Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37337432F2C911EFAA0FDBBD762E951A.roa
File: 37337432F2C911EFAA0FDBBD762E951A.roa (raw, json)
Hash identifier: dD04CKzC4AcmMkPN/n2bwmsSKfYoRccyHlxQaaooKh8=
Subject key identifier: C4:6B:E2:68:B4:FC:F7:82:99:63:E6:39:10:88:88:95:0E:1A:DD:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37337432F2C911EFAA0FDBBD762E951A.roa
Signing time: Mon 24 Feb 2025 16:05:50 +0000
ROA not before: Mon 24 Feb 2025 16:05:46 +0000
ROA not after: Thu 27 Mar 2025 16:05:46 +0000
asID: 395793
IP address blocks: 154.200.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89168 (0x15c50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 16:05:46 2025 GMT
Not After : Mar 27 16:05:46 2025 GMT
Subject: CN=67bc98de-3f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:89:cb:b8:2e:da:73:ac:fa:98:c5:8c:6a:
72:12:8f:fe:c9:31:23:4f:08:17:d4:ca:e2:59:8e:
06:fe:a3:c6:ef:c5:c7:8e:45:4a:bf:de:48:b1:48:
b4:17:18:8d:78:54:dc:6c:40:f3:44:2c:88:f0:5d:
a5:d8:8e:b0:f8:f5:63:ed:04:6a:32:c5:26:e7:67:
47:b8:69:82:9d:f8:af:b6:37:73:4e:f6:11:f4:89:
77:ea:e9:1e:2f:61:60:73:bd:d7:6c:92:70:0e:25:
8d:82:93:67:2c:63:cd:ef:20:64:cc:ea:b0:ec:3e:
68:a0:16:45:c1:fe:59:10:7f:ec:bf:69:ae:6b:d2:
0e:01:20:1b:12:48:5b:72:5e:41:1e:0a:be:c7:17:
61:77:71:e7:3d:b7:39:df:87:56:eb:00:0a:f6:8a:
d6:a2:a5:e1:48:9e:ac:ce:1c:c2:0e:2c:c0:77:ce:
22:eb:cf:69:c4:54:79:5d:d2:fa:f5:74:c9:a9:2c:
9e:6b:ac:ba:43:4f:f2:97:e0:0e:ca:62:22:34:ac:
74:f5:e0:2c:f3:c6:92:f1:15:fc:28:5b:d1:91:c2:
2e:80:ca:98:3a:96:d1:f6:37:57:b0:cd:be:5e:63:
9a:f4:49:b1:52:80:4c:39:45:19:25:20:27:e4:fa:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:E2:68:B4:FC:F7:82:99:63:E6:39:10:88:88:95:0E:1A:DD:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37337432F2C911EFAA0FDBBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.55.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d0:ac:0d:ea:07:c1:95:56:e8:f8:55:3a:18:5a:4e:fe:9a:
cd:3b:36:b0:8d:5c:b7:46:ff:e1:7e:fe:7c:2d:bb:81:cb:62:
b3:1b:41:86:c3:34:4a:6f:a4:cf:bd:90:ab:c2:52:ac:be:e6:
00:c6:37:54:cb:dd:d8:98:79:b4:8e:83:09:af:2d:90:7d:fe:
01:e7:45:f9:08:cc:4b:cc:f3:dd:16:81:f4:33:95:f2:57:30:
88:f0:5d:63:ba:ae:da:13:60:e2:13:c8:65:b1:c0:53:de:3a:
6c:bf:02:77:ce:ed:4d:2a:33:98:78:84:9d:cb:66:da:10:87:
51:50:a1:8d:c9:b8:c7:ec:9e:0b:49:a6:ad:38:86:ff:05:74:
28:0f:7a:e4:13:b1:c7:79:bb:25:02:99:f9:4b:48:94:ea:fd:
65:c8:e4:75:66:55:ca:b2:2f:05:88:1b:e7:29:87:5f:04:d6:
4d:1d:70:25:52:66:7b:24:fa:2e:10:f9:73:33:fe:53:b6:ed:
be:4a:62:82:7d:84:59:29:af:ab:b5:f2:98:4a:9a:41:bf:f7:
48:6a:d7:97:5f:fa:30:25:e3:51:a7:13:e9:74:de:44:b8:8b:
a3:98:83:dc:f3:9a:2b:6e:bb:f7:e2:d4:cd:4c:40:1b:6f:2e:
8a:11:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:13:54 2025 by rpki-client