Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F369DE4F2BC11EFA8153768762E951A.roa
File: 1F369DE4F2BC11EFA8153768762E951A.roa (raw, json)
Hash identifier: FsUqVNHOGvOdC+XX0uG+a3sETYjVrCUR4AFMrVyk1z8=
Subject key identifier: 64:D0:35:BC:DE:66:49:41:2E:3D:C2:F4:0C:8E:72:97:A9:6E:E8:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F369DE4F2BC11EFA8153768762E951A.roa
Signing time: Mon 24 Feb 2025 14:32:06 +0000
ROA not before: Mon 24 Feb 2025 14:32:03 +0000
ROA not after: Sat 29 Mar 2025 14:32:03 +0000
asID: 203020
IP address blocks: 154.223.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89134 (0x15c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 14:32:03 2025 GMT
Not After : Mar 29 14:32:03 2025 GMT
Subject: CN=67bc82e6-61e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:e2:17:92:c8:3b:89:83:e4:b1:c4:37:2f:
d5:81:88:56:82:7f:16:b1:c7:39:70:1f:7e:01:24:
3f:dc:8f:49:03:c0:3e:b9:c2:13:05:36:b1:df:54:
7f:8e:3c:c3:6d:f4:7f:d8:3b:c8:75:c2:98:1c:b1:
65:4e:83:5a:0c:a8:7c:e8:52:b1:69:cd:75:52:2b:
c5:d5:7c:79:d2:0a:58:a1:49:79:91:dd:a5:28:e1:
8a:47:92:95:14:06:60:8c:bd:41:33:1d:16:6e:9f:
f7:a0:89:5f:c7:dc:26:e5:2a:83:6a:5a:55:41:8c:
bb:c1:4d:da:d4:f2:ad:12:5e:61:87:ff:72:dc:60:
09:33:aa:a0:d6:d0:dd:18:2a:57:fd:45:3a:37:85:
27:5b:52:8d:32:04:c0:88:80:55:20:c0:af:f3:9e:
3c:03:0c:2f:52:2c:3e:31:43:8c:64:78:ec:b3:b9:
6b:73:04:cc:7a:15:d2:b9:0f:42:1c:88:a4:46:f2:
4b:5b:6c:3f:f2:e4:a7:dc:df:df:65:bb:8f:35:32:
ab:86:38:0b:fd:bc:b2:63:45:bb:d9:58:10:ff:42:
5f:a2:bf:31:d0:88:7a:3b:da:da:02:b3:01:fd:83:
ec:7d:95:6b:74:0b:7b:02:af:e4:25:c2:0d:71:6e:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D0:35:BC:DE:66:49:41:2E:3D:C2:F4:0C:8E:72:97:A9:6E:E8:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F369DE4F2BC11EFA8153768762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.172.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d6:3a:28:00:51:ff:d2:f9:9e:5a:46:94:e5:28:4f:52:a7:
75:cf:92:92:cf:7a:d4:28:49:63:0a:0d:e9:3b:f0:76:cb:0f:
4b:c2:6b:c7:b6:86:c2:65:04:53:18:ca:4c:cf:3c:c8:c7:ec:
6b:32:42:b8:3f:4d:1f:78:62:10:a4:40:62:53:60:8e:c1:c0:
a7:3b:49:d1:dd:45:24:42:b0:17:9a:ec:a8:f3:e8:80:c3:a0:
d3:9d:f0:fe:74:82:ba:7a:a4:d5:fb:05:78:5b:cc:2e:13:b1:
57:7f:11:6d:25:2e:a4:6e:55:a3:01:24:41:ff:33:db:df:0e:
9e:12:05:ec:b0:6f:71:57:fc:68:84:f5:22:6b:9e:5e:f2:11:
29:86:0d:e7:a2:f4:58:72:e3:91:68:fc:2d:e2:6b:92:95:41:
70:07:4d:0a:96:07:42:14:7f:98:c5:e6:04:18:3a:e1:7e:62:
48:3a:21:33:3f:c4:a6:7d:9f:d4:e0:03:ca:4c:fd:a4:e4:33:
34:30:16:fc:9f:b0:91:66:6b:75:99:8f:e6:1d:d0:19:b5:52:
f3:9f:fc:23:49:10:56:5e:46:3f:27:65:47:b9:23:25:13:c9:
95:a1:a5:23:ee:a4:79:a4:13:28:f4:e4:72:f4:1a:06:f0:52:
ce:a8:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:08:36 2025 by rpki-client