Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B099ED2F4DE11EF839AEF97762E951A.roa
File: 6B099ED2F4DE11EF839AEF97762E951A.roa (raw, json)
Hash identifier: F2f9DYu3BlPElLVtZGy2KYliYr84PKvcSPotANWLJBs=
Subject key identifier: EB:E3:6C:2C:0A:4B:DA:0C:C8:4A:C4:C5:84:29:92:BF:4B:20:B5:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B099ED2F4DE11EF839AEF97762E951A.roa
Signing time: Thu 27 Feb 2025 07:42:39 +0000
ROA not before: Thu 27 Feb 2025 07:42:35 +0000
ROA not after: Wed 26 Mar 2025 07:42:35 +0000
asID: 62240
IP address blocks: 154.195.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91829 (0x166b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:42:35 2025 GMT
Not After : Mar 26 07:42:35 2025 GMT
Subject: CN=67c0176f-58a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:79:62:0e:4a:62:aa:c1:ea:c8:b3:7d:12:
8e:99:cb:75:b2:07:64:8c:f5:0d:1f:58:29:46:2e:
67:c9:ee:89:27:db:a5:ae:fc:b2:fd:93:08:43:d8:
6c:7b:68:37:f5:1d:16:c1:eb:e9:70:f7:64:28:76:
47:ba:89:81:a4:ff:72:ef:2d:8c:60:d6:2d:2c:56:
85:88:ff:d7:fc:bf:35:80:78:02:16:9a:60:0f:ec:
05:e3:cc:08:38:b0:3e:c6:dc:70:77:96:5f:a1:4c:
92:26:f6:65:6c:ae:ee:2e:86:fc:3a:3f:0a:03:25:
da:f9:78:dc:d9:5e:db:8d:f7:c5:47:7d:6f:b0:5f:
e1:62:88:0c:8f:53:f5:f4:63:bf:a1:ec:1a:16:e1:
a7:28:d5:a8:18:3a:11:fd:00:04:93:8b:53:d2:03:
f7:f0:c0:d7:0b:2e:19:db:b1:34:46:5a:3b:b3:17:
6f:8a:9c:4f:50:82:db:3d:90:08:d2:17:e2:b0:92:
78:bb:05:e8:77:24:42:5d:94:24:31:b4:bf:20:db:
ac:e6:3e:a6:7e:48:b4:28:84:fc:5e:3e:ce:05:19:
8d:44:e0:b3:22:dc:63:37:94:1b:64:30:18:28:8a:
09:0d:f9:ae:31:8a:fa:72:2e:91:78:f3:b9:d2:ad:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E3:6C:2C:0A:4B:DA:0C:C8:4A:C4:C5:84:29:92:BF:4B:20:B5:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B099ED2F4DE11EF839AEF97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.168.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:60:34:a0:5a:c4:bf:cc:e4:68:3f:31:5c:2a:08:d3:69:be:
48:c9:48:37:c0:6c:af:69:a9:7a:b8:58:7d:27:fb:9a:07:3b:
72:24:10:4c:b2:a9:9f:cb:ef:7b:aa:65:af:18:86:51:86:26:
82:08:82:23:ee:11:fe:d3:25:45:7e:44:aa:fe:a1:43:48:db:
25:6e:00:25:14:30:3c:eb:99:26:33:c8:96:de:b0:e2:c0:39:
c5:f9:85:6e:df:79:60:2b:04:bc:43:33:3a:b9:d6:9f:cd:64:
23:5a:f0:ce:2c:eb:5e:4d:a4:2a:9b:fa:78:08:ab:b8:59:8b:
26:74:c2:60:e1:a7:c4:4b:55:ac:df:38:53:da:96:70:9d:24:
c5:a7:13:05:64:21:ec:cd:10:d6:4e:33:37:6e:33:18:6b:de:
47:d3:27:7b:25:50:80:5a:68:5a:4a:c4:cb:9f:d8:97:a4:89:
86:16:36:c4:a0:dd:72:7e:c5:98:de:6f:55:88:8a:d4:4c:e1:
06:56:ed:82:aa:28:ae:af:80:bd:8a:e0:01:5c:17:b4:7d:a8:
dc:96:34:ec:74:77:0a:e8:13:e3:76:47:ea:36:c6:47:3a:e7:
37:13:ca:fe:50:2c:b6:ce:8c:f2:4e:78:b2:56:15:0a:7c:80:
cd:c6:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:51:23 2025 by rpki-client