Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4624B748F81F11EFBA8D7348762E951A.roa
File: 4624B748F81F11EFBA8D7348762E951A.roa (raw, json)
Hash identifier: PuNlAPp6nszOm7UKiloEw2/NQ3IJBOyIfVep0clkfKA=
Subject key identifier: E0:99:D5:8D:9C:68:4D:AE:98:F2:95:F2:14:53:FC:53:34:F4:8E:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017051
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4624B748F81F11EFBA8D7348762E951A.roa
Signing time: Mon 03 Mar 2025 11:04:28 +0000
ROA not before: Mon 03 Mar 2025 11:04:24 +0000
ROA not after: Wed 26 Mar 2025 11:04:24 +0000
asID: 62240
IP address blocks: 154.195.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94289 (0x17051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 11:04:24 2025 GMT
Not After : Mar 26 11:04:24 2025 GMT
Subject: CN=67c58cbc-f0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:77:07:7d:1a:b0:d0:48:53:64:71:23:96:
cc:85:29:85:e1:cd:15:1f:b7:20:24:f9:bc:20:ad:
86:56:26:da:33:56:3f:9c:c0:3f:ea:10:d4:11:fd:
e5:14:22:95:40:83:a1:f4:e4:fa:40:14:79:f5:41:
d1:fb:95:e0:0b:61:90:7b:79:ec:36:0e:95:d5:fd:
f8:01:f8:c4:e8:cb:20:a4:3a:8c:37:82:55:00:f4:
f7:ac:68:21:76:d5:04:73:a9:89:ad:05:3e:31:a6:
0a:11:3b:ba:89:e3:c3:0e:57:10:7e:8a:a3:ad:c1:
bf:16:f8:90:27:24:49:ff:64:42:c8:36:8c:c4:98:
7b:f7:b6:9b:0e:92:f5:0b:e7:b8:08:22:27:5e:b5:
c8:e0:60:61:07:f2:91:c3:9b:cc:59:86:c2:b6:c0:
a8:93:29:0d:09:b3:a3:4a:80:11:cf:51:f4:e3:dc:
a7:d3:0c:e3:f4:e3:cf:5b:45:ce:68:10:f8:ab:75:
ac:8f:7c:00:4d:d9:ec:7e:27:96:42:84:cb:47:bf:
8d:67:6f:d7:41:80:ca:5e:15:b1:ca:26:42:71:0a:
49:50:6c:a3:60:f0:e4:73:a2:a4:25:b6:13:1f:c3:
0c:b8:c1:55:8c:fb:7e:00:75:4d:da:28:b8:09:d2:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:D5:8D:9C:68:4D:AE:98:F2:95:F2:14:53:FC:53:34:F4:8E:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4624B748F81F11EFBA8D7348762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e6:64:cd:92:db:5d:83:f0:25:ff:3d:3a:d4:b7:c4:3d:28:
02:58:2e:71:12:a4:ca:46:e1:8e:9c:c7:ef:ac:32:3a:c3:a7:
90:a0:1f:79:4e:9a:a5:89:d2:b6:21:ec:c4:c6:22:25:9b:0d:
40:a6:d7:46:46:75:b7:02:4d:5a:07:98:37:47:54:46:d9:07:
c6:f8:99:2a:be:ad:2e:b4:41:70:bd:b8:35:68:21:cf:b1:e8:
3e:90:3c:2b:61:80:a9:fd:a0:66:ed:d0:38:97:50:2e:43:44:
ce:e4:84:f7:2f:7a:dc:ba:ac:40:53:d5:1c:bb:2e:66:b3:9f:
7e:3c:30:e6:26:9b:e9:63:1c:4e:b8:ee:36:9d:75:1e:d6:9e:
7d:2d:5c:98:e1:b4:3c:17:ce:f5:97:20:b8:51:bf:71:e8:b1:
56:60:7c:30:45:0e:dd:15:15:a7:34:91:ff:3d:b7:91:3b:dc:
e4:2d:25:ba:94:7b:39:1d:bc:f3:07:2e:fa:bd:b5:9b:e9:96:
5e:e5:a5:20:2b:ca:a8:1e:11:bf:78:1e:ae:5e:87:99:3e:e4:
6e:35:19:b1:36:af:9f:28:06:18:27:81:19:35:30:ce:1b:e0:
fc:59:b5:f2:83:99:d2:30:00:37:00:8b:96:1b:fb:5b:d6:51:
4d:62:b4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:55:37 2025 by rpki-client