Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5997BCA0F4D011EF947DA1B8762E951A.roa
File: 5997BCA0F4D011EF947DA1B8762E951A.roa (raw, json)
Hash identifier: n55rb0XyRCfP/iTmGSvdnhNMgUxsffscBX+sRPYkZuM=
Subject key identifier: 8B:90:2C:12:2F:92:B9:03:58:0F:33:70:C0:0C:C8:0F:80:4C:D2:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01663D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5997BCA0F4D011EF947DA1B8762E951A.roa
Signing time: Thu 27 Feb 2025 06:01:57 +0000
ROA not before: Thu 27 Feb 2025 06:01:53 +0000
ROA not after: Wed 26 Mar 2025 06:01:53 +0000
asID: 62240
IP address blocks: 154.195.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91709 (0x1663d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 06:01:53 2025 GMT
Not After : Mar 26 06:01:53 2025 GMT
Subject: CN=67bfffd4-9907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:08:c4:77:c8:7b:5c:06:93:54:e5:4b:af:
d2:8c:eb:69:e0:ac:83:1c:30:21:6a:1b:8f:d7:fa:
fb:29:2d:c2:f9:5a:c5:ee:0a:df:04:fd:7a:d4:71:
1d:da:ee:e4:0d:dd:98:11:27:31:2e:49:1b:fb:2d:
d0:34:20:00:4f:09:78:43:d9:c5:ac:86:4d:7e:be:
a9:3e:8d:4b:66:90:df:40:1c:d3:24:9e:e9:12:bb:
c5:76:57:3e:67:5b:d6:ee:36:9a:27:75:37:05:a1:
be:5e:2b:0f:2d:35:dc:db:ab:23:98:88:f9:75:10:
a1:e1:8e:e3:94:3a:dd:ea:73:cd:c8:0d:44:bf:1a:
60:44:a9:af:ba:37:ec:57:64:bf:37:17:7d:36:d7:
88:a6:20:9f:97:ba:41:76:c1:f4:d3:52:89:86:5a:
3e:91:30:0c:28:ea:bf:92:11:48:c4:f8:e9:be:c3:
74:16:55:8a:9e:94:1d:89:f5:b0:7e:05:07:8e:e6:
c4:c4:7d:f7:40:8f:c3:c2:4e:1a:d5:8c:6e:e8:b0:
05:cb:cd:4e:14:69:23:3c:87:03:a0:3e:37:cb:a2:
d4:14:5a:4a:f9:c0:1c:d1:93:03:58:c9:70:ca:d4:
d2:fb:79:7c:63:6a:99:b2:b1:5e:1a:21:3f:4d:26:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:2C:12:2F:92:B9:03:58:0F:33:70:C0:0C:C8:0F:80:4C:D2:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5997BCA0F4D011EF947DA1B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.143.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2b:f0:d3:20:a1:8f:33:eb:fd:3d:ad:c3:8b:64:c0:35:d4:
5a:c7:da:c8:3f:4d:fd:a9:f2:9c:a5:46:46:a1:47:c0:50:80:
ee:b6:ae:9f:4e:14:98:e5:c6:41:04:e9:41:46:9c:7d:d6:a0:
58:99:8c:2e:be:78:66:31:03:23:29:7c:75:6a:8e:fb:dd:6e:
f1:cc:d4:f0:ff:a0:ef:38:c5:1d:5f:fa:8a:c8:3b:5f:2a:4e:
73:c0:fb:53:26:07:76:a4:fa:d7:84:c7:a3:19:fd:56:1a:03:
cd:c8:fd:09:9a:66:44:4d:97:09:13:10:2f:a9:9a:c0:2c:25:
eb:b7:35:15:f9:45:10:5b:cf:32:c5:a0:8f:60:8c:c1:a2:4e:
17:7c:74:43:d4:ca:46:68:6c:a6:97:dc:2e:73:48:5b:dc:0a:
70:1d:80:5f:67:8b:54:24:4f:1d:75:00:0c:2d:06:97:da:61:
78:29:ae:25:64:3f:85:7f:22:fd:2f:9d:63:89:2f:60:d6:f4:
b0:c6:c1:c8:d7:85:5b:5f:7c:7b:ae:0b:1c:2d:39:b6:ed:e3:
03:54:8e:6d:87:86:19:ae:cb:0e:84:7b:65:ed:43:b3:25:1b:
e9:12:14:a4:ae:4e:c1:c3:6f:54:9a:bf:90:72:24:69:54:1a:
88:83:38:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:51:25 2025 by rpki-client