Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72386AD2F16211EFAFD140A2762E951A.roa
File: 72386AD2F16211EFAFD140A2762E951A.roa (raw, json)
Hash identifier: bZAP0AeH7743nGZx9vM61It7ZQiNj+/uVwvvt0pJmaQ=
Subject key identifier: F4:C8:D5:BB:AC:5C:12:82:15:62:6B:84:63:2B:75:6B:02:F2:82:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015A80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72386AD2F16211EFAFD140A2762E951A.roa
Signing time: Sat 22 Feb 2025 21:17:40 +0000
ROA not before: Sat 22 Feb 2025 21:17:36 +0000
ROA not after: Wed 26 Mar 2025 21:17:36 +0000
asID: 197547
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88704 (0x15a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 21:17:36 2025 GMT
Not After : Mar 26 21:17:36 2025 GMT
Subject: CN=67ba3ef4-8e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:2e:9e:aa:88:c8:d3:79:8f:b3:de:0b:c2:
ce:1f:84:4d:1d:73:40:ee:84:6e:e1:35:72:cd:c1:
22:94:c6:a6:1f:36:fb:df:a5:da:9a:91:44:07:0d:
ca:c8:66:88:c1:8a:00:cd:e0:ed:c2:2b:ce:3c:bd:
a9:c5:7a:16:68:30:af:6e:79:26:b2:cf:4a:84:bd:
9a:a7:63:50:71:39:6c:dc:51:86:f9:03:47:d1:f4:
47:06:90:d9:93:4e:be:4f:15:18:a8:ff:21:0a:56:
62:92:dd:a8:b9:2a:a0:ed:75:d0:15:0f:11:55:f9:
ed:af:ff:fe:9d:e2:34:92:ea:22:1c:74:f6:37:a8:
2c:d7:94:f4:56:37:26:70:a2:f2:1c:71:71:0a:63:
ba:9d:ef:b4:7f:4f:60:c5:90:a8:9f:10:b7:7a:1c:
53:1d:d8:3b:d7:83:7a:88:20:8e:bb:ba:82:29:b4:
6c:bc:b5:51:3d:7a:99:a4:28:1c:9d:8b:07:c3:70:
a3:ea:a7:c3:d6:0d:80:93:e7:4f:26:15:7d:f5:35:
74:da:3b:a8:22:0d:40:ee:f3:56:9a:75:6e:42:17:
ba:4c:b2:4e:f7:6d:40:44:4e:43:34:b6:72:aa:96:
6a:b4:26:74:c7:5b:64:b7:1a:dc:ef:d6:8f:d8:2b:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:D5:BB:AC:5C:12:82:15:62:6B:84:63:2B:75:6B:02:F2:82:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72386AD2F16211EFAFD140A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4e:99:6e:9d:76:e4:06:cb:13:71:ea:28:fb:6e:c3:c0:f9:
bf:0d:fc:95:b3:c1:bd:96:79:71:1f:d9:d6:57:8c:66:e9:be:
de:df:bb:34:b6:b3:67:8c:02:1f:e6:5b:92:a8:f4:75:7d:7a:
c9:1b:3c:85:8e:c8:6a:41:d9:2b:af:ce:e8:31:67:53:31:ab:
1c:bd:59:93:a3:8a:63:8e:d5:49:61:7c:1c:d5:76:37:0b:b7:
4a:2c:c2:b8:8c:67:dc:da:f1:b6:90:86:3c:3a:ad:91:26:25:
bf:76:c3:28:e8:d8:78:1c:07:45:a2:1f:70:2d:04:6c:e1:50:
ab:3b:3a:3f:2a:33:bb:16:dd:48:dc:bd:73:08:e9:c1:c3:03:
d7:4e:2f:22:b0:1c:2f:e7:48:72:9d:44:06:e7:36:66:33:6e:
ef:2d:50:6b:1c:1e:c4:65:e1:f3:97:66:c1:dd:1e:e7:9c:f7:
04:bd:e2:b5:78:ae:93:0f:5a:60:41:05:68:fd:03:1c:c8:d0:
97:56:cc:5d:0f:18:51:59:e8:06:7b:f8:9c:67:c7:03:f7:4f:
28:56:02:7e:ba:d8:ce:7c:29:89:d0:e2:b4:32:20:f9:56:a1:
cc:2f:6a:8d:c4:9b:fb:d7:36:22:94:55:12:3c:ab:1f:90:4c:
74:38:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:34:42 2025 by rpki-client