Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/454EA104F52611EF8467C781762E951A.roa
File: 454EA104F52611EF8467C781762E951A.roa (raw, json)
Hash identifier: NraWlEqx+OF1V9oIniSJeAvITAPXGSIv/kIscTjYsJ8=
Subject key identifier: 89:E1:01:14:DE:F5:5E:EF:F2:12:F9:32:A8:CD:08:97:6D:C1:E9:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016948
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/454EA104F52611EF8467C781762E951A.roa
Signing time: Thu 27 Feb 2025 16:16:59 +0000
ROA not before: Thu 27 Feb 2025 16:16:56 +0000
ROA not after: Fri 28 Mar 2025 16:16:56 +0000
asID: 395793
IP address blocks: 154.193.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92488 (0x16948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 16:16:56 2025 GMT
Not After : Mar 28 16:16:56 2025 GMT
Subject: CN=67c08ffb-91d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1f:c1:03:a1:ea:3f:a3:62:2a:47:52:b0:fb:
99:d7:98:0c:ca:3e:31:79:c7:21:c8:f2:df:e6:e7:
8a:87:06:a4:be:03:c3:1f:38:cf:ab:ff:9b:a8:52:
c1:02:dd:7d:f5:28:ba:39:8c:66:7a:e8:29:64:eb:
be:cd:e6:f2:30:bc:93:b2:ba:9e:1b:84:8c:ee:46:
9b:4d:a0:59:8c:51:71:9e:12:1f:fd:82:2b:c5:c1:
49:23:8f:bc:13:e9:03:69:7f:23:41:48:33:19:f3:
0e:f8:ed:fc:ab:81:a1:56:e1:b8:82:ab:cc:10:af:
3c:ed:81:01:ca:80:63:1b:b0:79:c8:fa:86:d2:0e:
bc:d5:05:68:91:03:85:5e:16:25:5a:2d:bd:91:10:
54:cd:f0:58:7b:ff:5d:45:c1:6a:72:ea:ad:eb:aa:
1c:98:1e:d4:fe:71:3b:5a:86:f3:5e:bc:e1:d7:bf:
ba:2a:9c:17:83:a3:44:a1:d7:6e:98:ab:57:fc:e8:
88:4f:21:7a:0e:a6:45:72:ee:13:95:8b:87:e4:5b:
67:8b:4f:f9:9d:7f:aa:49:a8:7c:8f:d2:09:49:ba:
71:f0:eb:2f:7f:a7:7f:c1:f9:ea:c4:a9:35:e9:7f:
38:78:33:b9:b2:5d:0f:ae:4f:96:bf:80:15:3f:28:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:01:14:DE:F5:5E:EF:F2:12:F9:32:A8:CD:08:97:6D:C1:E9:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/454EA104F52611EF8467C781762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.104.0/24
Signature Algorithm: sha256WithRSAEncryption
69:78:0b:6a:e9:51:c3:ea:c8:de:f9:37:a4:aa:68:e7:90:a3:
ba:a2:63:3c:4e:53:e4:7a:70:59:91:ab:9e:b2:5d:06:87:17:
04:cf:fe:2e:82:46:ad:c0:1d:b1:b2:0c:2d:aa:1b:fe:1a:04:
cc:9d:10:4c:d6:32:20:8a:0e:58:93:1f:cc:41:e2:fd:f9:62:
e1:74:65:5c:db:4e:2e:4f:63:a2:ba:92:b5:aa:6d:ae:93:ec:
10:ad:18:50:f1:51:f0:0c:34:42:87:6a:bd:38:73:dc:3c:b8:
d2:c6:49:2e:4b:fe:da:b4:84:f2:96:58:4e:47:81:55:d9:9b:
4f:73:28:d8:78:94:e7:bb:6f:80:7d:ce:0d:bd:c8:2e:87:d7:
a6:bb:42:3c:5b:14:5a:5b:6f:52:3a:6b:37:50:54:77:d5:0f:
71:a2:70:72:7c:be:20:2f:36:f9:72:35:1e:c6:b4:ce:ae:11:
05:12:89:31:d8:ea:63:39:7c:3a:fe:11:ac:48:b8:6f:f5:e1:
09:8e:c5:f4:70:91:08:08:e0:42:74:86:74:0e:92:5a:32:56:
42:c7:d0:d6:ad:e4:53:bb:b8:ba:9f:19:57:f4:db:de:4e:f6:
c0:fc:91:fa:cb:d1:9c:10:3c:3a:9c:4b:7d:06:d4:37:f6:0f:
1e:54:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:11:04 2025 by rpki-client