Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/557FC2C6F33011EF84094987762E951A.roa
File: 557FC2C6F33011EF84094987762E951A.roa (raw, json)
Hash identifier: Rs5WIfyWZq+ZNbDnzBp36jRQ8ZoklDb9LafUwBYSgdw=
Subject key identifier: 8F:07:F0:42:EF:09:5B:7E:40:CB:2B:43:E7:1D:DE:69:C5:43:61:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/557FC2C6F33011EF84094987762E951A.roa
Signing time: Tue 25 Feb 2025 04:23:59 +0000
ROA not before: Tue 25 Feb 2025 04:23:55 +0000
ROA not after: Wed 26 Mar 2025 04:23:55 +0000
asID: 5065
IP address blocks: 154.94.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89364 (0x15d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 04:23:55 2025 GMT
Not After : Mar 26 04:23:55 2025 GMT
Subject: CN=67bd45df-f035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:bf:65:a2:e6:70:c9:13:72:84:28:8a:ff:
11:3b:c5:a2:66:5b:83:c7:05:b5:18:e5:6d:1b:2e:
50:42:8e:40:d4:55:09:8c:7e:ab:ba:c0:d1:8d:4f:
0e:7d:e6:4a:36:c9:08:c9:8c:ef:75:7c:3e:19:ea:
a3:89:86:4d:31:7c:06:c7:d5:24:eb:b9:b2:00:80:
33:04:8e:19:32:5d:24:13:6d:8e:de:fa:6e:f9:eb:
46:65:77:18:da:e0:36:12:74:fc:2c:f6:ab:68:0c:
7c:ab:78:50:5d:fa:00:c3:a7:42:ce:af:a2:b2:89:
d4:74:e9:9e:ba:30:28:a8:49:4f:5a:fe:ac:a0:e3:
20:6a:d5:a3:90:35:e8:53:aa:98:0f:d5:b8:d2:dd:
f2:09:28:67:4e:32:8f:e2:90:bd:51:dd:14:a2:e0:
3e:80:dd:7b:f1:a4:36:71:50:57:60:66:6c:24:00:
48:11:c2:4a:8d:a2:ca:9a:ac:bd:10:d5:1b:6f:c8:
a2:d7:e2:ba:19:d0:d1:82:b2:98:f2:89:12:89:fd:
c9:f4:ca:8e:ef:c0:ce:5f:52:64:fa:12:d2:94:a9:
63:26:c4:f7:2d:ba:34:86:6a:d3:4c:60:cd:88:02:
c7:e2:30:42:20:ea:04:0c:f5:f7:de:23:8e:bb:0a:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:07:F0:42:EF:09:5B:7E:40:CB:2B:43:E7:1D:DE:69:C5:43:61:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/557FC2C6F33011EF84094987762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.41.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5d:ff:d1:99:f3:72:3f:8f:3a:78:3b:90:2f:c6:43:ad:8e:
09:76:28:ee:2e:d4:28:a3:f9:c1:b9:70:0c:c0:07:b9:c6:c8:
d1:46:25:9c:2d:87:7e:e4:93:f5:af:b3:36:29:cf:21:b2:05:
e4:ef:cb:8f:2f:be:04:f5:a3:2b:9a:f7:05:b8:f2:0c:67:46:
05:a6:14:8e:ae:e0:e4:ee:9e:7c:f7:d3:78:11:2f:3c:65:f3:
3f:5e:7b:6a:90:d4:93:6a:b7:3c:96:92:64:ce:cc:7d:0e:eb:
28:35:25:3c:66:e8:78:3e:d5:6f:16:17:4b:1e:c3:70:35:c9:
79:27:7e:e9:0f:1a:0b:a9:be:2d:01:de:f3:9b:4e:d2:6a:e8:
5d:40:68:1a:d0:01:08:38:38:fd:84:41:4d:de:8d:50:41:c3:
4d:61:5b:8f:33:4c:bb:0f:79:aa:7a:7d:33:b8:97:91:2b:71:
36:ae:96:2d:da:d0:ef:94:c1:6d:bc:4b:45:ef:58:38:96:6c:
99:8b:fd:9b:0d:e5:a0:b2:22:7e:83:42:c0:ec:8b:14:bf:5f:
2e:ac:52:c0:81:f1:39:f3:e8:58:b4:10:c5:ec:af:1a:12:47:
a6:79:13:36:a1:63:8a:34:86:45:ef:8d:57:79:90:ca:20:28:
04:67:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:18:00 2025 by rpki-client