Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5427A95CF4F211EFA275F39D762E951A.roa
File: 5427A95CF4F211EFA275F39D762E951A.roa (raw, json)
Hash identifier: tgK6HdVDH9Y9iMgASKeDY5pLcdkB7ENGCZyUfenpO20=
Subject key identifier: 9B:01:BA:61:69:4A:7D:94:E7:F2:10:79:AC:F3:BB:C2:08:79:CF:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016782
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5427A95CF4F211EFA275F39D762E951A.roa
Signing time: Thu 27 Feb 2025 10:05:10 +0000
ROA not before: Thu 27 Feb 2025 10:05:06 +0000
ROA not after: Wed 26 Mar 2025 10:05:06 +0000
asID: 62240
IP address blocks: 154.195.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92034 (0x16782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:05:06 2025 GMT
Not After : Mar 26 10:05:06 2025 GMT
Subject: CN=67c038d6-53d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:56:92:af:f0:00:c9:43:fa:d8:c3:6e:b9:
35:3b:7a:6d:90:bd:46:9f:7d:1f:3a:31:1f:68:de:
95:9c:31:cc:ad:ff:62:e3:4e:39:d4:6d:02:bc:ed:
73:f5:29:6a:03:f2:5d:19:69:f1:ed:8b:ad:ba:cd:
54:cc:66:31:d3:81:6e:f2:70:15:e3:10:2f:99:b8:
46:aa:54:aa:43:f9:c1:31:78:2c:bd:dd:5f:69:93:
b1:1b:b4:8a:fc:c3:c8:2c:e1:e4:9f:42:1c:82:d4:
eb:65:2a:e9:ff:60:b5:60:ba:26:58:50:39:08:93:
33:12:86:a2:28:21:5f:55:61:78:8d:47:21:8b:17:
3a:c0:b4:a2:1d:47:7d:77:bf:61:19:2d:ce:39:58:
45:ba:f4:87:6f:e0:17:cf:2c:0f:ee:40:78:9a:b6:
76:b0:60:3c:ae:74:4b:22:d8:b5:2b:43:fc:51:4d:
ac:86:58:99:b4:0c:6c:87:05:1e:98:84:77:a2:f5:
9f:3d:ad:c9:eb:dd:c8:41:4f:b3:de:11:b8:60:07:
f1:48:8f:c1:8f:3c:63:f6:84:18:c4:ad:85:bf:46:
04:da:f8:8d:70:9a:ab:e8:2c:09:c9:f2:88:8f:88:
2f:0e:2d:79:5e:f0:41:59:ee:2f:4d:85:06:40:d1:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:01:BA:61:69:4A:7D:94:E7:F2:10:79:AC:F3:BB:C2:08:79:CF:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5427A95CF4F211EFA275F39D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.107.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f7:db:51:54:00:23:7e:96:81:9b:cd:4e:25:49:72:6e:98:
3a:91:ae:8f:6a:ea:62:08:65:73:cd:27:f0:b8:c7:6a:80:b0:
fc:97:0a:92:7f:68:90:8a:07:ac:c4:b8:cd:3e:89:6f:1c:5d:
1c:78:8b:33:18:2a:b0:0b:35:65:bb:f4:82:98:d8:d3:8a:75:
05:2f:f6:9c:ac:f7:c9:4e:90:e4:a8:21:6b:44:d3:7a:27:01:
16:59:06:bd:d2:9e:b0:27:3e:6e:e5:12:07:64:40:0c:98:12:
8c:10:48:8b:ab:cf:ac:8e:dd:fe:75:ae:21:13:1b:95:92:bb:
d7:58:46:be:1f:b5:19:28:aa:b3:c0:be:38:16:3c:98:0a:16:
26:06:36:c0:ca:53:53:c3:26:9d:53:fa:e4:48:6e:e1:91:53:
0c:0a:01:52:25:be:18:cc:91:6e:94:0c:90:6c:1e:c8:84:a4:
71:b8:fd:60:9b:86:58:e4:71:37:03:87:7f:4e:72:fe:0e:63:
12:fb:4b:64:2f:cd:b6:50:78:67:ac:be:41:2d:89:f2:a9:ec:
d4:f8:47:f0:de:6f:98:65:b8:ae:bf:b7:66:09:93:1d:c7:d8:
02:b2:ae:35:f9:b8:d3:43:24:eb:d8:41:86:06:dc:a7:83:5d:
84:99:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:49:57 2025 by rpki-client