Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2241965AFA6011EFA3AF988E762E951A.roa
File: 2241965AFA6011EFA3AF988E762E951A.roa (raw, json)
Hash identifier: RbLhvYYlwoB3qoTrwbrYGam5kgVp6FGzsb+wcn0ULjI=
Subject key identifier: 2A:25:15:51:4B:39:D6:AC:2E:D9:A5:23:F6:62:35:B2:8A:8A:65:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01728A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2241965AFA6011EFA3AF988E762E951A.roa
Signing time: Thu 06 Mar 2025 07:53:47 +0000
ROA not before: Thu 06 Mar 2025 07:53:42 +0000
ROA not after: Wed 26 Mar 2025 07:53:42 +0000
asID: 18013
IP address blocks: 154.204.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94858 (0x1728a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 07:53:42 2025 GMT
Not After : Mar 26 07:53:42 2025 GMT
Subject: CN=67c9548b-6f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:0a:5d:83:45:e6:56:71:22:28:7d:1b:cf:
aa:64:70:fb:eb:ed:59:87:c5:eb:c3:60:9d:08:d6:
3f:b1:b7:d9:68:e2:56:d9:91:84:a5:b5:a2:36:61:
7d:e9:76:0e:6c:01:cd:cc:b7:ee:11:ec:ad:10:37:
52:46:1f:43:fc:2d:61:8e:aa:7e:d9:9a:92:0d:ca:
5c:cf:8f:9c:8d:6f:1d:8b:a3:20:4f:d5:e9:d9:41:
59:44:13:d2:81:a0:0d:ea:cc:ab:a8:60:c3:3b:9c:
ff:9e:15:88:a3:9f:23:8d:cf:dd:d9:8d:c9:8f:36:
2a:2a:72:36:6b:6d:da:fe:ef:47:28:a9:1d:b5:63:
2c:0e:97:c5:b8:53:98:7b:65:94:9c:9f:e5:e9:e2:
24:c5:2e:10:f1:bc:90:a5:07:05:6c:f4:71:ed:59:
88:d6:f0:00:1b:2a:3d:f0:54:73:76:79:ec:b8:14:
83:86:f3:53:e8:8f:9a:e9:ed:9f:dc:1d:b0:8f:73:
33:65:a5:6e:c2:ec:a8:72:0b:3b:fb:93:ae:3c:64:
e8:db:30:63:33:0b:44:08:f4:aa:51:a1:0f:16:8f:
19:91:35:7c:48:24:20:b5:b9:99:08:29:60:4f:1d:
bf:1c:3e:93:09:d6:19:99:f8:5e:0c:8d:60:d4:e0:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:25:15:51:4B:39:D6:AC:2E:D9:A5:23:F6:62:35:B2:8A:8A:65:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2241965AFA6011EFA3AF988E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.128.0/18
Signature Algorithm: sha256WithRSAEncryption
c4:1b:ac:9f:85:fb:3b:18:dd:08:87:63:61:c3:d0:11:65:7f:
04:6f:86:62:75:51:4f:27:15:32:b4:c8:22:a9:80:39:37:8c:
9e:77:54:00:17:0c:17:db:35:8b:4e:eb:25:ab:a9:fe:cf:83:
ed:5c:4a:e9:54:01:63:4e:a3:00:3f:b1:b7:48:53:d0:a9:2a:
01:40:54:96:86:1e:8e:48:50:80:03:c1:96:e9:ef:db:0d:bf:
32:d3:8d:4c:88:c7:4b:07:3b:d7:66:59:cb:f4:d3:03:82:b0:
e6:b4:76:68:ea:a9:a3:e8:fb:4c:f1:22:ad:44:c4:77:c3:46:
c4:07:7d:a8:d9:44:19:59:40:53:70:4b:69:d6:90:2c:c5:10:
b7:92:3b:57:73:f2:0c:75:5b:a4:fa:56:dd:22:8e:d9:ed:1a:
02:93:f8:13:8f:0c:35:1c:ec:a6:da:0a:a9:59:23:36:0b:7c:
69:d4:05:e3:9d:a9:ad:1d:50:82:8c:dc:aa:13:c9:4b:51:68:
86:d9:db:11:15:e9:e7:dc:3f:de:77:08:83:ff:3e:6f:0c:78:
b5:48:e6:be:cc:59:7a:fe:9a:59:aa:af:5c:3c:34:d6:82:d4:
2d:2a:6c:aa:34:9a:23:aa:74:9a:e2:95:68:b8:99:19:d6:b3:
80:66:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:57:09 2025 by rpki-client