Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7A062CF51C11EF8450DDBE762E951A.roa
File: 7D7A062CF51C11EF8450DDBE762E951A.roa (raw, json)
Hash identifier: kIRcQHDxpgorTvEbHmlNQ/L90lyQhg9W0vztez2Wv6k=
Subject key identifier: 47:E3:4E:E5:25:82:6B:3B:A0:42:1B:62:D4:02:E9:80:D6:12:F6:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0168E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7A062CF51C11EF8450DDBE762E951A.roa
Signing time: Thu 27 Feb 2025 15:06:58 +0000
ROA not before: Thu 27 Feb 2025 15:06:55 +0000
ROA not after: Wed 26 Mar 2025 15:06:55 +0000
asID: 62240
IP address blocks: 154.196.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92392 (0x168e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:06:55 2025 GMT
Not After : Mar 26 15:06:55 2025 GMT
Subject: CN=67c07f92-f058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:83:f7:91:5a:1c:e4:cf:76:2c:40:f9:5f:
36:72:28:ac:2c:cc:bf:19:06:19:67:06:c1:cd:f9:
97:be:12:75:8a:da:40:5d:e3:ce:aa:0c:6c:8c:8c:
b3:1f:ad:64:fb:f6:8a:d4:87:c3:f9:71:f6:87:90:
94:84:f7:25:30:d8:f5:b7:56:29:16:15:5a:34:6e:
62:55:c6:e1:99:63:5e:41:9c:2a:29:1a:4a:51:17:
f1:4b:51:b6:31:ad:49:cb:5d:24:c2:d1:b6:0e:cc:
f1:1e:82:39:2f:ff:90:27:18:5e:03:7d:ac:15:b0:
26:66:20:13:41:3f:11:2b:2c:d6:8c:28:3d:3c:e9:
d8:66:2d:ee:1f:ce:10:4b:ac:ee:3b:eb:d4:21:b0:
62:64:bc:27:6d:ec:c7:52:8f:18:2d:db:02:ab:64:
f5:1d:d2:69:83:94:a5:c6:4c:e9:1b:f5:9f:8b:49:
b7:b2:ff:55:3c:03:07:f9:ca:d3:86:1a:5c:d6:fc:
3e:8c:32:4a:0d:10:0b:1a:74:1e:dd:56:97:8c:73:
ec:71:aa:f6:92:31:c2:10:42:e9:79:8d:5e:8e:60:
93:fb:86:94:1a:52:8b:c5:60:4b:53:9e:98:2c:11:
87:bd:12:fa:b6:af:3e:e7:df:f2:2d:fe:58:4a:10:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E3:4E:E5:25:82:6B:3B:A0:42:1B:62:D4:02:E9:80:D6:12:F6:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7A062CF51C11EF8450DDBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.59.0/24
Signature Algorithm: sha256WithRSAEncryption
73:52:28:5f:eb:e2:35:4f:5d:7c:65:07:e9:bd:79:cb:b7:98:
45:1f:9b:58:2b:ed:1b:d8:dc:d7:d9:bc:96:02:2f:39:4b:8c:
34:19:46:df:57:f6:d6:49:60:05:95:12:a8:cc:d9:97:e4:64:
fc:3a:33:80:01:09:c4:ce:ed:61:85:e5:d2:bb:50:e8:9d:a0:
44:9d:00:ae:40:63:d8:92:a7:f7:71:50:b6:24:61:80:3d:25:
b7:dc:b6:4c:14:a6:db:2e:a6:36:ef:66:61:65:2f:ca:ef:cc:
62:10:a6:78:91:24:72:32:b9:ef:ab:15:69:5d:c5:78:4f:a4:
d3:06:c5:a8:8f:25:39:4c:31:da:c0:e2:00:33:e3:e3:c4:ae:
cd:a4:44:09:be:d1:bc:c5:cf:3d:5c:eb:8d:58:f1:63:1e:01:
be:a3:35:b6:45:04:c8:9a:60:23:e4:46:cd:34:f2:b5:05:17:
88:66:a8:05:2c:3e:1e:d2:04:f9:ff:4a:da:55:b4:e4:29:a3:
8f:01:ff:93:5c:3d:77:c8:1d:a9:ab:7b:21:15:c3:0a:b5:fe:
74:a4:53:0f:e2:32:6a:74:eb:e2:6c:c8:ee:db:66:b9:dd:e5:
71:ac:99:03:fb:c1:38:e3:52:bb:d5:ac:ec:83:44:fe:75:e4:
f8:40:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:48:10 2025 by rpki-client