Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C26584F69911EFA0903073762E951A.roa
File: 31C26584F69911EFA0903073762E951A.roa (raw, json)
Hash identifier: AUaojmfxNY8MXMCbE0zpnBqDub23TGm7QhwIrzYJovk=
Subject key identifier: BB:C0:BC:73:6D:70:DC:55:2B:7A:E6:B7:A2:79:19:16:0C:E7:E6:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C26584F69911EFA0903073762E951A.roa
Signing time: Sat 01 Mar 2025 12:32:10 +0000
ROA not before: Sat 01 Mar 2025 12:32:06 +0000
ROA not after: Mon 31 Mar 2025 12:32:06 +0000
asID: 202656
IP address blocks: 154.219.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93762 (0x16e42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:32:06 2025 GMT
Not After : Mar 31 12:32:06 2025 GMT
Subject: CN=67c2fe4a-3220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:41:4f:48:01:39:34:61:62:b4:ef:ab:b4:
9a:5b:98:65:65:d9:95:46:af:50:57:13:cb:60:4b:
36:49:7a:ab:d1:86:ba:84:c0:33:72:be:59:07:da:
6f:bb:cf:fa:da:e6:18:59:f1:69:df:f9:7c:e2:89:
39:7e:b9:ce:12:6e:69:6f:7f:77:94:01:94:4e:63:
ef:4d:c6:16:5e:e8:5d:d5:cb:98:d3:10:e0:d7:17:
d5:99:7d:6b:47:40:ec:ea:6f:3f:18:cc:bd:ea:cc:
d5:6e:7b:e9:be:cd:ef:67:d7:2e:f8:7d:29:f6:a1:
3a:c4:50:96:3f:97:0e:ae:a8:fd:ed:10:98:7c:09:
74:a8:bf:4c:86:93:e6:a5:7a:54:c3:7c:95:14:ee:
8e:f3:3c:0c:14:5a:6b:14:61:78:49:90:93:9c:31:
4b:3f:16:8d:39:dd:c1:f8:f1:9e:9d:87:10:25:44:
86:cf:c5:4d:c3:c6:58:86:1b:f6:54:9f:b8:1e:24:
8d:19:89:2b:a9:34:f3:e5:50:34:77:48:91:5a:fd:
42:22:27:e5:89:79:4f:5c:5a:a3:ae:41:03:bb:bd:
88:ec:8f:8e:e9:d3:51:90:32:e0:7f:3e:4b:46:01:
8d:7e:65:df:2d:49:9f:07:02:b3:bf:8b:30:b0:7e:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:BC:73:6D:70:DC:55:2B:7A:E6:B7:A2:79:19:16:0C:E7:E6:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C26584F69911EFA0903073762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.195.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:c5:89:d3:70:06:3d:8b:dc:60:ab:da:62:5c:3c:92:09:89:
c0:27:59:89:92:bb:b4:5c:f7:52:22:8d:1c:31:97:47:e2:dc:
24:2e:52:c7:fb:07:3d:74:b2:2c:ce:df:a6:1d:bd:98:7a:a4:
72:3c:f5:40:9f:65:3f:5e:4b:9b:ab:21:74:ea:06:68:75:d9:
58:ed:04:33:4f:27:78:c6:50:5f:c3:ad:72:4f:7e:ec:21:be:
a9:e1:1f:66:a5:df:2d:bb:e7:61:97:25:e3:48:bb:24:d3:28:
74:26:d6:47:50:9d:6d:ce:0f:c2:69:e0:4b:ee:c3:1d:c1:72:
4f:c6:9b:c3:7c:17:30:14:fd:c8:b4:fd:7a:23:b8:28:aa:99:
c2:ca:18:d3:76:9e:05:a1:ac:b6:a7:f0:76:48:22:5e:bf:0a:
f5:ff:d0:1d:7a:35:6a:4b:0a:87:31:5a:8b:43:59:41:5c:b2:
7f:0a:25:80:4a:cf:51:ab:55:0a:b5:97:dd:01:94:be:61:e1:
4e:26:ca:26:6a:7f:7a:8e:43:9c:71:af:35:7b:ef:12:60:a4:
1f:fd:30:87:f7:74:d4:c3:86:13:4c:8c:05:11:a8:90:ff:89:
e1:70:25:e5:2e:d7:48:6a:68:a4:60:49:5f:4a:0c:a6:cc:7d:
b4:65:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:57:38 2025 by rpki-client