Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/422C914CF5D111EF8B93B995762E951A.roa
File: 422C914CF5D111EF8B93B995762E951A.roa (raw, json)
Hash identifier: gmOsapeQH53+jcG2Fy99yb8Yx9UKNBZU3z4+Err8ZCw=
Subject key identifier: EE:66:AD:A1:AF:74:DE:B7:1E:38:B7:A9:05:85:E9:48:3E:A6:F4:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/422C914CF5D111EF8B93B995762E951A.roa
Signing time: Fri 28 Feb 2025 12:40:58 +0000
ROA not before: Fri 28 Feb 2025 12:40:54 +0000
ROA not after: Mon 31 Mar 2025 12:40:54 +0000
asID: 54600
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92978 (0x16b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 12:40:54 2025 GMT
Not After : Mar 31 12:40:54 2025 GMT
Subject: CN=67c1aeda-39f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:7b:95:9e:a1:3c:f0:00:d2:1a:2a:c0:fc:
b0:85:cd:7d:41:98:df:f6:ae:a8:4e:fa:22:31:6b:
ef:51:14:4f:8c:51:57:14:e8:ae:a4:bd:f3:06:ae:
86:59:4d:26:43:59:6f:06:44:48:c4:ce:47:0f:66:
5c:5c:2c:31:35:82:98:49:24:e5:f3:99:fe:7a:fa:
02:3b:c0:6a:ba:99:5d:46:31:ba:93:bc:12:54:85:
28:c0:f5:62:92:4f:f5:bd:81:98:24:37:0e:81:cc:
6c:c5:f1:20:fc:b4:77:f0:7c:12:d1:50:5c:c1:c9:
3e:f9:5e:91:59:53:7d:95:2c:18:34:5e:13:cd:17:
c8:4f:90:b9:52:ae:fd:1e:fb:d9:73:10:62:7b:70:
3c:c0:ec:c3:ae:91:b3:6d:53:f2:88:d1:0a:ba:5a:
81:18:49:11:bb:fc:a5:f6:dc:f3:6f:74:8a:ec:87:
30:73:ba:3b:ed:88:d9:d1:2b:27:28:f1:98:2a:03:
67:c0:e2:11:30:7a:cd:48:2c:69:58:02:ce:42:6d:
61:2e:cb:5c:b6:3e:8e:ba:e1:92:3d:d1:58:1e:ca:
ab:76:5a:fd:6a:2a:d4:e6:5f:cd:8d:6a:6c:d9:5d:
a7:40:8f:eb:0d:d5:1f:c1:a6:7f:5d:c9:fa:a5:4f:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:AD:A1:AF:74:DE:B7:1E:38:B7:A9:05:85:E9:48:3E:A6:F4:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/422C914CF5D111EF8B93B995762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
31:9c:40:46:0a:6c:a9:e4:69:fc:24:af:2e:a8:8d:e0:11:99:
69:a7:a5:c1:57:73:3a:a1:33:23:77:ec:35:7f:0f:3d:8d:f8:
cb:92:54:d9:4c:4a:44:a0:28:36:06:78:87:b6:44:9b:a3:32:
d1:3b:f6:f6:57:35:a2:5e:6d:c1:6e:95:db:13:3a:d3:a8:34:
46:49:5a:6f:73:34:69:bc:83:3c:fb:9e:57:eb:1f:ba:1b:95:
d4:24:b2:24:b7:f9:7e:44:a4:ce:56:1f:42:5a:db:a5:78:c1:
9a:7a:5d:0e:5a:93:f6:43:20:ba:1f:f3:22:bb:3d:bd:09:76:
99:8e:36:7b:04:b9:74:be:96:4e:03:e7:02:f0:63:91:a4:61:
5e:66:d1:04:5b:00:ed:fe:86:f1:3d:54:8a:0c:e3:f7:a5:40:
c6:f1:1e:6a:d5:55:c3:af:00:c2:6d:57:ef:ae:b9:15:12:43:
f5:87:8a:56:a7:50:a5:61:f2:23:8c:ce:af:81:a2:56:2f:d8:
2e:b4:4a:be:fc:ab:c8:60:2c:60:45:51:9c:f6:3e:bc:ca:99:
aa:5d:79:60:c9:dc:7a:4c:7d:6f:82:ad:c7:4c:59:9f:58:e8:
e5:a4:7e:a9:32:0d:5e:ad:a8:01:6c:09:91:69:7b:50:2b:85:
d8:35:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:41:15 2025 by rpki-client