Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/844FEE1CF4E511EFB2C59B49762E951A.roa
File: 844FEE1CF4E511EFB2C59B49762E951A.roa (raw, json)
Hash identifier: 2i3uTmkJgt7Tz7u792HGtpUbLdRGT7HT2N0B95VtpTQ=
Subject key identifier: 9F:5C:83:1E:14:70:8A:A5:29:4B:64:CB:0B:28:A4:0C:01:6B:46:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/844FEE1CF4E511EFB2C59B49762E951A.roa
Signing time: Thu 27 Feb 2025 08:33:28 +0000
ROA not before: Thu 27 Feb 2025 08:33:24 +0000
ROA not after: Wed 26 Mar 2025 08:33:24 +0000
asID: 62240
IP address blocks: 154.195.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91887 (0x166ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:33:24 2025 GMT
Not After : Mar 26 08:33:24 2025 GMT
Subject: CN=67c02357-8b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:7f:ff:93:ca:c3:2a:2f:3c:f2:ed:15:fb:
b4:8c:2c:11:48:b3:e0:b3:99:e0:96:56:d8:f6:2c:
68:a0:1e:4e:28:0c:ff:cf:55:dc:4d:d4:6f:a7:e4:
79:80:9a:ed:01:93:8b:81:86:70:7d:1b:1e:3f:6f:
db:14:e5:ae:5c:80:62:2f:d7:4e:47:12:31:88:1f:
1d:bf:e0:da:31:51:1c:10:c6:6b:57:a7:2e:89:f0:
e1:2e:31:8d:6f:00:38:ff:46:92:cb:8a:d0:10:91:
2f:20:af:a6:5f:07:a9:a2:cf:68:79:33:b6:b5:18:
20:b7:49:26:cc:1a:61:fb:8e:6e:c2:0d:30:1e:01:
62:47:76:c4:3c:48:fd:8d:4b:45:16:34:be:98:cd:
e4:7f:e3:4f:05:ff:75:27:d3:47:3e:a9:25:14:de:
98:96:13:64:75:f0:46:2a:5c:8d:47:8b:fe:f7:1b:
ee:3b:36:22:b1:5f:de:78:ad:08:7d:2b:83:7f:dd:
96:89:fb:f2:51:12:37:64:ad:71:b4:68:07:92:b5:
af:f4:bc:3f:0b:49:a5:e2:4b:dd:a0:13:3e:84:79:
72:bd:31:0e:a2:9f:8a:d8:82:3d:d6:eb:e3:77:fe:
21:2f:53:f9:56:e7:51:9f:fe:59:64:bd:0a:4a:19:
15:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:83:1E:14:70:8A:A5:29:4B:64:CB:0B:28:A4:0C:01:6B:46:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/844FEE1CF4E511EFB2C59B49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.186.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:52:d1:7d:07:f9:d7:2a:66:3a:d8:e3:94:6c:de:a1:04:e0:
1f:9d:82:29:53:b5:61:42:8f:a6:3d:46:2a:04:c9:af:85:1f:
2f:87:73:3d:42:6d:a5:bb:5b:f4:76:ce:f1:d5:c9:c5:2b:d7:
bc:3a:d6:5f:04:37:54:02:8d:8a:63:01:ef:b0:e3:3d:11:1f:
9e:3b:94:21:fe:3e:27:f6:8e:79:36:ce:bf:1f:b5:4c:ca:98:
12:eb:77:55:d7:31:a7:22:8f:cf:0f:ec:30:c8:77:39:cc:89:
7f:6b:43:1c:19:7e:36:08:b6:e7:a7:6e:68:4c:14:aa:34:c4:
53:f0:b1:43:90:18:de:10:f2:e5:fa:ad:c9:9b:aa:8a:e2:26:
49:f6:a8:59:37:d6:22:ba:b2:d4:dc:ed:03:66:a6:f5:fe:11:
c7:f8:bf:68:eb:fd:8b:fb:d4:cf:0e:e9:58:22:26:ad:4c:bd:
f0:08:05:54:b3:47:fe:66:e1:89:16:db:be:70:e3:28:44:60:
d3:03:77:90:84:41:98:3e:12:2c:36:4d:ec:b0:54:98:99:92:
e9:35:87:e7:b3:1f:81:19:98:bc:46:b3:9a:39:24:93:4d:ab:
f2:f4:85:ff:09:a6:74:c1:ad:50:b3:80:aa:9f:65:50:8a:9d:
23:28:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:31:52 2025 by rpki-client