Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74854084F1D611EFBAAA7D6F762E951A.roa
File: 74854084F1D611EFBAAA7D6F762E951A.roa (raw, json)
Hash identifier: UF849Ske5lucvCDsoFKnyo8VMZt6BKk4VqUk3TsA+4E=
Subject key identifier: 7F:90:FF:DB:E6:EB:39:01:AA:7F:AA:65:6C:93:C2:B7:48:14:C1:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74854084F1D611EFBAAA7D6F762E951A.roa
Signing time: Sun 23 Feb 2025 11:08:05 +0000
ROA not before: Sun 23 Feb 2025 11:08:00 +0000
ROA not after: Wed 26 Mar 2025 11:08:00 +0000
asID: 149513
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88907 (0x15b4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 11:08:00 2025 GMT
Not After : Mar 26 11:08:00 2025 GMT
Subject: CN=67bb0195-e27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:93:2e:ba:5e:2b:c1:14:d9:df:79:e1:55:
2f:3c:97:16:a5:8d:42:f6:ed:13:47:db:c7:5e:63:
1d:47:2d:2c:9a:08:d5:1d:9e:99:0c:10:a4:81:4f:
81:77:17:50:a3:e6:a1:be:a9:de:da:03:99:c6:e2:
d2:93:7b:52:c8:12:38:71:fd:46:df:29:65:e8:66:
39:d8:f7:06:33:32:8f:c4:1f:5a:24:67:de:55:98:
e0:61:a9:d4:8e:3a:26:a4:ca:c3:e2:42:ae:03:e4:
7f:92:33:84:84:db:63:b7:2d:96:2d:72:5b:aa:d0:
13:44:f7:cc:0c:48:be:3e:b7:77:6d:d4:49:ac:ca:
f8:bf:df:e8:cb:48:e7:13:d5:0c:e4:a3:1d:9c:95:
77:bf:66:d1:14:ed:f6:eb:ed:0c:86:54:28:b7:dd:
3d:f3:c7:75:a0:e6:1c:fe:b8:37:32:13:49:1f:da:
d0:87:70:1e:91:7f:83:04:20:94:43:22:b8:19:f8:
2d:9a:4f:fa:93:35:41:7a:c3:b3:14:04:0a:4d:a0:
01:b8:bf:98:37:70:d4:d1:d0:cc:d3:e6:5d:db:6e:
51:a4:22:60:7f:d7:37:58:49:a1:bc:1f:d4:f9:21:
ff:bd:d3:f9:7f:87:20:62:de:54:43:90:de:84:cb:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:FF:DB:E6:EB:39:01:AA:7F:AA:65:6C:93:C2:B7:48:14:C1:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74854084F1D611EFBAAA7D6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fe:d7:7c:aa:29:39:f3:88:cc:b1:8e:fd:e6:b7:fd:c5:9c:
5d:c3:c4:91:fe:f2:c8:fa:1a:dd:e7:d4:5e:58:1d:f3:8c:da:
9d:ba:b6:33:8a:17:e4:a2:00:34:3e:79:94:a5:06:08:30:4f:
b8:3c:a0:59:6d:84:3b:c5:ff:77:59:6f:d3:76:bb:c5:0c:3c:
5d:2c:a8:14:ee:93:1f:eb:ab:86:56:e1:12:ff:5f:cf:49:fe:
33:4e:04:66:7c:5f:3a:5b:6c:86:f3:1c:9f:0d:41:af:e6:bf:
d2:61:21:fc:dd:0a:43:d2:80:30:8f:52:c8:50:b4:f2:be:eb:
3b:b5:83:16:0b:e1:b5:b5:22:1b:8a:29:64:3c:ad:fe:85:62:
f3:dd:87:3f:53:29:5e:74:88:cd:a1:b8:05:db:64:ed:89:9c:
39:0f:dc:13:9f:06:cb:32:1e:00:55:b1:b1:e7:91:c8:31:52:
54:5d:23:0c:b0:9e:bc:06:b5:eb:0b:5b:b5:79:30:7d:d6:10:
7d:ca:82:43:22:c9:f9:45:b3:5e:0e:6c:a3:35:b9:c2:d1:df:
f1:fa:04:02:40:d7:51:3c:fa:4f:86:e5:17:34:fa:85:9b:24:
d4:bd:e3:a0:ec:58:9a:e6:95:12:9b:0e:b9:26:fc:fd:31:f6:
c6:5c:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:11:59 2025 by rpki-client