Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/368F1B02F61711EF942A1F70762E951A.roa
File: 368F1B02F61711EF942A1F70762E951A.roa (raw, json)
Hash identifier: +ppSpiJAFIt6kATy4NvscH4gJTpv1/st0DRf5zId/gU=
Subject key identifier: EC:22:4F:65:AF:C2:B5:6A:C2:3E:F7:79:2F:D0:5F:38:88:AD:9F:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/368F1B02F61711EF942A1F70762E951A.roa
Signing time: Fri 28 Feb 2025 21:01:43 +0000
ROA not before: Fri 28 Feb 2025 21:01:40 +0000
ROA not after: Wed 26 Mar 2025 21:01:40 +0000
asID: 62240
IP address blocks: 154.194.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93211 (0x16c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 21:01:40 2025 GMT
Not After : Mar 26 21:01:40 2025 GMT
Subject: CN=67c22437-223c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:b1:e0:11:8f:e5:83:41:be:50:57:d2:0b:
51:2a:e7:9b:0b:db:04:e4:0b:f4:5c:36:5e:a0:10:
6e:8e:a1:c7:b0:d1:0a:bd:65:22:39:e7:68:cb:70:
ef:92:b5:e5:fc:f2:d2:6b:68:06:85:90:5f:16:42:
71:13:a5:57:20:7a:a8:4b:a6:7f:58:fd:83:9f:bf:
a8:43:b2:57:c7:fb:76:3c:49:2f:cb:a6:16:85:10:
da:b8:c9:5a:ac:f3:5a:8e:f1:81:9f:72:20:ac:fc:
57:e9:7a:78:13:91:b3:3a:c3:51:90:65:00:60:d0:
6e:d1:20:c1:a2:da:a7:dd:2a:31:c6:e4:fd:16:36:
c3:24:42:7e:7f:0d:4f:82:13:f9:30:06:91:3c:c9:
48:59:74:01:44:c7:b2:44:6e:3d:4e:a1:87:6a:1e:
ca:ae:10:09:2c:76:12:86:6e:86:c7:6a:dc:df:22:
73:ad:b8:72:8a:69:d4:29:a6:ef:74:84:1e:8b:fa:
e6:97:01:11:39:de:8d:31:e2:fc:e5:0c:99:6f:cd:
7b:45:60:33:e7:58:5b:69:2f:28:38:8f:24:2a:f9:
ed:1c:b4:23:be:37:d4:42:6e:a1:67:3c:4a:db:70:
f2:3f:bc:e7:c6:f5:a8:bc:fa:b9:6c:c2:18:89:be:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:4F:65:AF:C2:B5:6A:C2:3E:F7:79:2F:D0:5F:38:88:AD:9F:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/368F1B02F61711EF942A1F70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.73.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a2:a0:4e:40:64:ec:63:ea:60:d0:bb:da:0f:dc:d4:27:17:
7e:36:9c:87:da:22:3a:3d:a5:2a:ce:cb:66:af:54:c0:86:70:
b0:3f:61:dc:59:be:a0:bd:83:6f:6c:3e:a0:d4:8e:8d:0c:98:
ce:73:49:fa:69:fe:13:23:cc:7d:ce:43:0f:8c:3b:fd:7c:05:
91:29:f3:71:27:a9:3d:35:bb:0d:c4:2b:a4:4d:e8:31:4f:15:
6d:fb:6c:23:f4:3c:64:0b:29:5a:7f:b1:ed:e3:00:23:d7:1e:
4a:31:25:9f:3e:f8:d2:36:dc:a2:1c:08:67:81:46:41:e7:1b:
b9:76:3c:64:61:10:cf:b3:66:7e:d6:b4:16:fe:51:6d:87:45:
da:9a:95:11:aa:ad:27:bf:42:aa:86:0c:a8:21:d1:e1:15:dc:
f6:ba:8b:4f:34:89:65:1d:42:2f:3a:bb:90:60:1b:b1:0b:4b:
66:9c:9c:1e:f4:e3:d1:f6:ef:b6:ce:ee:8f:c8:e3:b8:9b:8f:
c1:2f:f4:9b:a7:03:53:29:2e:23:f7:26:eb:16:f0:19:5e:b7:
3c:2a:47:99:a5:ad:8a:32:d2:e8:e9:af:55:b2:fe:4c:ea:b4:
7b:d8:40:72:e3:54:e0:2a:51:9f:4b:0c:9d:c0:0a:f6:e5:1e:
c4:ca:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:03:23 2025 by rpki-client