Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90AC4A02F5E411EF8026769A762E951A.roa
File: 90AC4A02F5E411EF8026769A762E951A.roa (raw, json)
Hash identifier: emTvS+T2dwBo5XREVdrL9G1Na0ln74yCQyF5diwkHbk=
Subject key identifier: CD:69:D8:41:29:E7:32:CB:78:18:2A:B3:B9:00:4F:F2:AA:CB:7B:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90AC4A02F5E411EF8026769A762E951A.roa
Signing time: Fri 28 Feb 2025 14:59:10 +0000
ROA not before: Fri 28 Feb 2025 14:59:06 +0000
ROA not after: Wed 26 Mar 2025 14:59:06 +0000
asID: 62240
IP address blocks: 154.194.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93063 (0x16b87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 14:59:06 2025 GMT
Not After : Mar 26 14:59:06 2025 GMT
Subject: CN=67c1cf3e-8ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d9:da:f2:4b:2b:25:e6:d3:5b:57:f8:e3:7a:
2f:2e:3f:e0:a4:70:fb:25:43:3b:ca:53:9a:a8:c2:
67:c5:81:18:fc:85:d1:9b:4c:af:ad:6d:c0:2b:0b:
f1:2f:9f:4d:0d:80:e2:12:39:d0:19:d9:f9:9c:8b:
b8:c7:22:70:77:2c:4d:14:a9:84:c1:ab:5b:50:91:
cf:f3:60:39:de:72:4d:c3:63:a9:4f:12:dd:57:73:
b8:ae:12:eb:29:da:3f:22:96:5c:9b:53:aa:13:58:
c0:ab:bb:ea:bf:18:2f:a0:08:eb:8d:0c:48:c3:da:
c1:1f:77:0c:dd:49:48:7f:60:47:18:bd:4e:8a:ad:
3e:de:93:fe:dc:dc:70:f5:0a:47:c0:f2:f5:62:4d:
73:00:d4:bf:22:39:7f:0c:30:55:8e:2b:e5:8a:6d:
a0:2f:68:e2:a5:25:9e:76:4e:2c:9c:ad:23:82:6c:
75:bd:cd:bf:bc:f8:79:a3:db:d1:95:e7:e5:b0:fe:
ef:f8:fc:c0:97:9f:ad:e5:bc:f4:11:0a:f8:2f:c4:
0f:24:dd:b6:d1:91:0d:15:18:59:9b:59:df:92:1d:
c1:0b:b3:4d:f9:06:20:67:aa:fc:37:f5:ae:89:81:
3f:88:52:07:80:57:f5:6e:df:ca:07:b9:2f:13:05:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:69:D8:41:29:E7:32:CB:78:18:2A:B3:B9:00:4F:F2:AA:CB:7B:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90AC4A02F5E411EF8026769A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.93.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b2:3e:24:ff:ea:7c:fa:f7:32:1b:7c:58:19:20:2f:87:5a:
2a:4c:49:bd:5c:38:d1:b2:52:7c:9e:93:2e:26:2f:6d:8b:20:
72:5d:dc:0e:a4:6b:49:1a:a1:5b:c2:e7:ed:fa:b5:3b:7c:35:
bc:3c:1e:b2:79:ea:e4:75:a6:94:d0:28:18:78:ed:4f:d6:b7:
e8:43:61:97:9e:69:03:8d:92:06:84:c2:a7:ea:6a:92:5f:fe:
91:44:59:a2:c1:2b:c2:25:fe:8c:6a:47:05:25:48:ee:46:e5:
09:58:44:f4:7f:c7:53:9d:31:d9:99:0f:63:f0:e6:ce:1d:f2:
ef:68:55:4e:fa:6f:85:b6:94:30:bc:3c:11:2f:75:d0:43:08:
dc:e4:8d:9d:a8:56:be:d9:ea:6e:eb:a5:bd:62:9d:ba:22:9c:
9e:68:16:28:14:50:99:2f:4b:d2:1f:d9:2a:d6:1a:36:90:49:
a0:2a:c8:b1:02:fe:fb:14:32:a2:fb:75:80:23:56:ad:15:c6:
84:41:ca:c2:8f:fc:28:63:5c:7f:38:ac:d1:a9:7c:e4:6d:b1:
84:8a:e7:86:5d:1b:b2:a3:9d:42:df:89:11:63:18:2b:64:c8:
47:d3:5a:f9:30:c8:5b:46:d5:8e:72:c0:42:bd:35:cb:c9:1a:
33:93:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:09:29 2025 by rpki-client