Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920890FEF4EF11EFAF6B5C8B762E951A.roa
File: 920890FEF4EF11EFAF6B5C8B762E951A.roa (raw, json)
Hash identifier: XnfaC/nD3XsqEGo37PqSdh1lelk2uvKV8GSJn1fcJxg=
Subject key identifier: AC:1A:AB:9F:DB:1F:3F:3D:15:12:EE:CB:EC:AA:34:38:16:0E:97:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016759
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920890FEF4EF11EFAF6B5C8B762E951A.roa
Signing time: Thu 27 Feb 2025 09:45:26 +0000
ROA not before: Thu 27 Feb 2025 09:45:21 +0000
ROA not after: Wed 26 Mar 2025 09:45:21 +0000
asID: 62240
IP address blocks: 154.196.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91993 (0x16759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:45:21 2025 GMT
Not After : Mar 26 09:45:21 2025 GMT
Subject: CN=67c03435-8f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:01:79:5d:a0:a2:bf:2b:7d:3c:07:f2:87:
a7:b5:e7:d8:ba:46:e9:b4:54:cf:86:73:52:9c:11:
a0:0e:b4:7f:5a:4e:a9:56:ca:35:fa:ee:81:a9:bb:
a3:f1:d1:8e:f3:2b:c9:e6:1e:50:80:cc:62:58:0a:
f7:ad:4b:59:8d:87:3b:7c:f4:c7:cf:7a:00:e5:85:
9c:ac:b4:a4:38:4b:9c:a9:29:b5:a8:27:7d:8e:64:
03:37:17:d4:34:dd:83:0d:3e:1d:43:0d:09:35:96:
cd:9c:f9:dd:c8:75:e7:96:8a:f4:e2:df:38:aa:15:
6d:11:59:3c:71:a4:c8:50:61:5e:95:27:9e:6d:86:
c8:24:e3:52:67:5c:6d:a9:3e:44:9f:2d:82:62:a9:
e3:41:bb:5d:7b:c8:ce:e4:e0:46:69:98:82:3b:8c:
16:c9:47:bb:04:d7:49:18:50:43:b6:bd:cc:03:ac:
32:1b:35:1b:32:f5:c5:72:52:2d:46:bc:31:08:bc:
64:6c:0f:2c:83:81:37:00:fa:fa:ff:92:80:4e:fe:
0c:f6:e0:48:db:75:64:0a:62:25:d4:07:f5:bc:ef:
73:87:95:46:b8:12:86:3f:32:f2:79:c1:6a:11:1b:
28:13:39:70:99:51:cb:19:01:76:e3:dc:13:45:36:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:AB:9F:DB:1F:3F:3D:15:12:EE:CB:EC:AA:34:38:16:0E:97:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920890FEF4EF11EFAF6B5C8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d5:e0:99:c9:50:7c:27:11:d7:1b:4a:4e:bb:8c:ff:47:ec:
bf:a9:db:d9:8e:43:48:d6:2c:2f:3c:4d:ec:83:15:c5:e1:e8:
a1:3c:70:46:ec:ca:e1:0d:67:69:aa:73:a7:df:70:0e:cd:b8:
a8:d6:5a:ad:a3:be:ea:31:2d:05:5b:5e:2f:66:02:94:76:fc:
90:4e:55:bf:3a:85:0b:6f:0f:bf:ed:5b:87:bc:42:65:62:f9:
7f:d6:c2:c9:4a:59:e8:0b:8d:7a:7e:77:55:3c:f5:53:44:42:
5e:b0:c2:99:eb:76:06:0b:af:f1:83:35:8c:e8:45:05:b2:77:
b4:18:3d:5b:40:0c:8d:4f:3c:7f:70:e2:89:54:35:65:5e:a9:
58:c4:dc:83:73:dc:92:0f:18:68:1e:c1:c9:ad:98:ff:48:eb:
1c:96:44:9a:ff:76:ca:02:d3:9f:47:68:98:33:1c:14:06:eb:
6a:eb:3c:05:23:71:d1:51:eb:2d:20:e6:a0:ae:b8:c9:7e:48:
dd:70:5c:e9:4d:1c:0d:e3:9e:d6:f4:e8:2a:86:8c:2a:5e:bc:
0d:28:43:11:f1:1a:0e:06:2a:e2:f8:9d:12:a1:84:2b:f6:96:
d7:37:76:30:8c:92:11:7b:cf:b9:00:be:57:2e:5d:66:aa:07:
cd:9a:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:02:41 2025 by rpki-client