Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E54E110F61A11EF8206B984762E951A.roa
File: 4E54E110F61A11EF8206B984762E951A.roa (raw, json)
Hash identifier: bwo0HK4Tj+AK4MbqTHqg2Gm8mXmbStQYgs62GVTtzXs=
Subject key identifier: 8C:C8:1B:AC:46:C3:F9:9B:96:15:DD:43:7E:99:EB:B4:09:40:74:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E54E110F61A11EF8206B984762E951A.roa
Signing time: Fri 28 Feb 2025 21:23:52 +0000
ROA not before: Fri 28 Feb 2025 21:23:48 +0000
ROA not after: Wed 26 Mar 2025 21:23:48 +0000
asID: 62240
IP address blocks: 154.194.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93245 (0x16c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 21:23:48 2025 GMT
Not After : Mar 26 21:23:48 2025 GMT
Subject: CN=67c22967-2ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:33:cc:22:f7:d6:88:53:26:56:4f:37:74:
98:32:94:0e:6e:52:32:8f:de:b2:40:2c:e5:8e:1f:
55:c1:d1:d7:bb:eb:fb:01:c5:9b:a0:fb:da:31:d8:
02:cc:c7:a4:6b:a3:59:40:ce:ef:3a:a2:a7:53:cb:
39:1b:2e:5c:04:1f:d3:27:70:4d:18:aa:89:cb:cd:
b9:b4:b6:75:03:50:51:f3:d3:a6:dc:09:c1:83:9d:
2c:5a:9b:0c:cf:db:7a:01:23:f0:0e:19:17:c7:63:
c8:70:06:11:10:de:c5:ea:b5:c6:fe:3e:cc:09:6a:
ff:46:3f:d7:4f:ed:ab:ba:a7:a0:85:35:37:81:7d:
0b:16:51:09:fa:c2:9c:b1:ce:ae:cc:e3:cf:36:a5:
dc:79:61:b9:24:5e:e5:46:44:b8:65:2d:0b:d9:d8:
03:a8:af:b5:d1:55:b5:58:c6:98:78:79:eb:7f:03:
e4:2c:ce:69:18:8e:9a:ac:d0:20:f1:59:fb:0d:a9:
54:e5:c9:8e:23:78:5b:ca:ba:6a:c4:1a:ac:45:b2:
8f:9d:c0:84:1b:0b:55:d0:fa:64:1f:38:cd:9b:9d:
eb:00:9a:56:e7:bb:8b:b8:a7:77:70:05:2e:6e:9b:
f7:12:a7:9a:9c:46:07:38:44:7e:b3:cb:bd:51:a9:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:1B:AC:46:C3:F9:9B:96:15:DD:43:7E:99:EB:B4:09:40:74:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E54E110F61A11EF8206B984762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.105.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:da:75:2a:44:36:f8:91:64:66:46:70:89:53:15:ad:4d:31:
3f:ad:d3:ee:39:dc:c2:73:51:c2:b2:39:2c:7f:78:39:fc:e9:
35:a2:96:78:d5:6b:c8:e1:d8:b6:bb:45:15:a9:49:4a:a1:2c:
a3:48:8c:3c:84:5a:70:44:09:fa:d6:17:c7:2e:45:99:c4:13:
c3:88:a7:37:54:c1:0c:3f:ad:e7:bd:d2:2c:10:e0:f4:40:cb:
5a:5c:83:7f:fc:7f:6c:8c:ae:6e:74:06:49:07:7e:6a:85:21:
38:8c:76:9c:23:24:31:3d:a2:cc:f4:a4:70:67:c9:10:c3:81:
17:ac:bb:40:58:9d:4e:9e:65:34:3e:96:82:32:a3:83:33:e4:
8d:62:63:98:9e:ed:db:09:8e:05:3c:14:39:09:27:0a:b6:c1:
9f:3a:d9:98:40:88:ba:27:db:f9:c4:9b:2f:37:03:11:47:18:
6b:9e:36:74:6c:18:de:24:38:75:a0:fc:b8:d5:3e:4d:0b:77:
67:13:36:b0:77:55:60:25:42:96:b6:14:39:3f:40:6a:25:5a:
45:54:72:96:f4:c3:33:10:24:b8:25:70:00:92:03:7e:43:46:
c6:e5:86:28:37:f6:a6:95:c5:1d:f3:57:fb:5a:6c:76:b3:39:
41:99:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:10:18 2025 by rpki-client