Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F92F606F51211EFB33E8479762E951A.roa
File: 9F92F606F51211EFB33E8479762E951A.roa (raw, json)
Hash identifier: feGLjnB5uZLx4jh90CZEmtfzBjHIw85j2xREGF9CYkQ=
Subject key identifier: 2E:06:A8:DF:3F:98:D0:8E:68:FC:4A:7E:C4:E3:6A:59:19:8D:5B:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0168A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F92F606F51211EFB33E8479762E951A.roa
Signing time: Thu 27 Feb 2025 13:56:21 +0000
ROA not before: Thu 27 Feb 2025 13:56:17 +0000
ROA not after: Wed 26 Mar 2025 13:56:17 +0000
asID: 62240
IP address blocks: 154.196.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92326 (0x168a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 13:56:17 2025 GMT
Not After : Mar 26 13:56:17 2025 GMT
Subject: CN=67c06f05-d58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:b3:f8:c7:96:c7:40:f5:3e:34:37:9e:07:
ea:00:5b:8d:14:60:4e:e9:b3:cf:cd:40:1f:f4:33:
6d:49:4f:01:cf:a1:06:52:30:bd:2d:66:4f:f9:26:
72:35:a8:98:5e:a5:60:5b:0d:21:33:16:ee:52:56:
04:ce:f0:7a:e9:dd:e4:f1:03:a3:81:a8:21:96:d4:
d8:88:53:98:64:44:45:b3:11:9a:81:1d:06:6c:ef:
b4:ae:51:7d:1b:64:31:ff:99:cc:78:ef:2f:b0:39:
e1:f6:82:40:49:8b:35:e1:12:bc:93:c6:1d:45:a6:
47:36:a4:4f:77:1b:59:c8:ea:06:e0:b3:12:3a:96:
61:6a:1b:19:6a:7f:0a:03:8d:f7:20:a4:a0:e0:07:
06:1e:75:71:21:cb:2c:5a:62:ed:c9:79:76:e2:d2:
99:5f:78:7a:8c:68:13:35:59:6e:03:c4:12:44:3b:
41:64:77:a2:65:b3:f6:03:76:13:79:15:95:aa:1a:
d1:11:49:58:d3:37:58:29:d7:02:53:0f:99:7b:3c:
ff:23:ea:4f:a1:7a:ae:b3:e2:e9:cc:c2:ad:4b:84:
3a:70:33:1a:71:c5:9d:2f:b9:80:68:cc:88:11:10:
8e:f0:4c:e8:d9:57:da:8f:7d:49:54:97:2e:ba:3c:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:06:A8:DF:3F:98:D0:8E:68:FC:4A:7E:C4:E3:6A:59:19:8D:5B:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F92F606F51211EFB33E8479762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.26.0/24
Signature Algorithm: sha256WithRSAEncryption
68:dd:0a:79:e8:c6:8c:d2:4e:76:86:22:36:74:70:97:b3:73:
b6:a7:da:9d:0d:3d:d0:55:41:49:60:93:46:3b:15:30:78:59:
8a:09:54:21:b4:ee:1c:d7:c9:12:a5:51:90:aa:74:ab:85:65:
cc:e1:3d:2d:3b:3d:46:15:38:54:6a:af:1d:a5:eb:4d:22:60:
2a:a7:9b:2e:42:15:0e:ae:4b:82:75:8b:e5:5d:d9:ce:26:30:
b8:4c:fe:0a:72:50:4d:fb:7e:4a:3b:4e:e7:4c:e0:e6:3a:c1:
f8:b0:a3:24:62:05:92:e5:d4:ee:de:0b:57:16:76:88:e0:d1:
d4:26:2c:b4:68:0c:58:c1:50:17:df:66:bc:e3:45:2e:b5:81:
2b:94:de:f0:d5:ba:5c:34:38:76:61:3e:ab:7f:1e:b6:62:d6:
c7:95:72:f1:36:b0:a0:1f:7c:e5:c3:8c:7c:29:85:f5:07:b2:
6b:1b:46:e8:01:f7:5b:f9:ea:a4:6b:4f:2c:f2:46:ac:a7:8a:
af:a7:0c:0d:b9:fe:42:c9:89:e3:1c:5b:d4:90:e5:92:64:25:
c8:18:fa:e8:89:72:98:2f:37:fa:c5:0f:a8:0a:b3:ac:e5:34:
a9:ec:5a:19:bc:eb:63:7e:56:33:ff:70:73:28:fd:30:ab:3d:
f9:85:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:33:50 2025 by rpki-client