Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2811A26CF4D111EF8762BBBD762E951A.roa
File: 2811A26CF4D111EF8762BBBD762E951A.roa (raw, json)
Hash identifier: Qe3ftmldDsUJGj7cXArFG890PXeyscpxX3R6IWJfFwg=
Subject key identifier: 7E:D1:36:E7:D1:AF:83:4D:90:00:82:F6:A5:F6:7E:78:51:78:3E:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016645
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2811A26CF4D111EF8762BBBD762E951A.roa
Signing time: Thu 27 Feb 2025 06:07:43 +0000
ROA not before: Thu 27 Feb 2025 06:07:39 +0000
ROA not after: Wed 26 Mar 2025 06:07:39 +0000
asID: 62240
IP address blocks: 154.195.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91717 (0x16645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 06:07:39 2025 GMT
Not After : Mar 26 06:07:39 2025 GMT
Subject: CN=67c0012f-439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:76:fb:a1:b7:94:0a:46:f2:7b:f5:85:e6:
10:1d:79:39:6d:e2:a3:63:d1:ed:db:19:1b:52:9f:
2e:04:f4:73:bf:bd:d8:1f:ee:da:f8:07:9a:56:a7:
bd:ee:1f:58:ce:ae:bf:bf:44:5b:40:ad:29:b6:4f:
8e:c8:8c:77:f6:9d:b7:5e:91:8b:e0:0a:83:65:92:
9f:a7:cb:ab:82:92:69:f7:75:57:24:a2:ee:13:f4:
cb:32:65:9b:01:75:61:9f:2c:7d:b1:09:69:a1:bb:
93:55:d3:ba:0e:7f:e7:15:3c:a4:c3:13:48:70:71:
ab:97:9b:48:3e:ef:c8:73:15:97:7e:c4:40:d8:ee:
4b:04:f1:3d:57:94:48:68:9d:0b:43:46:4e:21:94:
38:8f:44:05:05:f0:7f:a5:ae:18:87:ad:14:77:35:
27:f7:9a:4c:f1:51:27:a3:1c:88:0b:32:74:03:72:
18:0d:cc:e7:e8:e8:a7:ae:2a:25:74:fe:85:78:0c:
74:f5:a9:11:8a:d2:bb:74:f7:e3:fc:60:6e:0e:36:
e6:0d:a7:dd:e3:9e:60:27:d2:af:6a:e8:d2:34:8f:
ef:4d:64:81:79:e3:0f:3e:ba:4f:00:75:d7:dc:52:
aa:22:dc:f9:ad:16:e6:b0:b3:97:82:66:64:f6:32:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D1:36:E7:D1:AF:83:4D:90:00:82:F6:A5:F6:7E:78:51:78:3E:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2811A26CF4D111EF8762BBBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.145.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:61:8c:65:b4:86:d0:3d:3a:b1:12:1d:77:a6:fe:f4:ed:d7:
f4:95:4c:fb:7e:35:d1:d1:a3:08:46:a5:99:3d:74:3b:3f:9c:
43:e8:29:61:fd:c2:ed:c2:f4:21:6b:9d:b2:69:e3:72:97:5f:
f6:c9:c7:49:03:09:9f:7f:12:e7:b9:f1:72:0c:81:58:e0:26:
91:68:4a:6c:8f:f6:ae:df:6d:b0:18:d3:ae:7e:91:2a:e0:39:
85:97:15:56:ca:b5:05:e7:6c:c6:6b:59:65:0a:54:f4:ac:79:
75:81:b5:96:c6:44:41:cf:3c:41:52:b4:41:d8:6d:ab:37:7a:
b5:3d:db:3d:ec:a3:2b:95:2c:01:39:a4:df:78:9a:8c:5e:7e:
b4:90:f1:40:93:1f:ca:4d:ac:b1:d2:45:30:96:07:75:cd:01:
97:76:47:70:d4:fc:13:75:2e:a8:a8:ce:ff:bc:09:a6:72:82:
a1:3a:bc:69:a7:b7:60:48:6b:1f:d0:f8:9a:8c:45:1c:86:75:
2a:79:fd:9f:c4:dd:17:01:49:ea:81:82:29:5d:26:9a:b2:29:
7a:34:23:f1:b8:4a:ed:be:68:d9:ba:af:19:65:9b:6e:70:99:
0f:6b:0a:17:40:8f:97:f4:0a:77:31:f0:d9:42:c6:9a:0f:a7:
4c:2e:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:58:59 2025 by rpki-client