Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9223289EF51A11EFA9844BB1762E951A.roa
File: 9223289EF51A11EFA9844BB1762E951A.roa (raw, json)
Hash identifier: nxBi/MrBMvgPtMnZ+h4dkdSgEDRAI9R7xq2DGvC/PKY=
Subject key identifier: 7C:01:5B:21:45:6A:32:3B:54:67:2C:59:C5:1B:17:EE:E8:B8:BB:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0168D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9223289EF51A11EFA9844BB1762E951A.roa
Signing time: Thu 27 Feb 2025 14:53:14 +0000
ROA not before: Thu 27 Feb 2025 14:53:10 +0000
ROA not after: Wed 26 Mar 2025 14:53:10 +0000
asID: 62240
IP address blocks: 154.196.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92372 (0x168d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 14:53:10 2025 GMT
Not After : Mar 26 14:53:10 2025 GMT
Subject: CN=67c07c5a-3f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:84:2e:4b:66:81:23:79:6b:19:88:46:08:
d4:d1:30:8e:82:6c:f9:ec:a7:5c:ff:ed:b5:79:40:
19:61:a7:b5:42:9e:02:f7:c2:a2:e3:21:a2:b9:85:
dd:c5:d8:16:30:74:ac:dd:10:2a:f0:ee:7e:e7:1f:
70:59:90:68:15:d1:9f:d3:03:bf:ce:09:93:28:b4:
82:8a:18:cf:af:75:41:ca:20:0e:61:09:b7:30:32:
77:d4:cd:26:55:2b:2c:25:35:98:a8:58:b2:46:3c:
d1:27:3a:02:21:36:3f:2d:c1:a8:62:3b:40:a7:0e:
75:3a:fc:65:42:62:fc:73:25:6f:ee:f1:4f:23:7c:
b4:2e:f9:3f:06:ab:5d:fd:75:22:4b:8c:54:1b:9c:
8a:be:59:df:79:a9:ea:f8:02:12:85:00:e1:6f:a3:
6f:ed:6e:1f:40:25:43:84:50:1c:56:b6:1f:2f:4d:
03:7d:60:b3:69:aa:24:48:3c:c1:ee:37:fa:35:13:
cb:40:0a:51:1b:c5:74:b5:90:72:e0:a4:8e:67:c4:
bc:20:90:27:e6:db:ab:af:77:a6:05:3b:45:15:97:
68:24:47:75:6f:5d:e5:ea:61:b7:77:59:48:e0:e0:
10:d0:9a:cd:7a:66:d6:ba:fe:d8:81:07:c0:44:14:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:01:5B:21:45:6A:32:3B:54:67:2C:59:C5:1B:17:EE:E8:B8:BB:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9223289EF51A11EFA9844BB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.54.0/24
Signature Algorithm: sha256WithRSAEncryption
af:81:19:7c:27:f3:87:f5:00:bb:b5:53:43:40:07:be:10:7d:
65:ec:40:2c:a3:30:f8:b6:f4:c4:b7:e6:a4:6d:ac:a9:92:25:
21:36:e0:26:7b:bf:08:22:71:88:e4:39:87:9e:a6:87:03:a0:
b9:f3:7e:5c:10:07:dd:73:af:c9:cc:b7:43:74:1d:50:09:bd:
dc:af:77:b8:e8:14:d5:a2:82:d2:39:3c:54:b8:2b:6c:7a:d1:
a5:23:06:e7:b3:94:47:4c:98:fe:7c:6b:fe:af:9a:85:7e:5c:
2d:79:a6:b2:fe:ce:7e:34:22:a8:be:48:ad:fb:d1:c2:af:53:
dd:7b:a3:80:ed:a0:16:3c:a0:19:44:43:69:99:67:bb:59:5d:
bb:c8:78:f7:40:30:36:b0:f2:d3:10:52:20:bb:b0:8a:82:a8:
f9:fd:14:5e:67:5e:c8:19:63:dd:00:e9:67:ab:46:90:20:31:
fb:78:60:a0:73:ee:7c:6a:39:1d:4b:43:c9:b9:59:36:cb:45:
75:11:31:8e:17:09:4d:28:66:a7:cd:a0:42:18:82:a5:76:a4:
36:20:0f:fd:26:58:65:8b:13:e9:a3:ef:52:b3:89:1e:3c:ad:
60:a3:a2:41:68:d3:26:84:ae:e4:c3:a4:36:39:31:0b:72:36:
15:33:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:25:06 2025 by rpki-client