Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89DF82C0F29C11EF8F5C4C9F762E951A.roa
File: 89DF82C0F29C11EF8F5C4C9F762E951A.roa (raw, json)
Hash identifier: pr32fe2EXbBXqOReSinldvVM4pxwNI0xVn4PRfN+z8I=
Subject key identifier: E1:C6:F6:38:8B:6D:EE:81:98:0C:5F:E7:83:79:BE:06:A1:48:FE:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015BBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89DF82C0F29C11EF8F5C4C9F762E951A.roa
Signing time: Mon 24 Feb 2025 10:46:01 +0000
ROA not before: Mon 24 Feb 2025 10:45:58 +0000
ROA not after: Wed 26 Mar 2025 10:45:58 +0000
asID: 5065
IP address blocks: 154.94.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89022 (0x15bbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:45:58 2025 GMT
Not After : Mar 26 10:45:58 2025 GMT
Subject: CN=67bc4de9-5af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:ce:76:71:c2:a9:e7:55:ff:42:8c:31:9e:
52:55:cd:89:c3:db:68:4b:20:4a:ce:8d:c7:b3:8c:
3d:d9:50:a7:a6:c6:10:5f:ad:3f:1b:77:3e:c4:d1:
d7:fa:eb:42:40:90:a1:d1:a7:24:90:25:3f:a1:88:
9c:fe:82:4c:9e:01:ae:e2:d5:07:ff:12:88:b7:b6:
9b:de:9b:a2:87:4f:ee:f7:ba:68:3a:4a:27:36:fa:
84:0f:1e:8a:d2:dc:1d:f5:2b:68:70:59:b3:dc:4d:
58:c4:95:e3:e3:27:e9:13:ec:28:25:6c:4c:4f:8f:
f2:04:e5:49:20:db:90:25:a0:ee:33:51:f4:b9:70:
b2:aa:bd:78:33:32:d4:3c:1b:a3:59:33:db:50:ea:
61:5e:bb:49:c9:49:91:fb:53:29:85:d4:d6:cb:68:
ed:8f:43:0d:09:ba:44:53:e7:50:be:1e:e4:60:b5:
ba:61:a5:7e:b1:fd:67:ce:ba:68:aa:cf:d6:00:6c:
c4:01:36:13:1a:9a:23:7d:4d:30:1c:31:7d:27:3b:
ec:86:7a:bf:72:ac:49:cf:e0:75:eb:3c:10:25:44:
73:41:bf:bd:c8:92:36:9b:a6:d5:3a:fe:eb:6a:ff:
87:f6:ae:b8:41:56:4e:6d:5f:62:c9:98:fc:e8:8e:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C6:F6:38:8B:6D:EE:81:98:0C:5F:E7:83:79:BE:06:A1:48:FE:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89DF82C0F29C11EF8F5C4C9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:23:12:07:b8:c6:4c:2c:e4:c2:ef:b5:de:83:da:ce:2c:bc:
ea:8c:e1:b7:7a:99:7f:d8:91:e9:71:aa:ab:f4:a5:84:cd:1f:
73:e6:1a:a9:e5:42:72:20:e1:09:33:5d:ae:44:c5:48:c4:9e:
aa:1e:bb:07:69:47:1d:1f:93:2f:6f:52:5f:b7:7a:58:18:ec:
c3:39:1a:66:1f:ba:4c:e8:0f:db:c1:f4:07:c2:75:ba:a0:ba:
f0:a8:b9:3f:d9:2f:3f:91:f2:a6:71:57:ee:9d:6c:ef:0e:17:
e0:09:86:d4:6b:5e:85:1c:18:31:f7:9d:bd:c9:1a:e4:ff:53:
89:dc:39:d4:e3:12:c4:98:61:87:fd:6a:34:94:66:40:aa:2e:
d8:4e:3f:1e:83:99:79:17:c7:be:40:86:c8:3e:df:c3:d4:d3:
50:0a:22:6c:7b:ee:7a:ac:20:38:4a:94:b0:d5:b5:03:b8:d0:
45:c8:e6:20:16:42:a2:9d:61:94:c8:e8:6b:7b:37:e4:52:ee:
55:9d:5a:95:87:df:57:d1:3d:5c:3d:b8:4c:c9:7b:d1:e2:01:
00:28:eb:e9:66:91:8a:e5:08:ce:d5:f3:9c:da:43:38:78:b7:
71:ff:d5:a5:2c:4d:90:c3:17:f2:cd:45:2c:f1:59:8f:dd:42:
2b:b3:2b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:57:34 2025 by rpki-client