Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916ACD8EF69211EFA3075045762E951A.roa
File: 916ACD8EF69211EFA3075045762E951A.roa (raw, json)
Hash identifier: cZ4LGVC2nmeVObLt1VRZBQ6Lz3w+lbDVkdxnI5W2zVk=
Subject key identifier: 6C:6F:98:5B:0C:07:2D:4A:1F:AF:F9:64:AA:54:74:E1:8C:69:90:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916ACD8EF69211EFA3075045762E951A.roa
Signing time: Sat 01 Mar 2025 11:44:44 +0000
ROA not before: Sat 01 Mar 2025 11:44:40 +0000
ROA not after: Mon 31 Mar 2025 11:44:40 +0000
asID: 202656
IP address blocks: 154.221.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93721 (0x16e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 11:44:40 2025 GMT
Not After : Mar 31 11:44:40 2025 GMT
Subject: CN=67c2f32c-94a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:55:9f:f2:3b:90:fe:31:3c:c3:2e:89:c3:
cd:bf:4d:fe:8a:4c:2d:11:f7:6e:0e:72:f8:3a:09:
53:e7:6c:b0:aa:c9:46:d0:fb:6a:3b:c4:26:e3:b5:
fd:e3:91:d3:5c:a6:b8:a1:c8:75:c7:2b:9b:91:c4:
30:1a:39:8b:cd:29:3f:fe:3c:ca:02:bd:7d:5c:16:
2e:bf:f2:7f:ed:9f:91:31:c8:4b:26:28:c0:78:67:
fa:88:90:87:f7:25:1f:99:b7:31:23:c2:d9:73:79:
a4:f0:4d:62:5c:be:91:9d:89:09:c5:38:b2:9d:8e:
a3:76:7d:0a:62:25:4a:01:97:ba:f1:1f:83:39:67:
e1:69:fe:7e:02:3b:8b:d5:5e:15:a1:98:14:e2:33:
e7:1a:fc:ee:6b:a8:a3:de:ed:dd:a5:e5:83:54:d9:
84:07:46:66:23:18:35:05:f9:af:9d:98:0d:e1:07:
12:cd:16:86:1a:9c:3c:82:90:95:66:c5:84:ea:8a:
09:b1:9a:47:44:77:37:fd:6e:0d:9e:60:27:e7:31:
a1:59:fd:5f:7d:0d:f1:d1:48:a9:08:8b:36:3f:9e:
87:46:c8:21:1e:1d:b5:23:c3:ad:df:11:f3:cc:9b:
4e:76:65:0a:97:ca:f7:24:19:5d:d6:e6:58:e4:7f:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6F:98:5B:0C:07:2D:4A:1F:AF:F9:64:AA:54:74:E1:8C:69:90:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916ACD8EF69211EFA3075045762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.56.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ff:f6:c7:b4:aa:89:5a:75:02:38:03:85:7e:23:42:13:c6:
a0:b6:b1:a7:6c:a3:00:ad:80:b3:10:bc:ea:08:e9:34:67:a1:
ee:4d:3a:ef:2f:b6:1e:ff:07:81:7c:47:e5:bb:39:6f:c6:32:
1a:0e:c8:c3:93:b5:26:a3:48:41:1c:00:ab:35:6e:17:30:69:
46:60:79:8f:8f:c9:59:24:ef:69:4f:3e:50:7e:fc:6e:27:9f:
e5:ab:ca:ae:3c:45:7d:cd:ba:d9:6d:4f:84:c1:34:22:bf:b2:
39:23:95:a7:53:db:ad:3e:45:4d:b5:76:29:8f:e9:77:0a:b6:
77:4a:f2:80:7c:41:cf:16:7a:cf:23:d4:49:16:bb:d9:64:f7:
22:bb:38:5b:90:3b:7c:2c:74:66:d8:26:aa:e0:48:3e:8e:8c:
a9:62:39:f5:5a:9e:a8:70:d2:8a:25:4c:5c:e6:c8:75:6a:90:
37:1f:4e:e5:22:60:4e:08:a0:ea:25:84:1b:41:c1:46:0d:84:
a6:32:80:44:29:a7:de:4d:25:92:cf:14:5b:de:1d:f2:09:70:
ac:b8:8d:11:6a:d4:f6:c6:01:6e:e6:d0:b3:01:50:5b:12:ff:
31:00:6a:b1:2b:c9:33:7c:c4:fe:b7:ea:e6:22:48:f9:d1:1a:
f3:8e:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:30:30 2025 by rpki-client