Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/293D1A1CF52211EF8CC10F66762E951A.roa
File: 293D1A1CF52211EF8CC10F66762E951A.roa (raw, json)
Hash identifier: cVUep7qkIYq1EyipNqVrMlZovfbEzG17XTUfacBjedM=
Subject key identifier: F7:4A:4F:FB:CD:16:AE:F4:49:A7:89:67:33:D2:D3:22:37:56:D0:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016924
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/293D1A1CF52211EF8CC10F66762E951A.roa
Signing time: Thu 27 Feb 2025 15:47:34 +0000
ROA not before: Thu 27 Feb 2025 15:47:30 +0000
ROA not after: Wed 26 Mar 2025 15:47:30 +0000
asID: 62240
IP address blocks: 154.196.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92452 (0x16924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:47:30 2025 GMT
Not After : Mar 26 15:47:30 2025 GMT
Subject: CN=67c08916-1137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:a6:b0:48:e6:fd:47:4f:c5:b3:97:04:25:
8c:2e:b9:7e:b9:d3:9b:d5:51:d8:2f:77:b4:38:5e:
9b:c4:bb:95:6e:21:29:27:8b:fb:8e:89:c9:2f:1b:
65:f9:0a:62:b2:b7:9a:50:ae:d9:eb:42:e7:a2:a5:
4d:1f:36:74:5a:26:47:0f:d6:ea:13:fc:27:18:52:
0c:dd:42:89:95:97:02:77:0c:e3:23:04:b8:fc:f3:
be:ef:ed:5b:f0:db:6c:d2:19:de:10:09:b1:20:0a:
3d:34:de:c0:24:df:b2:09:8b:00:aa:30:ec:e6:eb:
3b:d0:ce:54:03:a8:fa:83:98:8f:41:19:ae:d5:f5:
c0:e6:a5:70:17:df:30:17:f3:92:fe:15:66:50:79:
f0:79:c0:64:75:82:bc:44:37:5e:ff:84:62:bc:bd:
3f:1d:7a:d5:1e:be:69:8a:bb:ef:06:81:e2:3a:f9:
57:0a:79:bf:23:9d:8b:cf:04:7f:e7:70:9c:ad:be:
95:be:ed:c8:aa:6a:f8:df:e3:a0:6e:b1:b6:95:b5:
22:d3:f3:fe:05:f9:80:f7:aa:0c:58:98:1e:61:c1:
e6:96:c7:6b:08:c3:e0:2f:1c:8b:5d:d3:d7:17:73:
6e:f4:78:f2:65:0b:82:39:12:0a:d0:74:e1:45:3e:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4A:4F:FB:CD:16:AE:F4:49:A7:89:67:33:D2:D3:22:37:56:D0:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/293D1A1CF52211EF8CC10F66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.78.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:9c:7c:35:1b:67:42:13:77:09:fc:86:c4:5a:15:f3:04:eb:
ea:c1:be:27:83:20:9a:90:f5:7e:1b:e6:3e:57:83:7f:b9:98:
49:57:ea:c2:65:eb:2a:82:78:21:fd:4f:6a:4d:07:64:81:b6:
dc:b9:56:52:6e:69:4b:3b:f3:58:bf:7d:d5:6a:f9:9a:1d:bd:
82:ca:e9:49:05:a8:0b:64:25:00:4f:ba:48:67:0b:2a:f1:cf:
e9:14:51:e7:fa:7e:43:12:23:a7:73:80:d5:63:40:b6:35:51:
06:fa:63:28:32:95:e3:53:7c:74:07:07:1b:88:2c:93:c2:5a:
e0:1b:d8:c6:44:df:a7:0d:ea:08:b2:9d:1c:63:30:d6:99:50:
b3:a4:d2:76:f7:07:f2:b9:25:99:51:54:0e:1a:06:1d:4a:a7:
70:9b:a3:5b:b4:2b:98:d5:c3:62:48:53:68:a1:2d:5a:0a:af:
e8:e5:e6:b6:84:b8:37:bf:b0:de:ca:47:28:50:04:fd:c9:32:
26:8c:c7:82:b0:8f:13:96:1e:a1:4d:f1:3c:9d:f9:90:d7:a0:
90:db:fd:90:53:39:4c:99:b7:3f:35:e7:df:a3:a9:55:13:6a:
fe:a1:04:03:fc:26:4a:e5:4b:7c:b3:e9:75:f6:ce:e4:9d:04:
16:ec:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:28:31 2025 by rpki-client