Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65363D02F4E911EF82139261762E951A.roa
File: 65363D02F4E911EF82139261762E951A.roa (raw, json)
Hash identifier: Sk7duKTzD6LOZbGpvnfx0XyUA7y5Gnhr1hGZ1/2o3gM=
Subject key identifier: 31:CD:4F:C1:AA:64:F4:C1:45:87:BD:E4:51:AF:E0:44:2A:16:3C:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01670B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65363D02F4E911EF82139261762E951A.roa
Signing time: Thu 27 Feb 2025 09:01:13 +0000
ROA not before: Thu 27 Feb 2025 09:01:10 +0000
ROA not after: Wed 26 Mar 2025 09:01:10 +0000
asID: 62240
IP address blocks: 154.195.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91915 (0x1670b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:01:10 2025 GMT
Not After : Mar 26 09:01:10 2025 GMT
Subject: CN=67c029d9-f930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fb:d7:6a:8f:cd:4d:e4:d8:05:ab:72:d1:57:
5a:37:7e:ee:6c:e8:25:5f:e2:cd:8a:ab:e1:11:88:
2c:58:49:e9:35:cb:f9:aa:79:a3:2c:2a:32:54:fc:
64:99:50:79:cd:06:0d:f6:14:99:2f:9c:11:1a:34:
8d:39:3e:1d:90:2a:b1:7a:c5:61:43:54:c4:bb:0e:
27:5e:ba:b0:e8:ac:67:08:f4:28:25:34:8f:25:52:
c5:d5:3b:50:df:b5:6f:e2:5b:c5:17:19:5e:06:9c:
8b:a1:0f:15:8a:b9:52:4b:8b:23:b8:ba:ab:7e:a0:
70:9d:d5:ff:7d:6f:a9:41:f5:dd:59:b2:ef:de:c3:
14:c7:5f:cd:95:53:eb:3e:e2:8e:f7:83:18:ac:eb:
2e:31:32:44:37:f8:18:dd:04:f8:08:a0:b5:b9:5a:
06:41:b3:26:4c:b3:cb:fd:a3:91:52:85:c7:26:df:
7d:d6:57:36:b1:6e:e7:58:65:bc:44:e0:9b:eb:fb:
d3:69:31:5f:65:dc:a2:d8:9c:4f:cb:9e:c0:64:59:
5e:a9:e8:46:21:4a:7d:ca:de:5f:6d:ed:2e:4c:92:
53:c0:5e:6e:37:f8:ef:5e:d1:ab:ee:38:bf:c4:c1:
01:46:dd:84:01:01:4d:e7:75:5d:7c:25:c1:fa:55:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CD:4F:C1:AA:64:F4:C1:45:87:BD:E4:51:AF:E0:44:2A:16:3C:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65363D02F4E911EF82139261762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:32:f7:f8:18:c1:ac:70:9b:bb:6b:74:af:55:c4:5f:35:44:
60:fa:70:88:6b:49:65:a5:53:ac:a6:e1:e4:bf:02:c3:64:9c:
a2:07:c6:ca:1f:01:0a:96:14:58:65:f2:d7:27:79:05:f7:8c:
e3:69:3e:1b:87:3a:33:a8:2f:06:0d:49:87:8c:6e:7f:43:b4:
a1:1c:fc:dc:5b:e9:69:90:39:fd:0a:27:43:6a:b6:a3:bf:b1:
36:ec:c5:13:f1:bb:10:be:58:54:ad:83:42:82:59:1f:4f:b5:
13:88:05:71:c7:41:49:4c:0b:c0:37:91:d7:23:8a:c1:4a:00:
33:5d:5a:cb:73:77:1b:fb:a8:6a:23:07:33:bb:cf:68:88:4a:
36:b5:55:0c:92:f6:a0:9c:20:f7:53:91:56:98:a4:78:0d:58:
7d:d2:0f:ca:df:51:54:87:1d:80:d9:57:d0:cd:42:2a:63:f1:
92:9a:5f:a5:36:cc:31:11:90:42:c0:4c:09:91:43:85:19:04:
88:94:85:0e:36:36:c2:5e:7e:21:7e:87:3a:7c:c2:0d:0f:dd:
89:08:98:4c:03:ee:fe:39:76:6e:36:c1:6a:25:87:dc:9c:5c:
7d:1a:a2:aa:c3:f6:dc:8a:fa:8c:4e:9d:aa:98:90:1e:f4:2c:
61:86:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:29:17 2025 by rpki-client