Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20CA667EF61B11EF80CE7789762E951A.roa
File: 20CA667EF61B11EF80CE7789762E951A.roa (raw, json)
Hash identifier: DrnTD4DiB58ALN+3FwcWsTc7wy2ZCNYQMbYCrfwMi8E=
Subject key identifier: 7C:54:44:0E:F0:7E:5A:C8:35:AF:D4:4A:F9:45:34:FB:2E:42:42:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20CA667EF61B11EF80CE7789762E951A.roa
Signing time: Fri 28 Feb 2025 21:29:45 +0000
ROA not before: Fri 28 Feb 2025 21:29:41 +0000
ROA not after: Wed 26 Mar 2025 21:29:41 +0000
asID: 62240
IP address blocks: 154.194.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93253 (0x16c45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 21:29:41 2025 GMT
Not After : Mar 26 21:29:41 2025 GMT
Subject: CN=67c22ac9-67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:83:ba:12:9f:5d:dc:38:e3:4b:4e:f6:ed:
0d:17:bb:08:71:da:e6:88:b2:64:d0:48:33:29:a0:
55:a5:2d:42:70:78:28:28:77:b3:6f:e6:bb:91:dd:
78:75:62:bf:1e:85:25:a4:d0:2b:90:9c:50:65:a0:
82:f0:2b:34:68:5f:05:4d:dc:b4:34:a5:5b:24:17:
c1:73:57:c7:ba:59:7c:0c:f5:36:21:b5:87:80:1f:
bb:db:ac:ab:f1:0b:23:55:dc:32:00:c5:64:29:ed:
32:ed:64:4c:d3:04:c3:22:d2:85:aa:5d:39:73:15:
8d:09:2c:a8:b8:ff:1d:f5:69:31:c0:bf:71:fc:a5:
20:5d:06:dd:ec:22:bd:53:1a:65:77:eb:85:d8:e6:
99:69:c1:bb:98:2b:bf:03:28:77:4e:e3:7a:9c:7f:
49:6d:35:91:58:78:4b:e0:f9:f1:e8:1c:8c:34:e7:
35:1b:69:01:c9:24:20:c3:d2:15:c5:23:a0:49:7d:
f0:07:ba:ad:73:4f:15:97:9f:9a:39:5b:b9:c0:1c:
ce:a0:dd:47:4a:3b:f5:f7:97:c3:f9:9e:86:47:e8:
8d:24:57:56:9c:dd:53:19:1e:52:0b:72:05:9a:d1:
1f:21:f9:88:4c:da:38:f2:ad:f3:3a:c5:06:1e:e8:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:54:44:0E:F0:7E:5A:C8:35:AF:D4:4A:F9:45:34:FB:2E:42:42:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20CA667EF61B11EF80CE7789762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:53:0b:5e:d3:d6:0d:c9:13:27:60:18:c5:aa:0f:3c:d1:36:
56:fb:ba:da:bd:4a:6e:00:d3:54:2b:f3:a5:0e:cf:fe:a8:79:
d0:49:50:ed:62:50:d9:64:75:45:c2:03:e5:de:26:76:63:61:
d6:4f:b3:a3:07:5b:d6:03:87:9c:12:7b:d4:e8:73:38:d0:5b:
ac:14:6d:66:9d:d9:d4:6e:cc:fa:52:b2:e8:dd:d5:10:06:a9:
93:e6:08:34:8f:af:59:09:d2:46:83:3f:c2:6e:d3:c7:f4:23:
ba:60:9d:16:f4:92:dd:c6:79:fa:73:08:60:f6:94:47:87:8c:
aa:33:63:bb:fc:bf:01:db:73:21:18:cb:f4:8e:47:11:97:8e:
22:e5:1e:d3:1c:b9:ce:0c:1c:8b:a5:28:ed:98:3c:53:e5:76:
70:b8:54:d3:f1:67:c5:2b:9f:59:b0:a5:c9:62:7d:a2:24:b7:
ea:83:56:18:44:ae:b3:77:ce:ad:15:b4:c6:7a:ff:cd:ce:b0:
52:0e:85:d1:8a:0f:c2:3b:c4:48:21:60:a4:9e:78:87:cc:3e:
49:8f:2e:3f:8b:0d:3a:5a:d4:58:0f:d8:d1:97:28:b3:c2:86:
cb:9b:1a:79:7e:04:24:c8:3e:57:7e:82:10:74:e9:b2:2b:c3:
cc:9b:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:47:01 2025 by rpki-client