Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81F3507EF1D811EF9B5CB27C762E951A.roa
File: 81F3507EF1D811EF9B5CB27C762E951A.roa (raw, json)
Hash identifier: 5wipj/4jvTCfFoFG5UU8hVyVlow7zZl+ZC7zzyXo+Zo=
Subject key identifier: 4A:97:59:7B:52:F7:72:39:4C:89:B1:5D:C9:A6:32:1E:EC:D9:E0:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81F3507EF1D811EF9B5CB27C762E951A.roa
Signing time: Sun 23 Feb 2025 11:22:47 +0000
ROA not before: Sun 23 Feb 2025 11:22:37 +0000
ROA not after: Wed 26 Mar 2025 11:22:37 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88917 (0x15b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 11:22:37 2025 GMT
Not After : Mar 26 11:22:37 2025 GMT
Subject: CN=67bb0507-f833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f5:93:07:4b:6c:e1:ad:a4:8c:9b:5f:08:b4:
4a:80:22:3b:3b:0c:96:b7:18:3b:d1:a2:55:e4:fa:
49:cc:1f:38:ac:84:e0:8e:3d:9e:00:bc:61:62:5a:
49:57:5e:1e:2b:d6:0f:24:5a:24:9f:e9:6e:77:ce:
65:b2:ab:4a:4b:d6:d0:ba:fc:5b:e8:68:56:a2:0c:
4b:9b:da:c0:37:4c:ac:74:91:ae:02:16:5b:92:96:
6b:93:5c:ee:02:69:43:4d:be:36:e9:57:29:4b:54:
dd:3f:f2:87:51:af:ad:01:4a:c8:71:fc:b9:8f:9e:
69:78:46:28:ff:7c:0d:54:b3:f8:f2:f6:af:2c:a0:
90:b0:b8:5f:00:39:ff:3e:81:02:08:99:87:dd:89:
1b:18:e3:12:a2:20:f9:42:2b:f3:19:15:da:2c:52:
3f:5a:3c:9d:0c:b1:69:55:9b:e5:61:20:8f:34:ad:
bd:30:00:66:8c:8c:5a:6c:11:47:c2:93:3a:69:74:
39:c6:7d:54:10:d9:aa:99:09:22:3a:23:82:24:b7:
65:1d:5c:8a:f3:ba:ed:29:4b:9b:39:4e:78:bb:8e:
94:75:2c:82:d2:dd:ed:5a:23:fb:fe:ac:43:28:2e:
60:70:c6:68:99:5f:50:b9:6e:25:d4:be:5f:3e:1b:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:97:59:7B:52:F7:72:39:4C:89:B1:5D:C9:A6:32:1E:EC:D9:E0:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81F3507EF1D811EF9B5CB27C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
Signature Algorithm: sha256WithRSAEncryption
57:ea:94:c4:2e:9d:f9:3a:7a:05:1f:56:e6:40:80:08:95:28:
e6:b8:23:56:d2:27:d4:25:86:8b:b1:eb:5a:37:8a:65:63:90:
91:1d:27:85:b2:48:4f:69:94:e8:73:39:29:d5:47:2e:01:e4:
66:2e:c8:e3:d0:ca:2a:b2:58:89:4c:16:b1:a9:2e:e4:2f:fe:
ff:e3:e6:07:5e:a5:f6:7f:bb:0e:42:01:17:c2:42:59:0e:ab:
18:41:ba:01:45:92:56:ab:87:3c:7c:41:ed:59:11:ea:e8:da:
b6:55:62:4b:69:ff:85:10:b0:50:b4:00:f1:fd:26:65:25:10:
85:d4:3d:86:88:1f:93:34:3e:c1:e5:4e:32:c9:82:06:19:90:
05:1c:26:b6:52:fe:64:a3:ec:9d:06:5c:c4:76:ba:98:14:ee:
72:3b:78:c8:f2:46:ac:9b:45:e3:f0:99:a0:79:15:8d:86:0a:
c5:b6:64:af:32:0c:7a:9e:01:72:d1:73:43:ee:8e:ee:bb:f6:
f8:53:59:b6:8d:d7:30:10:ef:ae:bc:88:db:d5:5f:86:ed:0d:
02:ca:fb:83:bc:bf:de:f1:3d:cf:54:c8:0e:7a:69:f7:96:ee:
9b:fe:79:69:b5:99:c0:53:0d:54:f2:13:6a:94:d1:c4:49:e5:
89:ff:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:11 2025 by rpki-client