Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8CE666F69B11EFBB910D81762E951A.roa
File: 5C8CE666F69B11EFBB910D81762E951A.roa (raw, json)
Hash identifier: K+DCsJPPix09/jT774RDZK8XKmfMbIz/pX4cXNiGUdQ=
Subject key identifier: FA:75:FB:FA:50:19:57:CC:A2:1C:22:A3:3A:A0:9A:82:2D:98:C0:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8CE666F69B11EFBB910D81762E951A.roa
Signing time: Sat 01 Mar 2025 12:47:41 +0000
ROA not before: Sat 01 Mar 2025 12:47:37 +0000
ROA not after: Mon 31 Mar 2025 12:47:37 +0000
asID: 202656
IP address blocks: 154.219.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93780 (0x16e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:47:37 2025 GMT
Not After : Mar 31 12:47:37 2025 GMT
Subject: CN=67c301ec-efaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:97:58:da:f6:12:d7:a6:92:bd:f2:34:2f:
19:ef:3e:85:fe:de:d9:65:7a:ee:dc:14:c6:93:bc:
63:6d:58:f2:0d:88:3b:3a:8a:bd:f6:c4:27:c3:34:
c8:fd:4e:2d:66:c5:41:0b:06:bc:1f:c4:98:f3:43:
f4:43:6e:4a:08:84:45:04:14:ea:3d:bd:73:ff:b8:
bb:b7:41:1c:4f:0d:f8:cb:3d:ef:34:58:57:5e:ee:
1f:66:c3:c1:b5:a3:90:d9:e0:63:9c:2f:5d:5b:e7:
be:df:c1:56:ca:17:f5:13:e4:4c:63:a8:71:75:33:
17:dd:40:73:6f:f0:bd:e1:54:19:00:31:42:ca:e3:
9c:77:b4:da:2a:eb:c1:66:f7:64:1c:d7:d9:63:58:
08:0b:b0:fe:17:49:9c:95:bd:79:01:19:7f:e5:bf:
02:b1:b6:81:6c:8a:78:3e:a4:37:ab:59:36:24:96:
1b:b4:0e:9f:c5:27:31:aa:7c:81:0b:16:ff:53:b0:
c1:d1:96:27:25:c8:a2:15:6b:53:db:75:d9:6e:c7:
b7:50:0c:bc:02:61:aa:c3:f9:53:72:6a:28:ee:f2:
92:cd:76:ab:8e:71:fe:c9:72:ef:eb:11:5f:09:79:
61:f7:1b:02:c8:99:36:27:54:b9:8c:6e:b0:4a:97:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:75:FB:FA:50:19:57:CC:A2:1C:22:A3:3A:A0:9A:82:2D:98:C0:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8CE666F69B11EFBB910D81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.202.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:3f:5b:a0:b5:d6:85:f8:f1:a2:b5:b8:e2:82:56:fb:ac:39:
69:2a:3f:6d:56:fb:d0:4c:55:4e:95:a8:7f:3c:3e:e4:5e:4a:
96:a9:ac:69:ff:d7:68:6d:a5:3f:8a:c4:fd:b9:c4:7a:13:fc:
c0:b8:0c:a5:a5:b2:20:65:0c:17:4d:9c:61:c3:2d:01:7d:9b:
f6:e5:66:ba:ea:06:f5:24:fd:5a:dc:a0:e3:d7:41:1f:ca:c6:
1b:6c:63:e0:1d:ea:50:f1:c5:02:bd:36:d6:b6:4c:a9:4a:ce:
ce:2d:77:d8:97:b7:1f:96:43:b6:fe:95:19:e8:00:83:87:2a:
8b:24:79:e3:fe:4a:2e:ad:57:0b:23:d4:00:e2:70:33:fe:58:
50:b8:4f:7f:e6:d1:d2:94:23:2a:f9:0f:5a:cf:a1:c9:f4:cf:
8e:9a:bf:cb:b4:e2:2f:ce:07:63:11:b1:65:0b:33:2d:bd:6d:
64:0c:eb:ce:a7:db:ab:79:c8:5c:17:07:0d:76:bd:75:7a:a3:
fe:08:4b:e1:cb:c3:f8:a1:de:2a:0f:f1:de:38:d0:ff:e5:de:
07:be:e4:23:04:49:79:a4:25:14:a1:1f:05:1f:63:83:60:f2:
54:13:e1:ae:b1:26:96:e2:4f:7d:47:3a:a9:ac:22:a2:74:78:
c5:92:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:57:38 2025 by rpki-client