Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/610E3A46F5D311EFAC0CD4A3762E951A.roa
File: 610E3A46F5D311EFAC0CD4A3762E951A.roa (raw, json)
Hash identifier: JP9Dg7CjKlU4NHFagJjdmnAGaW6xts2X4HoUEYS3Bj8=
Subject key identifier: D7:68:1F:DF:89:09:5B:8B:BC:87:E1:15:29:DE:3C:19:A5:9C:6D:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/610E3A46F5D311EFAC0CD4A3762E951A.roa
Signing time: Fri 28 Feb 2025 12:56:09 +0000
ROA not before: Fri 28 Feb 2025 12:56:05 +0000
ROA not after: Mon 31 Mar 2025 12:56:05 +0000
asID: 36137
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92993 (0x16b41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 12:56:05 2025 GMT
Not After : Mar 31 12:56:05 2025 GMT
Subject: CN=67c1b269-d029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:70:94:d5:ae:58:69:70:da:49:39:3a:82:
c6:3d:54:d5:08:f1:77:f6:ec:02:64:14:d5:f0:74:
bb:1f:2b:b3:0c:3c:75:a5:ad:c2:3d:06:ca:7b:5d:
39:80:75:03:e6:df:17:97:1b:fb:5a:e9:28:f2:48:
36:61:9f:32:5e:70:00:86:58:1a:b9:fd:34:1b:ea:
2b:4e:58:10:49:0f:d1:7f:e3:9a:b2:bc:86:7b:b5:
fb:bd:5f:ea:cd:f8:de:7a:b3:2c:f3:22:32:5c:2d:
a7:ee:11:20:c4:98:5d:d0:87:01:80:bb:8f:11:4b:
fc:e5:ad:6d:16:17:45:a7:03:89:5e:f3:ad:ce:db:
1a:d0:ba:7d:fc:35:4e:25:5b:6e:be:d4:1d:a4:a3:
43:6c:18:5c:58:64:4d:e7:16:0e:97:39:0a:6c:1e:
9a:9e:cd:6d:25:28:d7:d3:2d:55:97:ad:69:d0:69:
7c:f2:49:49:3f:88:3c:3d:47:8b:b1:c8:70:11:a3:
3c:69:14:47:24:39:9d:2c:77:c3:3e:47:c0:9f:ce:
9a:35:90:67:6f:08:c7:9a:c2:1c:fa:ff:e2:25:cf:
c9:4d:6c:20:a6:b7:78:cb:7c:83:d0:60:e3:77:c9:
50:d9:fd:f3:73:8e:bb:86:06:41:b0:13:47:1f:70:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:68:1F:DF:89:09:5B:8B:BC:87:E1:15:29:DE:3C:19:A5:9C:6D:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/610E3A46F5D311EFAC0CD4A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
86:5f:75:89:73:51:26:60:5c:1a:34:c9:31:2f:04:55:2f:47:
99:50:3d:e3:a0:a7:61:17:c3:c8:78:15:29:ed:03:fa:ea:da:
cf:11:98:f7:b0:69:ab:49:43:21:8e:20:96:01:9f:ee:5f:8f:
d5:01:ef:ee:48:18:60:e9:9d:68:dc:2c:72:07:66:3d:55:3f:
b1:07:a9:fc:dd:45:ca:da:ea:3c:fc:6f:52:d8:28:73:4c:6f:
ab:50:17:f5:48:28:64:92:a0:8c:e4:92:23:ba:98:44:c1:f1:
be:27:34:b7:e4:c7:ac:5d:31:5d:28:f2:89:38:7a:b1:f6:5c:
82:c4:bf:bb:0b:11:f0:25:bd:3f:28:a9:00:b6:db:11:ce:c8:
c9:9b:42:0b:cb:73:a9:8c:e2:63:05:9e:b8:19:1a:44:42:48:
7c:71:0a:e9:f5:2e:90:47:33:72:47:f5:37:72:c7:84:0a:09:
da:8c:da:ed:11:8e:a8:31:da:f2:15:0e:20:44:dc:d0:cb:e5:
a7:f1:59:f3:97:0a:73:4f:f3:78:c7:81:c4:59:d0:e7:23:4c:
dc:d2:21:9f:3b:ce:ac:0e:b1:c8:a4:0b:8c:87:3b:66:46:bc:
06:46:18:90:60:35:4f:31:74:fa:78:b5:c3:de:91:e0:ea:05:
14:33:b2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:31:08 2025 by rpki-client