:bd:a1:d9:23:60:a6:
e8:8c:03:64:8c:f2:59:5f:bc:b9:bc:cd:d7:e5:df:20:34:57:
57:6f:51:a6:9b:1d:c6:3e:01:41:3d:c7:6a:33:db:0a:c1:6a:
68:4a:df:f3:c8:a5:6b:32:ec:2d:00:d6:73:4d:95:ff:d5:13:
18:2e:87:1c:98:25:d8:b5:90:a6:2d:d4:93:4d:ae:4e:34:4a:
b0:28:3d:ef:0f:03:5a:aa:80:53:e9:ae:9d:cb:f3:dd:df:25:
3a:a9:77:b0:dd:d1:65:3f:f9:0c:d1:ca:6c:0a:c5:a9:3a:0c:
f8:5f:db:ba:a7:fc:e9:0f:60:39:2b:29:cb:05:d2:39:d5:0d:
51:1a:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:48:20 2025 by rpki-client