Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8120C0F0FF2A11EFB5845395762E951A.roa
File: 8120C0F0FF2A11EFB5845395762E951A.roa (raw, json)
Hash identifier: PfgnXns2XNX+0isnlqjcGurgmNSf41FUfuvRSL11iCM=
Subject key identifier: 73:60:10:D6:3E:B9:ED:85:40:A0:D5:87:A1:13:C5:46:DF:74:9B:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8120C0F0FF2A11EFB5845395762E951A.roa
Signing time: Wed 12 Mar 2025 10:12:29 +0000
ROA not before: Wed 12 Mar 2025 10:12:25 +0000
ROA not after: Mon 31 Mar 2025 10:12:25 +0000
asID: 7018
IP address blocks: 154.195.36.0/22 maxlen: 24
154.195.40.0/23 maxlen: 24
154.195.43.0/24 maxlen: 24
154.195.47.0/24 maxlen: 24
154.195.48.0/20 maxlen: 24
154.198.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95199 (0x173df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 10:12:25 2025 GMT
Not After : Mar 31 10:12:25 2025 GMT
Subject: CN=67d15e0d-3e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:03:3b:b8:1e:46:a6:6d:99:51:6c:b6:ac:
56:30:90:e2:c0:d6:db:be:d9:85:61:9b:e9:a8:da:
cb:ed:d8:ed:14:7e:2b:3f:d6:70:4a:44:25:c7:0c:
00:3d:39:49:a9:5c:e2:36:2d:af:cb:58:46:6e:a5:
15:9e:8d:c4:22:f0:85:8e:da:a1:7c:84:0e:9f:31:
d2:2b:72:84:cd:dd:a2:38:87:df:bc:6f:ea:ae:b7:
29:ef:a2:4a:5c:7b:2f:3d:5e:7a:b5:24:f6:e5:72:
18:62:a9:00:9b:3a:27:ad:a1:76:f3:ab:cd:17:09:
0c:e2:21:97:fe:a6:a1:2a:fa:59:79:3c:af:a7:bc:
b2:80:61:68:fd:18:d6:a4:b6:0f:4c:27:d7:57:5e:
17:c4:79:37:da:8a:dc:95:4a:1f:08:25:ed:43:aa:
bc:97:c3:f5:45:98:e0:c5:0e:49:05:61:59:11:03:
9c:5f:31:08:a6:41:bb:70:3c:5d:82:cf:4b:67:db:
ab:fb:a5:5c:48:d2:af:2d:40:63:d9:81:37:17:ea:
bf:81:15:71:e8:45:a6:b2:1b:58:24:33:30:4f:4a:
4b:84:0d:a8:c6:68:b3:bd:05:17:4a:c6:ee:18:ff:
92:58:e5:05:fe:f7:81:d7:e2:af:f5:b3:38:cd:0a:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:60:10:D6:3E:B9:ED:85:40:A0:D5:87:A1:13:C5:46:DF:74:9B:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8120C0F0FF2A11EFB5845395762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.36.0-154.195.41.255
154.195.43.0/24
154.195.47.0-154.195.63.255
154.198.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:8b:8d:a8:d6:cc:63:31:6e:01:94:4b:87:df:fc:25:34:a6:
7c:ff:5a:36:e7:99:2a:11:61:3d:d4:59:55:fb:29:e7:83:de:
78:53:0f:f3:11:0f:17:ac:a0:71:7e:c3:22:42:e5:e4:3d:55:
66:1c:56:e3:77:fd:5c:6e:70:88:b5:e5:df:e6:1d:14:cd:2c:
8d:a3:4a:09:e9:a5:32:10:11:d9:23:3d:2c:d3:8f:09:3f:59:
f0:17:7e:fe:c6:a0:82:6d:65:6c:4d:c4:9a:b0:52:18:4c:5b:
bb:29:73:bb:80:c2:3e:e2:ec:73:e6:aa:f5:6d:58:3d:bd:f9:
0b:60:8b:88:e6:8c:1e:cd:ce:54:3f:4f:d2:b4:57:d0:85:1c:
13:80:a3:84:84:c4:2a:04:b8:cb:98:26:37:cb:65:86:e4:f8:
9b:78:7a:44:2b:ce:08:4d:da:d4:e5:9a:92:75:78:4e:8d:e5:
f3:f9:1f:fd:f2:55:bc:8f:ca:29:a3:dd:f4:d8:52:e9:41:e8:
1d:91:61:97:9d:44:1e:4d:be:9c:59:38:72:ad:d7:1c:ca:c2:
5f:08:02:ba:53:bd:fd:1b:d7:8f:10:62:d4:cb:5e:33:63:53:
4d:68:ac:c0:e8:a8:57:1d:56:f5:6e:28:65:0f:cb:50:24:a5:
0c:cf:2e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:51:59 2025 by rpki-client