Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1BF002F62211EFA3EEF4BA762E951A.roa
File: 5B1BF002F62211EFA3EEF4BA762E951A.roa (raw, json)
Hash identifier: w73zp8wV85XXYTQ7afYYo22r+Pd2CFD+DmJZvw6UGSY=
Subject key identifier: FC:86:EB:B3:48:F6:86:26:F1:4E:FB:58:AE:04:F9:6C:75:A6:02:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1BF002F62211EFA3EEF4BA762E951A.roa
Signing time: Fri 28 Feb 2025 22:21:29 +0000
ROA not before: Fri 28 Feb 2025 22:21:25 +0000
ROA not after: Wed 26 Mar 2025 22:21:25 +0000
asID: 62240
IP address blocks: 154.194.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93319 (0x16c87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:21:25 2025 GMT
Not After : Mar 26 22:21:25 2025 GMT
Subject: CN=67c236e9-6dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:1c:fb:2d:7c:ca:e2:cc:2c:f3:15:a6:42:
ff:d7:b7:1a:48:33:6b:b2:67:61:b6:92:01:97:32:
a3:79:57:16:f7:2f:24:a4:03:df:0a:14:ff:ae:24:
43:4b:24:66:26:5d:45:12:90:6e:fd:b3:d2:c9:c7:
b9:eb:4d:8b:90:39:78:5e:b4:bb:f6:3a:a2:05:3e:
d0:f0:21:3f:59:5c:e0:54:91:61:1f:87:dd:1e:f2:
9c:51:1c:4b:64:34:a3:6a:35:1f:93:43:f6:92:2e:
98:89:e3:2c:89:5b:ac:87:6d:07:26:ce:70:70:a5:
ad:17:11:9e:9f:a6:c8:b9:a0:7a:67:3e:48:b8:e5:
7f:f8:0c:89:27:cb:88:8a:81:ce:27:c1:a9:73:5d:
12:12:9e:74:93:82:fa:52:1f:e5:6a:2d:8e:9d:5f:
ad:17:cc:f8:85:9d:11:7a:5c:18:10:08:fe:a5:4d:
24:f2:26:d6:e9:5e:7d:57:7b:67:b6:13:18:af:13:
3f:e2:7e:14:bd:97:e1:11:c9:cd:58:17:11:01:39:
af:95:84:35:a0:bd:f1:14:27:60:12:56:ac:db:04:
83:89:8b:8e:bb:07:6d:22:e6:76:e5:bf:7b:a9:71:
90:96:86:2b:86:f5:64:46:63:b2:ab:78:7f:87:33:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:86:EB:B3:48:F6:86:26:F1:4E:FB:58:AE:04:F9:6C:75:A6:02:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1BF002F62211EFA3EEF4BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.115.0/24
Signature Algorithm: sha256WithRSAEncryption
79:46:5e:bc:53:e3:8f:82:73:b4:75:79:dc:3a:ea:e1:f9:a8:
fa:cf:4e:8a:d0:b3:1b:48:e0:d6:80:44:49:1b:16:78:64:74:
44:69:af:13:09:78:9a:d4:48:28:d9:10:fc:87:a9:0a:09:64:
ce:d1:f4:a1:9a:44:69:d9:2a:95:4a:75:cd:f6:1c:3e:75:cd:
e5:25:9b:aa:9a:6d:41:87:a3:42:1d:91:d9:0f:43:a1:38:c6:
05:fe:97:1c:37:35:82:32:22:cc:6b:ec:00:49:89:d1:58:ba:
61:bb:53:87:a9:e9:47:36:f7:1a:53:3d:93:ea:54:85:17:ec:
e3:ce:56:b8:40:c6:65:98:ba:bc:c8:b7:88:26:04:a1:a8:7c:
6d:c6:b7:1f:4b:f6:de:a6:99:dd:2f:4f:11:ae:4d:fb:55:76:
57:03:db:8e:68:77:db:53:78:cc:f5:d7:3e:6a:43:ad:55:e7:
54:6a:c3:b9:34:a4:62:dc:d6:04:0d:e4:e6:74:03:55:a6:35:
81:55:fd:4e:c3:1f:9b:9f:16:34:98:8d:48:4b:a1:75:c3:5e:
83:ed:45:7f:a0:30:9b:ef:f6:39:b9:9b:d4:d1:fc:7f:bc:ef:
bf:a3:8d:83:68:bc:cb:56:d3:54:01:59:25:a3:bd:e7:a5:0e:
05:9c:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:16:15 2025 by rpki-client