Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25000CB8F81D11EF8938B6B8762E951A.roa
File: 25000CB8F81D11EF8938B6B8762E951A.roa (raw, json)
Hash identifier: V662RgPK/Pi+VaYRNzwzYESA9WMZa/oY8t2tnS7FbT8=
Subject key identifier: A4:33:D7:B5:33:B9:3B:16:C4:CB:C9:5B:84:60:CF:0B:9A:51:09:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01703B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25000CB8F81D11EF8938B6B8762E951A.roa
Signing time: Mon 03 Mar 2025 10:49:13 +0000
ROA not before: Mon 03 Mar 2025 10:49:09 +0000
ROA not after: Mon 31 Mar 2025 10:49:09 +0000
asID: 202656
IP address blocks: 154.219.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94267 (0x1703b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:49:09 2025 GMT
Not After : Mar 31 10:49:09 2025 GMT
Subject: CN=67c58929-117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:ff:d7:d4:e1:86:aa:01:cb:ef:e0:33:44:
b6:d4:0d:86:8e:b6:2b:36:66:3f:24:b4:11:03:4f:
c2:4a:00:82:38:54:2a:6a:76:b9:0a:ad:b7:a3:e0:
17:40:fc:b9:ae:99:65:b8:14:d7:3d:c5:65:8c:0f:
cc:77:3f:35:f5:07:37:9f:a4:b3:d9:b3:f4:d5:92:
41:ae:fe:31:9a:18:ae:24:d1:78:90:b4:da:0c:00:
ee:45:5f:21:04:ea:ae:f0:1e:08:69:91:9f:7f:f1:
32:05:1a:09:e8:10:27:3e:a6:21:e9:e0:72:5f:00:
73:f8:34:70:13:24:75:90:75:61:59:8c:6f:02:45:
20:b1:3b:c0:a0:99:46:e8:a3:da:ae:d1:07:40:e9:
2d:b9:d5:63:dc:9e:ef:fe:c4:89:66:75:cb:77:79:
f6:b7:d6:74:16:41:e2:a1:09:37:ec:50:1e:3c:fc:
5e:01:02:71:54:c0:41:f1:78:cb:bb:3f:3f:17:b7:
10:90:9a:c4:05:17:05:4e:44:3e:e6:f5:89:75:eb:
fa:d3:4a:fc:8f:a3:61:b1:1c:3f:b9:57:bd:b0:50:
32:56:33:3d:db:f3:fd:f5:96:b8:3f:40:c5:c5:10:
19:eb:81:10:8f:1a:7a:93:53:2f:f1:18:ad:90:11:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:33:D7:B5:33:B9:3B:16:C4:CB:C9:5B:84:60:CF:0B:9A:51:09:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25000CB8F81D11EF8938B6B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.27.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3e:a5:88:78:dd:10:82:18:9e:6b:8b:ff:e1:29:95:f3:05:
ef:2c:3b:1e:9c:73:f0:91:53:fb:50:e8:df:43:4f:b3:01:98:
fe:41:3d:cf:c5:b9:9d:24:9d:38:a6:1a:22:44:42:bb:9f:ac:
b8:b0:39:e8:bb:1a:03:9e:ba:3e:2e:fa:05:a8:0b:16:30:cc:
2b:c3:85:f6:4c:6f:11:93:9e:d3:ee:1b:48:bb:ba:59:24:94:
15:7f:0c:3b:48:43:72:21:da:28:39:d2:a6:8f:ef:56:ce:4a:
27:b3:d6:78:63:89:75:41:c8:d4:4f:4f:bf:36:a9:75:b8:70:
e3:84:25:d0:72:b8:9d:be:0d:17:d8:43:36:39:bd:54:f4:c0:
aa:6f:72:99:98:3b:c3:06:88:2f:51:50:b3:85:42:de:82:0e:
c5:d4:3d:45:9d:a6:f0:f6:0e:85:f3:a6:01:f4:fc:43:8f:d6:
94:3b:a4:cd:60:2f:d3:0e:6e:65:10:cb:9c:ee:2a:87:07:7d:
2b:ad:0d:e9:bb:40:2f:47:7e:e9:03:75:6d:aa:a5:c9:4d:4a:
08:86:aa:eb:84:fa:c0:4d:54:5c:fa:68:d8:94:6e:82:1e:06:
58:c6:e4:34:6c:fe:3d:fa:46:0b:94:e2:91:9c:82:2f:88:fd:
72:14:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:14:31 2025 by rpki-client