Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84FF2DB8F2CF11EF984DDD69762E951A.roa
File: 84FF2DB8F2CF11EF984DDD69762E951A.roa (raw, json)
Hash identifier: iA/Nldhwfa37XMiN8CbALJblQvnumrAz+OPvgUTEf0I=
Subject key identifier: 3A:9B:B1:5B:FE:15:DA:1C:D5:BF:FB:D0:B4:75:3F:96:D6:13:55:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84FF2DB8F2CF11EF984DDD69762E951A.roa
Signing time: Mon 24 Feb 2025 16:50:57 +0000
ROA not before: Mon 24 Feb 2025 16:50:54 +0000
ROA not after: Sat 29 Mar 2025 16:50:54 +0000
asID: 203020
IP address blocks: 154.223.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89220 (0x15c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 16:50:54 2025 GMT
Not After : Mar 29 16:50:54 2025 GMT
Subject: CN=67bca371-96a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:83:2f:9d:5b:2b:60:1c:ba:f5:5a:6c:9e:
41:b6:31:1e:1e:6f:c2:03:7b:8e:e7:06:3a:b5:ef:
95:7c:1a:94:63:2f:df:48:20:3d:41:d6:81:ff:0b:
4c:d9:c7:83:74:02:0f:25:5d:85:0d:d2:0d:0b:79:
9d:1a:39:31:92:c6:f4:a4:df:96:d5:f1:f4:a0:01:
9a:14:98:15:36:24:7e:ea:61:27:e8:62:74:de:70:
a4:d3:86:a9:b1:22:92:00:c1:12:60:ed:f9:3f:29:
07:d5:78:3b:c6:cb:fc:ab:81:53:8d:81:89:a0:14:
4f:2e:60:fd:ec:1e:43:04:3c:52:a8:e4:57:a9:79:
90:b5:1d:fd:7d:cc:bd:1d:34:c1:26:ef:50:e9:20:
89:5a:6a:0f:b2:23:33:82:cd:2c:5b:c3:e4:73:c5:
ab:f3:fc:9d:f2:f0:49:61:66:d5:0f:96:f0:7e:38:
5e:60:5f:85:a8:bf:15:8a:84:d5:57:20:0f:3e:e1:
fc:7c:af:d6:79:9a:8a:cb:8d:fb:6f:62:91:3b:8a:
f8:66:44:b8:a6:32:df:53:35:73:2f:7c:db:ec:51:
8a:38:0d:d6:c7:db:61:89:60:7d:25:e9:3d:21:1e:
00:6a:59:01:6a:9a:c9:2d:15:2e:d0:3a:19:ed:46:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9B:B1:5B:FE:15:DA:1C:D5:BF:FB:D0:B4:75:3F:96:D6:13:55:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84FF2DB8F2CF11EF984DDD69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.187.0/24
Signature Algorithm: sha256WithRSAEncryption
68:84:7c:95:95:b2:a7:82:e9:25:e1:a4:91:91:2f:68:7f:3a:
52:ea:63:c2:d6:a8:ec:52:d0:41:6b:dd:20:2b:10:14:1e:9d:
63:00:5b:4b:74:63:e5:7a:6b:71:07:b3:4f:9d:e7:77:e1:01:
d0:2d:08:24:0f:ee:49:05:5c:db:8b:dc:53:f0:06:13:70:03:
52:a3:ee:05:c8:91:b7:ff:fd:ae:0f:e4:a3:6f:58:39:21:4c:
62:bf:aa:0e:fc:6f:db:cf:d1:86:2f:87:ea:6b:a2:e1:93:d5:
8d:a8:d3:4f:0c:08:bd:8f:16:1f:cc:3d:61:c4:7c:f0:ec:b7:
cb:40:5f:0b:9d:34:59:75:2b:4c:6b:9e:ae:2a:0f:6c:72:a2:
6f:7c:12:2b:44:c2:bb:0f:b9:14:af:3a:81:44:84:6a:99:09:
f8:f7:96:cf:b6:c6:0d:94:a2:ef:ca:be:7a:c3:81:e7:b2:e3:
3d:da:bb:2d:db:36:df:a2:2b:69:68:8c:3e:c5:49:f9:dd:af:
15:7d:e6:86:14:3a:84:b2:4e:77:68:9e:b9:b8:b6:67:fd:15:
e0:b6:7f:ba:6f:42:f2:c2:9e:7d:d1:f8:28:01:f3:b7:fb:db:
69:42:dc:dc:29:6f:95:a0:2d:41:14:43:b7:e9:30:05:d2:ce:
5c:74:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:32 2025 by rpki-client