Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/311E8514F6C511EF9D5DF399762E951A.roa
File: 311E8514F6C511EF9D5DF399762E951A.roa (raw, json)
Hash identifier: 9JPatH0oD8yB8PfdeFB8eyWT72ETQnsPYNrSu8sR+b4=
Subject key identifier: 9F:C7:DB:6B:FD:E2:02:41:1E:93:93:72:93:EB:75:B4:0B:51:5B:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/311E8514F6C511EF9D5DF399762E951A.roa
Signing time: Sat 01 Mar 2025 17:47:06 +0000
ROA not before: Sat 01 Mar 2025 17:47:03 +0000
ROA not after: Mon 31 Mar 2025 17:47:03 +0000
asID: 202656
IP address blocks: 154.219.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94025 (0x16f49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 17:47:03 2025 GMT
Not After : Mar 31 17:47:03 2025 GMT
Subject: CN=67c3481a-7d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:15:f3:e9:e4:d0:a1:d8:06:68:0f:e2:89:
f7:df:5c:6d:fe:10:6b:24:be:39:0c:03:d8:ba:3d:
07:73:31:c8:75:98:8f:cb:04:a6:4f:2a:3a:af:42:
b9:1d:b7:b2:c2:78:26:79:d7:09:8d:c9:8c:5f:b2:
84:4f:7b:41:e1:42:da:96:a0:4b:68:d0:0e:d4:08:
d2:82:b1:fa:46:33:32:97:55:3a:9c:0c:73:66:3b:
e3:21:0e:37:e0:f0:84:b5:65:a0:af:b7:63:62:3a:
a9:c4:99:57:7b:f5:4c:a0:d9:c2:f1:a3:bf:35:0a:
c5:7f:1d:86:db:78:ba:e2:b1:02:bc:fe:e9:24:82:
18:b5:d2:09:37:76:b6:4d:04:f7:89:c6:8c:d8:87:
1c:2e:4a:c4:cc:28:dc:15:4b:45:cc:66:87:8c:9b:
d3:21:9c:4d:e5:74:dc:07:7d:16:78:96:34:e3:c4:
16:5b:cd:1e:3f:37:4b:3e:0c:0a:c7:50:4e:6e:42:
14:29:10:73:a5:3b:3c:ad:60:79:a6:a9:d6:73:b8:
94:fa:57:0f:87:9b:af:3d:d6:61:07:66:63:0c:5b:
4d:04:44:ae:ac:c1:9b:b8:ea:4c:8d:29:5d:44:18:
4e:80:8f:6e:02:47:03:64:41:36:23:41:56:ad:3f:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C7:DB:6B:FD:E2:02:41:1E:93:93:72:93:EB:75:B4:0B:51:5B:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/311E8514F6C511EF9D5DF399762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.244.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b8:fd:a6:c3:bf:65:37:35:0b:1b:00:a2:d0:4e:c7:c2:f4:
66:c8:0f:41:6b:f4:68:97:14:2c:d3:4a:06:bd:05:ce:d2:60:
10:10:41:cd:2b:cd:cf:ad:33:f4:34:17:55:45:2a:13:1e:8a:
75:c7:4b:34:b7:63:13:8f:63:4e:14:2f:7f:32:30:07:f3:ea:
46:7d:96:de:5b:12:e3:58:51:4e:2b:3f:87:97:db:75:a8:d6:
35:f9:fa:84:f8:60:61:5a:b6:0c:2e:50:1b:75:68:0d:73:9d:
06:a9:37:c6:9d:8b:8a:d0:ad:7d:28:9d:86:d0:93:d1:bd:c2:
fc:5e:fd:76:1a:d9:c8:68:db:0e:4d:ce:a8:d6:a4:6c:5a:00:
ea:6a:67:0d:ae:fa:e3:b0:1e:6b:03:47:34:b8:22:44:c9:80:
59:08:c3:e6:bd:87:20:17:ff:2a:82:28:d9:e8:63:4c:a1:e1:
1e:be:e0:62:a8:81:5a:04:03:49:8f:b7:db:4a:8e:00:d1:d6:
ae:a5:8a:94:57:03:69:55:5b:f2:c3:2e:39:c7:0c:fe:a3:54:
56:3e:ad:ef:1d:c2:a8:38:65:b3:ed:bf:a0:b1:7b:24:a7:d1:
be:c3:2e:aa:37:dc:5b:bc:fd:02:21:5d:9d:97:f0:2e:d8:ce:
10:cc:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:05:18 2025 by rpki-client