Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FDFBFCAF4F211EF8062A7A1762E951A.roa
File: 8FDFBFCAF4F211EF8062A7A1762E951A.roa (raw, json)
Hash identifier: K9vFjjjqVxdJbRekPuzJhRuse8N2uXt0MK0XtIUCnac=
Subject key identifier: 37:6A:50:EC:C5:2A:65:5E:50:7C:5A:ED:94:38:C6:62:DB:A7:0D:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016788
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FDFBFCAF4F211EF8062A7A1762E951A.roa
Signing time: Thu 27 Feb 2025 10:06:50 +0000
ROA not before: Thu 27 Feb 2025 10:06:46 +0000
ROA not after: Wed 26 Mar 2025 10:06:46 +0000
asID: 62240
IP address blocks: 154.194.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92040 (0x16788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:06:46 2025 GMT
Not After : Mar 26 10:06:46 2025 GMT
Subject: CN=67c0393a-6917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:e7:a9:c3:9e:de:d8:96:f9:73:f7:59:6e:
e1:fe:4e:f0:d5:ea:e1:3b:81:eb:66:55:59:38:92:
13:27:8e:68:13:7f:c5:88:16:ca:77:74:76:61:d4:
c3:9d:ee:c0:72:ef:ad:8e:68:8d:30:cf:47:69:f6:
72:69:7c:21:aa:ee:05:d7:b1:7f:87:6b:22:74:f4:
ab:41:f7:c4:af:66:ee:da:bf:de:49:e8:e8:99:a6:
4a:ff:a0:ec:7d:3e:92:95:dc:5d:95:32:78:ba:51:
4a:38:13:7a:12:24:d3:7e:a5:7f:15:6b:a0:cb:0d:
73:ce:c2:d5:8a:2e:fd:08:fb:d7:7c:50:b7:3b:a5:
24:e0:24:2f:29:67:03:5d:46:79:df:8e:fd:8b:f5:
ec:6a:52:e9:38:16:7e:5c:e9:cb:1d:05:a8:2f:22:
d2:11:f4:d4:28:a6:70:0d:52:d0:ad:7a:6d:83:e9:
ee:85:25:1d:7c:ef:9a:a0:e0:9a:c2:ed:4c:69:6d:
68:a5:9b:55:5a:17:c7:01:92:1f:2b:4f:12:d9:30:
1e:05:05:ec:cb:d7:61:c8:fe:a6:c0:fe:b0:cc:d0:
29:ad:cc:e2:ba:20:e3:3d:c2:7f:14:99:2c:28:7b:
c0:27:ef:8f:77:07:14:86:31:99:78:1a:e4:14:87:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6A:50:EC:C5:2A:65:5E:50:7C:5A:ED:94:38:C6:62:DB:A7:0D:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FDFBFCAF4F211EF8062A7A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.83.0/24
Signature Algorithm: sha256WithRSAEncryption
42:96:a2:dd:96:2d:52:2d:a9:e7:78:cf:d8:b3:b7:dc:2b:cd:
9d:f1:bc:69:30:91:73:a3:f0:ab:52:8e:62:5e:d1:66:d5:b0:
ca:d7:e5:c0:ca:12:0d:df:6e:73:f0:16:94:9f:68:98:da:0c:
23:7d:f6:f8:59:21:3c:c4:c2:0d:14:4f:a1:e1:d5:3d:0d:83:
a6:01:39:90:1b:a1:9c:01:33:7d:e4:86:75:58:fb:1e:92:cc:
68:62:d9:35:47:54:11:c0:cb:96:ca:63:bf:f4:d0:ee:4d:8e:
8a:69:64:20:a1:b3:5a:04:59:4b:db:20:e2:76:02:4f:df:c7:
9f:8d:8d:c4:52:8e:6b:d1:cf:60:b3:ae:14:56:a6:5b:87:a8:
f6:f7:4f:4c:39:b0:23:1e:33:c3:43:c9:f1:b7:16:0f:c3:78:
06:52:7d:0f:51:89:14:eb:0d:be:32:28:57:9b:40:56:f9:c5:
fd:d2:3c:66:9a:e0:81:53:46:51:b7:0e:01:c5:ef:4b:e0:ce:
96:f3:30:fd:c3:92:aa:e7:3d:c4:68:9e:df:5a:bb:b8:84:70:
39:c3:d1:09:70:cc:13:0a:d1:84:3c:0b:38:51:7c:bb:cc:3f:
be:48:6a:49:fd:10:0c:a8:36:fe:d5:8e:5a:ec:d5:0f:a2:5b:
e6:4e:2a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:55:39 2025 by rpki-client