Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ECA6BF8F50D11EF9B623558762E951A.roa
File: 6ECA6BF8F50D11EF9B623558762E951A.roa (raw, json)
Hash identifier: 9EKoLY/AiY/jRB94sT/fepXATt2uno6tDDBl/2XvkmI=
Subject key identifier: 60:3A:B2:A6:08:76:73:9F:DD:A0:15:EC:E3:72:6D:FE:8A:1A:2C:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01687C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ECA6BF8F50D11EF9B623558762E951A.roa
Signing time: Thu 27 Feb 2025 13:19:11 +0000
ROA not before: Thu 27 Feb 2025 13:19:08 +0000
ROA not after: Wed 26 Mar 2025 13:19:08 +0000
asID: 62240
IP address blocks: 154.195.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92284 (0x1687c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 13:19:08 2025 GMT
Not After : Mar 26 13:19:08 2025 GMT
Subject: CN=67c0664f-a853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:c4:75:e8:70:5c:fa:74:ad:0f:cf:25:83:
75:83:d1:32:5c:5d:7d:72:ef:fb:93:64:c0:18:cd:
3f:3c:40:39:04:72:65:c7:26:45:30:d7:c7:46:43:
d8:4e:7a:de:65:19:d4:38:de:ff:35:32:05:ee:9d:
98:ab:0e:08:41:20:8b:47:95:19:1d:80:6a:e6:99:
d1:1c:c8:bf:5a:d8:e1:36:b8:76:0f:d8:4a:3e:f6:
8a:2c:fd:5c:e2:86:16:9d:9a:94:54:94:cd:f6:80:
5b:72:b4:54:7c:95:d6:4a:05:1a:f5:1a:fe:7a:41:
f7:9c:8d:09:d0:30:e3:59:6e:09:52:87:b0:3f:21:
3b:67:2b:01:f3:90:c9:45:c8:fc:5e:2d:cd:20:f0:
9f:5b:20:aa:8b:ff:bf:f5:a2:03:2b:14:3d:d2:97:
4f:5d:67:52:86:c1:51:d3:1f:04:a1:22:f9:28:55:
47:fc:59:6f:3f:47:ec:39:43:6d:b7:d2:88:bf:7e:
31:2d:13:ad:ed:7f:6b:04:09:95:f8:a8:6b:0f:a8:
7b:79:cf:06:c1:08:45:28:c9:a6:b2:1d:90:ab:d3:
6e:7d:1d:81:d6:11:c6:46:1d:32:d9:63:22:6e:6d:
81:d6:1b:c4:30:9a:2e:14:07:c0:4b:dd:15:78:5c:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:B2:A6:08:76:73:9F:DD:A0:15:EC:E3:72:6D:FE:8A:1A:2C:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ECA6BF8F50D11EF9B623558762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.126.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:25:f6:3a:47:7a:32:d7:2b:35:a8:58:99:c1:58:e6:b4:0d:
39:ed:02:78:de:7c:b2:1d:d6:b7:14:ef:9b:7a:75:17:5f:8d:
57:c8:ef:0d:80:50:44:70:62:84:5c:a5:9a:14:a1:d6:e7:fe:
b3:4d:4b:8f:8e:d4:50:85:74:fc:a8:36:e7:0d:3d:fb:b9:8a:
af:5f:65:e3:74:8a:2f:12:d8:52:6d:82:9b:48:16:62:a5:44:
6f:4a:92:ce:10:d3:17:34:2d:68:e6:98:ff:2d:af:f9:5b:d1:
fe:4a:65:1e:32:ee:09:81:7c:55:90:77:50:b8:cc:7b:86:d1:
f9:5f:7a:db:e6:7f:ed:cc:8e:bf:17:44:60:c2:b3:73:df:a3:
c6:ea:2c:d2:7f:60:8d:94:24:2e:86:ed:00:96:1e:08:4a:ac:
4b:93:a4:bb:30:c5:40:f0:55:89:b5:db:7c:86:eb:58:89:35:
57:b9:33:59:07:1a:62:80:9f:84:17:b0:ce:f4:7b:fc:f3:9c:
10:33:72:01:4d:ab:69:08:7e:29:3d:67:6d:5c:f0:f5:78:00:
cc:d7:a6:c0:e1:3f:8c:94:34:0e:10:43:72:cb:f7:df:d9:b1:
d1:10:0c:56:1a:48:43:ea:5f:27:3a:0e:d5:97:70:6e:9a:39:
8a:60:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:02 2025 by rpki-client