Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B1FDCCCF4E311EFA1E0BBB9762E951A.roa
File: 8B1FDCCCF4E311EFA1E0BBB9762E951A.roa (raw, json)
Hash identifier: xXq4TN1IoTd3Mj1FisNMKof1oDLScOFZleib9T8UvFE=
Subject key identifier: E5:88:BE:22:37:60:60:E5:C2:7F:09:62:67:92:EE:68:E4:20:F6:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B1FDCCCF4E311EFA1E0BBB9762E951A.roa
Signing time: Thu 27 Feb 2025 08:19:20 +0000
ROA not before: Thu 27 Feb 2025 08:19:16 +0000
ROA not after: Wed 26 Mar 2025 08:19:16 +0000
asID: 62240
IP address blocks: 154.195.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91867 (0x166db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:19:16 2025 GMT
Not After : Mar 26 08:19:16 2025 GMT
Subject: CN=67c02008-631b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:40:81:24:75:83:64:4b:69:ab:e7:c8:1b:
b0:5b:b1:7f:cb:a0:0c:c8:9f:51:40:be:62:1d:fe:
1f:a4:1d:97:98:c1:b6:4c:48:a5:3c:0d:0f:ea:37:
9e:71:77:4b:ec:10:4c:98:71:82:ab:13:16:dd:2d:
bf:5f:fc:7e:ba:28:b5:cd:10:f3:23:ae:ba:2b:2e:
1f:ed:a3:29:d5:7d:79:e2:03:1c:c8:b3:58:27:f0:
a9:63:a2:5a:8c:a8:66:87:12:98:e0:06:6b:66:9f:
32:7e:88:99:05:cf:6b:5d:12:9f:10:cf:0c:a6:66:
99:68:8e:ab:38:fd:01:b9:d3:1b:1b:43:19:e8:57:
ad:39:4d:a9:90:fb:df:54:8b:e6:53:57:00:16:e6:
0b:65:13:1f:ad:38:00:7d:eb:5b:c4:00:f4:f5:ed:
dd:53:c8:3b:d2:7f:9e:64:61:e6:c5:a7:78:bc:31:
25:d9:d0:07:cc:1d:5d:f3:83:9f:e3:00:a2:75:f2:
89:db:de:68:aa:2b:97:b6:60:67:21:4a:7d:18:d4:
78:a0:b6:c0:c2:e4:8d:9d:8b:d5:68:7e:d0:b2:db:
e7:50:35:31:3e:08:06:4e:f2:57:9d:27:d1:4f:3b:
a0:b4:8f:09:70:78:8a:28:8a:bb:5c:bb:5d:98:24:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:88:BE:22:37:60:60:E5:C2:7F:09:62:67:92:EE:68:E4:20:F6:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B1FDCCCF4E311EFA1E0BBB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.181.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1d:a7:4c:39:56:1c:d5:6c:3e:1d:4e:a4:7f:93:57:50:61:
48:e4:0e:af:2a:e7:39:5c:d9:77:90:a1:83:19:0f:69:51:c9:
3c:d1:51:6d:66:96:ab:31:ca:e0:0d:26:62:ba:34:a7:ae:85:
d8:a9:7a:00:c3:7e:cb:06:e8:f9:7a:f7:8f:5c:72:5a:00:e3:
b3:22:6b:92:ab:c2:49:9c:d9:c8:54:6f:5e:e5:93:8c:c4:06:
cd:2d:35:86:65:27:fe:dd:de:4f:f2:9b:90:e1:e0:ea:0b:e4:
a3:1a:e5:c7:6f:71:22:5b:79:ad:d2:06:30:50:60:22:f3:04:
c0:5b:e8:32:7e:5f:83:ed:63:09:73:93:9d:09:ac:ec:4f:8b:
a8:f2:d1:e8:59:0c:b3:5d:19:e5:5a:ef:64:05:46:1e:90:a2:
10:70:34:e2:10:1e:09:9e:8a:54:18:8c:9b:0a:c7:04:be:ef:
82:0a:9d:e4:bf:65:a2:80:14:48:f6:07:fd:83:25:81:37:bc:
22:b3:5f:28:7e:30:62:80:1f:9c:37:30:0f:38:53:a0:5c:a3:
5b:d6:8c:56:4a:1e:85:76:fa:e5:1b:3e:b9:e3:64:9d:59:4e:
71:48:b5:b9:97:de:4c:27:71:0a:f0:2c:eb:56:11:b3:b5:07:
c7:48:e3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:14:00 2025 by rpki-client