Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/548C3E9EF5E711EF86C129AE762E951A.roa
File: 548C3E9EF5E711EF86C129AE762E951A.roa (raw, json)
Hash identifier: k7UN7M6jmYqkDAC8Y4xulEuflWur07F4nDROGch09Dw=
Subject key identifier: B3:A6:1D:8C:0C:40:79:4A:8A:0D:06:A0:22:9B:2B:1E:08:70:E3:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016BA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/548C3E9EF5E711EF86C129AE762E951A.roa
Signing time: Fri 28 Feb 2025 15:18:58 +0000
ROA not before: Fri 28 Feb 2025 15:18:54 +0000
ROA not after: Wed 26 Mar 2025 15:18:54 +0000
asID: 62240
IP address blocks: 154.194.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93092 (0x16ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 15:18:54 2025 GMT
Not After : Mar 26 15:18:54 2025 GMT
Subject: CN=67c1d3e2-097e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:84:5c:de:0c:8c:15:24:a3:bd:e3:70:eb:
52:4e:30:66:b4:5f:98:c0:ab:46:6c:a0:0d:46:6f:
99:d2:fd:ab:cb:90:2e:29:73:8b:8c:be:94:fc:76:
50:5e:7c:cb:1f:4b:39:fd:8e:b7:d1:6d:e3:89:bf:
d3:ed:57:ed:7e:de:c5:15:37:01:93:a7:7d:49:00:
8f:bb:80:15:40:69:fa:0e:bf:30:8a:fe:71:36:db:
0e:78:11:cf:0d:58:e4:98:38:e8:5d:56:25:62:4c:
51:d2:ef:03:6b:02:ee:e8:c9:86:64:a5:9e:2b:d0:
75:dd:bb:6f:45:6a:c7:67:8c:f1:e3:4e:87:4d:7c:
19:b6:85:b3:ce:af:63:f9:26:d7:98:78:14:45:84:
8c:e4:80:76:7f:28:15:6a:0b:35:04:1a:9d:a6:28:
f5:9e:91:58:4e:b6:ce:96:30:de:e7:57:c2:9d:fc:
86:96:46:c4:0b:84:22:db:e1:b4:4a:d8:f3:c1:38:
70:41:05:d1:f9:ca:92:b4:34:a8:d3:dd:74:83:de:
2e:1a:97:d8:c9:52:fd:2f:e0:ef:83:3d:3e:23:21:
c8:06:76:7e:1b:7b:7a:7f:33:7a:c8:18:14:f9:9c:
91:43:87:3b:c7:00:13:11:b7:ec:bc:c2:cb:fc:74:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:1D:8C:0C:40:79:4A:8A:0D:06:A0:22:9B:2B:1E:08:70:E3:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/548C3E9EF5E711EF86C129AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.78.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5f:10:7f:b2:0b:84:fa:ed:c4:d8:7c:3b:23:09:90:9c:af:
e8:a3:ba:e8:a7:e0:18:2f:f5:c6:98:88:27:8a:4b:4a:c7:da:
8b:60:46:67:b0:27:95:50:a1:a5:4e:b3:e2:aa:ae:c7:1f:8f:
c0:77:95:13:b5:08:0c:ed:57:0d:a1:4f:a7:3d:b3:59:95:16:
8f:99:f9:90:f4:f7:73:ae:a7:27:b3:41:bd:1a:b8:50:8d:89:
ec:79:3b:f3:68:3e:51:bf:6d:fc:09:b5:41:5b:db:84:9d:38:
0b:ab:01:81:3f:63:d4:d9:97:b3:23:f9:3b:94:a0:73:ae:d1:
8f:7d:4e:5c:6b:63:e6:6b:a8:97:e3:ca:3d:d9:5b:64:15:a1:
02:85:5f:ac:ba:1a:96:a0:01:38:8c:ec:54:01:00:df:4d:0d:
25:65:91:12:84:2e:6f:97:ba:10:49:12:41:ad:42:bc:82:50:
79:f7:5e:48:dc:52:4d:e1:a4:4e:36:97:46:c3:9d:9e:f3:54:
d9:cd:f3:cf:10:a9:ff:2e:ad:41:c2:ce:82:ae:08:89:4a:2d:
a4:03:33:04:4f:05:ff:65:3f:0b:1b:53:f1:98:62:7c:92:ee:
cf:f6:9a:34:df:d8:4b:4d:c6:6a:f2:06:32:a2:52:71:71:4d:
3d:0c:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:27:24 2025 by rpki-client