Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/583864EAF67911EF9672F098762E951A.roa
File: 583864EAF67911EF9672F098762E951A.roa (raw, json)
Hash identifier: 5stBlXdZTgf5bjw5i8kavJ4Qsh73WXIaSEYrAxqO+Hg=
Subject key identifier: 1B:14:BB:AE:06:9C:63:79:53:D0:E9:8C:9A:C2:1E:3A:D6:6F:73:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/583864EAF67911EF9672F098762E951A.roa
Signing time: Sat 01 Mar 2025 08:44:10 +0000
ROA not before: Sat 01 Mar 2025 08:44:07 +0000
ROA not after: Mon 31 Mar 2025 08:44:07 +0000
asID: 202656
IP address blocks: 154.219.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93545 (0x16d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 08:44:07 2025 GMT
Not After : Mar 31 08:44:07 2025 GMT
Subject: CN=67c2c8da-eba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:72:c8:6e:32:19:fe:a6:c0:f0:ea:59:0c:
d7:52:a2:49:20:0a:08:b5:3d:4b:09:cd:7a:72:ef:
10:de:87:81:d4:e6:4e:a5:2f:b7:90:4d:84:16:5a:
f4:d0:7f:b1:8d:85:8a:46:6c:e7:3c:dd:79:92:7b:
47:bb:1e:38:17:07:57:4f:52:d6:87:70:75:4f:f5:
89:c7:eb:7c:11:20:a6:e9:f7:e3:f2:8b:8c:83:33:
a6:84:96:c5:57:02:b5:e4:ff:75:c7:d7:a7:67:c8:
6d:0d:8d:65:d0:47:0f:ce:72:d8:92:44:78:a2:71:
2b:ed:2b:b9:4a:e2:92:a0:80:56:10:7a:20:06:f8:
b8:c1:4d:d5:a4:3e:71:92:ad:be:6d:52:8b:84:db:
a5:33:11:df:18:73:0e:3c:61:d9:84:85:ce:5b:33:
1a:47:9e:a0:8f:ac:60:10:e1:8f:1f:30:71:c7:79:
89:45:f1:0b:bf:31:27:e5:9a:d8:cd:b4:3c:72:bc:
9f:15:6d:cf:80:25:f5:3f:ba:fc:39:07:9d:9d:f5:
c8:91:90:44:3d:6f:27:38:d7:ee:b2:94:2a:a9:2c:
86:8b:0e:74:e0:77:5e:1e:71:e8:cb:2f:92:f4:2e:
06:f0:13:34:27:9d:7c:fe:88:64:12:29:be:f2:8b:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:14:BB:AE:06:9C:63:79:53:D0:E9:8C:9A:C2:1E:3A:D6:6F:73:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/583864EAF67911EF9672F098762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.24.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a1:87:8e:e2:aa:a3:d8:46:8d:0a:e4:4f:ba:e2:24:65:bc:
84:60:45:7f:a4:14:7b:be:e4:ff:11:96:45:eb:b0:13:a2:38:
18:9b:a2:32:f5:8e:e0:04:41:d5:d8:d7:dd:46:0e:90:47:e5:
d6:a6:99:2f:ae:a4:14:d3:dd:dc:bc:a2:61:88:cc:3c:85:80:
38:20:b5:0f:b6:da:da:61:9e:13:21:d2:34:19:5a:5e:96:10:
ed:00:b0:36:65:93:38:be:13:d4:1b:40:f5:61:66:17:ba:5a:
a3:6c:36:ce:2f:68:df:60:51:2b:f6:d8:a1:ce:78:e2:97:19:
ec:61:cd:c3:64:ab:81:63:86:0c:4f:b6:06:7e:e2:88:68:41:
14:43:72:92:e2:7e:d4:b4:84:b4:97:4a:83:aa:df:e1:1b:cb:
c3:cb:21:b9:08:c1:1f:73:19:59:59:47:9e:ef:b2:dc:83:b0:
c0:41:ca:36:a5:d2:05:2e:c5:1d:48:13:32:55:5a:33:41:34:
5b:f7:04:0c:49:b1:0b:28:d4:ce:d5:21:48:03:58:49:29:a0:
d8:31:19:00:3c:86:85:a1:11:14:6d:81:8d:da:17:fd:ee:ec:
fa:1b:92:7f:3e:07:b8:52:80:3a:86:b9:a7:a1:4e:bf:39:6e:
98:b3:83:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:41:17 2025 by rpki-client