Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DB9A52F6BB11EF80B2FE58762E951A.roa
File: 75DB9A52F6BB11EF80B2FE58762E951A.roa (raw, json)
Hash identifier: x7UoqDnZ33irnsRYSEHygX3VA7lY0bjz0M3EGYUuTjk=
Subject key identifier: 7F:33:C1:88:A6:C5:C9:6A:45:06:D8:21:50:F7:1B:51:35:DB:38:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016EE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DB9A52F6BB11EF80B2FE58762E951A.roa
Signing time: Sat 01 Mar 2025 16:37:27 +0000
ROA not before: Sat 01 Mar 2025 16:37:23 +0000
ROA not after: Mon 31 Mar 2025 16:37:23 +0000
asID: 202656
IP address blocks: 154.219.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93929 (0x16ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 16:37:23 2025 GMT
Not After : Mar 31 16:37:23 2025 GMT
Subject: CN=67c337c7-43fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:ff:d8:2a:60:49:e8:ef:08:0f:da:d4:37:
14:72:93:ad:30:2f:ef:1c:2d:9a:20:63:b8:c9:b3:
4c:39:95:2b:82:a7:05:56:4e:92:8d:5b:d7:f0:84:
89:70:1b:f8:49:4a:6c:52:8b:72:0d:2c:ab:ca:06:
c3:83:f8:95:3c:85:72:d7:4e:ce:8d:b8:e4:42:73:
27:f7:8f:5f:76:27:c3:e3:79:06:47:07:73:26:37:
15:7f:69:b4:1a:c6:de:ee:87:a2:96:08:99:a5:a9:
1d:83:06:5d:eb:a5:71:4b:f5:31:ba:6f:fb:40:dc:
08:25:eb:f3:a8:6e:84:d5:b9:08:c1:5a:81:9c:de:
9a:9b:92:bb:87:4f:14:cf:67:94:a2:c6:32:cc:c3:
e8:24:27:f5:00:a2:bd:07:98:f6:00:46:d3:7d:f5:
1f:bb:91:59:3d:44:08:6b:2c:e5:00:ac:e7:43:43:
85:8a:c0:4d:64:34:0e:3a:06:3d:ed:7a:4a:39:0a:
c2:63:12:89:6b:c2:30:61:3f:63:8c:cc:21:ac:c8:
6c:70:39:2f:a8:a1:dc:60:a1:a9:84:61:8f:5e:c4:
b3:09:9c:ab:eb:c6:ca:35:aa:99:13:dd:4d:12:04:
16:9a:33:8c:0d:82:0a:78:9e:ad:0c:6f:3e:44:d4:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:C1:88:A6:C5:C9:6A:45:06:D8:21:50:F7:1B:51:35:DB:38:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DB9A52F6BB11EF80B2FE58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.226.0/24
Signature Algorithm: sha256WithRSAEncryption
25:37:70:64:2c:db:36:61:a9:ec:0c:a7:88:bd:32:90:a2:b1:
a9:8a:27:61:b2:11:19:df:b2:84:d6:5b:d7:23:1e:2a:ff:a5:
b5:90:69:d9:10:25:09:1e:ff:3d:60:52:ca:e9:37:93:21:43:
85:2c:37:19:52:26:bd:72:da:64:bd:16:ec:4b:5f:59:6c:f5:
cc:c5:bd:c4:b0:58:6c:c5:ee:54:d6:23:08:30:f1:67:5d:86:
58:12:67:bd:eb:4e:44:5b:68:75:49:4e:2b:8b:cb:ff:30:99:
35:60:55:a1:52:a0:9a:95:fa:e8:48:78:37:e6:07:30:0d:9b:
d7:a4:1b:a5:42:ae:d2:71:03:af:e8:0f:8d:67:e8:cc:44:5d:
a9:a0:47:5c:55:a8:f1:5b:34:19:51:18:7c:7d:67:ff:6c:80:
d4:29:6b:f8:e9:e3:ad:63:fa:cf:03:c1:e6:78:c2:ca:2c:52:
13:a0:30:44:a3:41:a7:86:98:c4:05:0e:b0:b2:d8:89:2a:d0:
f0:eb:c4:f1:c8:b5:e5:70:2c:26:26:74:a2:60:a7:22:9c:eb:
a4:5f:71:38:cc:ef:bf:2b:2e:14:42:c8:8a:51:f8:57:f4:73:
4c:05:6e:24:aa:9e:da:1b:19:98:28:f8:c2:d3:58:27:7e:ad:
c4:88:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:42:48 2025 by rpki-client