Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88BA64D2F61B11EF85DD9C8D762E951A.roa
File: 88BA64D2F61B11EF85DD9C8D762E951A.roa (raw, json)
Hash identifier: M3ZNAiB9n/tbr/KJb8v3l/lMernBzHvRp3bP0U2Mmo8=
Subject key identifier: 38:E6:A9:8A:B7:2C:A6:03:6A:71:C1:E5:C1:4C:BD:04:FB:91:F2:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88BA64D2F61B11EF85DD9C8D762E951A.roa
Signing time: Fri 28 Feb 2025 21:32:39 +0000
ROA not before: Fri 28 Feb 2025 21:32:35 +0000
ROA not after: Wed 26 Mar 2025 21:32:35 +0000
asID: 62240
IP address blocks: 154.196.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93259 (0x16c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 21:32:35 2025 GMT
Not After : Mar 26 21:32:35 2025 GMT
Subject: CN=67c22b77-b0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a2:8c:8b:4e:fe:9e:4b:b9:29:45:e1:cc:e1:
42:85:70:1c:5a:4f:d4:0d:d6:7b:ed:53:f1:ee:a1:
6f:5e:6d:0c:dd:59:9e:c8:88:2c:40:f1:cc:aa:b1:
3b:b7:4d:1d:14:f6:2b:4d:4e:6d:b6:46:30:8f:3e:
57:e0:88:93:df:90:a4:fb:3e:47:97:72:78:af:98:
14:83:56:6e:11:55:cd:a7:98:70:fb:16:79:6c:e8:
73:bc:69:4c:ce:3c:3e:0e:32:d0:6e:63:00:ac:9e:
41:9b:18:71:98:d2:c9:94:08:bc:92:3d:1e:3d:f5:
5c:09:1e:bb:ce:8a:a0:0b:0a:99:73:a3:68:49:3c:
a1:c8:29:9e:55:0f:c2:d3:4d:6e:5e:fd:b3:e4:13:
d3:28:c0:24:40:c4:db:5a:2c:62:4e:7f:f5:16:0b:
78:71:b1:e6:30:b8:9c:b5:ee:aa:3a:41:db:0b:c5:
0c:55:f9:12:67:10:77:1d:e1:19:f2:95:5a:be:3f:
ef:60:f8:3f:3d:3b:0a:4d:43:7d:47:1a:74:86:52:
c3:ea:12:e8:d3:d3:97:19:ce:d8:c8:f1:40:d5:b2:
eb:7a:ce:dd:7b:99:c7:d6:19:56:5e:c0:0a:1f:a4:
23:c6:ed:46:59:44:36:cf:a7:60:c6:ec:1f:87:34:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:A9:8A:B7:2C:A6:03:6A:71:C1:E5:C1:4C:BD:04:FB:91:F2:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88BA64D2F61B11EF85DD9C8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.68.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1f:e4:16:7f:d7:b5:35:2e:62:b7:23:37:92:99:0b:a8:80:
b9:03:d8:e9:9f:54:68:d7:49:20:7f:dc:ef:71:79:03:1f:c4:
52:33:0c:89:d8:39:d5:95:95:c5:dc:32:43:c7:a0:9f:e0:e8:
50:5f:22:bf:b6:c2:c7:31:9a:1e:63:9f:05:76:6c:62:52:9f:
f5:5c:f3:19:d1:08:ca:7e:b4:92:d8:fa:61:fa:1e:46:b9:04:
70:7d:cd:54:74:f1:3e:1d:8b:d6:35:c8:2f:09:52:70:22:be:
7e:e0:64:12:bb:f7:41:3d:84:6e:ed:b9:5c:07:db:79:f6:9b:
25:ac:70:c1:59:70:85:c2:4e:0e:b4:ca:4f:f6:40:7e:6f:9a:
af:43:bf:91:0d:48:86:c4:53:97:4b:b7:60:34:a3:44:60:f8:
ac:76:58:71:ff:ba:e8:7d:56:2f:7e:44:49:d0:ca:d2:9f:51:
68:46:86:01:cc:98:9c:1c:fb:f9:f9:a7:35:80:de:2b:50:f1:
41:43:15:89:1f:0c:45:8f:4f:0c:70:1c:14:e3:9d:45:87:89:
55:4d:7f:0a:de:fc:40:3b:1b:72:e5:bb:63:f1:98:c3:19:b5:
6a:7e:35:30:8c:e5:03:3a:c6:58:43:cd:fa:44:d2:fc:3e:87:
b4:29:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:23:15 2025 by rpki-client