Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1FBA38FA7911EFAA7EACB5762E951A.roa
File: 5B1FBA38FA7911EFAA7EACB5762E951A.roa (raw, json)
Hash identifier: QHqci8Eveby/Yp9y3hp50NLbbalbNtASO/C1oWrwhTM=
Subject key identifier: F4:40:D1:20:68:91:F7:CB:3E:A1:0B:E9:E4:18:37:1F:07:C6:8F:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1FBA38FA7911EFAA7EACB5762E951A.roa
Signing time: Thu 06 Mar 2025 10:54:20 +0000
ROA not before: Thu 06 Mar 2025 10:54:16 +0000
ROA not after: Tue 25 Mar 2025 10:54:16 +0000
asID: 39600
IP address blocks: 154.90.16.0/21 maxlen: 24
154.95.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94891 (0x172ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 10:54:16 2025 GMT
Not After : Mar 25 10:54:16 2025 GMT
Subject: CN=67c97edc-a564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:14:1d:48:bc:48:07:5d:d5:cb:59:cf:73:
81:c5:ab:22:00:a7:bb:48:fc:2e:f3:63:b2:2a:d0:
59:dd:c2:98:ca:76:10:df:52:70:4a:43:19:99:a9:
3a:9d:96:e4:8a:74:96:7c:6f:c9:4e:60:e1:d8:bc:
15:bd:74:e7:5d:6b:e2:1f:bf:d3:06:8e:a6:9a:68:
7e:9c:71:40:87:5e:6e:01:4f:32:0d:11:21:47:7d:
03:d5:f3:d9:19:2f:28:06:20:bc:ce:59:30:5c:12:
8c:89:3b:07:34:a0:67:04:d8:06:ef:1f:cb:a5:16:
9c:8c:ab:37:74:4d:0d:1a:d0:a0:f2:df:81:3d:cc:
07:00:08:a7:26:98:76:2d:0f:58:79:cb:81:b3:f9:
a5:c8:8d:16:5f:30:b9:a2:58:b8:44:ed:86:e9:79:
cb:d5:16:d4:cb:0f:40:13:08:c5:54:a8:3c:5e:1c:
60:86:ac:a4:79:e4:47:98:08:a6:d4:b7:41:44:b9:
26:08:40:62:9d:5f:67:71:23:2f:0b:92:61:6a:38:
6f:cc:8a:94:63:9c:04:31:9c:96:de:fa:d1:97:c5:
cf:10:5e:30:44:d4:4c:e0:1e:06:26:0f:60:c6:09:
29:03:fc:df:07:c0:0d:08:37:0c:7d:0f:1b:09:84:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:D1:20:68:91:F7:CB:3E:A1:0B:E9:E4:18:37:1F:07:C6:8F:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1FBA38FA7911EFAA7EACB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.16.0/21
154.95.56.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:91:81:f9:65:c3:48:1b:0f:e3:80:99:c6:ae:14:16:0f:55:
62:6a:ed:2b:ad:c5:c6:df:e5:f3:69:90:65:08:b3:bc:66:00:
27:a9:db:a6:db:e9:13:84:96:bd:e9:40:f2:f3:3b:07:90:3a:
d2:c2:ac:94:2f:8b:ab:0c:ed:e6:e9:38:1d:c3:89:5f:ef:eb:
fa:a1:14:91:c2:dd:9a:18:ac:8b:31:7d:ac:74:67:9e:bb:56:
ea:0b:6b:c6:bc:4c:51:87:4e:5a:a9:f9:bf:ed:24:5b:84:f8:
58:ca:42:4c:14:06:de:2c:1d:c0:09:34:58:db:87:04:b4:30:
b7:26:19:cf:38:6a:ce:1c:8f:63:af:82:83:96:b9:d6:84:4f:
50:14:fa:b0:29:41:8d:f5:f9:21:1f:54:2f:2f:5a:be:94:28:
28:dc:63:07:d7:0d:69:cd:ad:26:61:07:a9:31:57:80:10:1f:
5f:7a:87:5e:55:49:1e:fa:41:07:e4:78:4f:76:05:be:2b:0d:
55:cd:d7:5e:11:c7:ae:8c:07:72:76:b3:8d:52:83:98:bd:5a:
1e:6f:ba:e9:1c:cd:1e:6c:f1:ee:44:cc:4e:af:16:80:07:e2:
e5:1a:25:98:23:58:8a:bd:d5:95:7c:8b:22:2a:dd:2b:fb:3a:
14:24:9a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:13:56 2025 by rpki-client