Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A360177CF4FA11EF83167358762E951A.roa
File: A360177CF4FA11EF83167358762E951A.roa (raw, json)
Hash identifier: RZ2HQcIcHRPotteNdzc8k/ucQKDQPHfk48tvF5aIDu4=
Subject key identifier: 1A:F8:A8:F8:03:49:F6:D0:16:26:C1:71:65:D0:8B:25:A9:78:ED:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016802
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A360177CF4FA11EF83167358762E951A.roa
Signing time: Thu 27 Feb 2025 11:04:39 +0000
ROA not before: Thu 27 Feb 2025 11:04:35 +0000
ROA not after: Wed 26 Mar 2025 11:04:35 +0000
asID: 62240
IP address blocks: 154.196.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92162 (0x16802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 11:04:35 2025 GMT
Not After : Mar 26 11:04:35 2025 GMT
Subject: CN=67c046c7-5e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:37:08:12:bf:b3:e2:33:3a:74:d7:02:69:
2d:bf:a6:62:36:98:39:c2:f7:15:94:69:6c:ef:25:
0f:6d:90:86:38:36:c4:60:1a:6f:9a:2e:0e:07:6e:
c0:49:40:40:e5:7c:f5:a6:e8:07:3f:02:91:37:15:
99:80:58:81:34:3d:c3:47:4e:f5:88:62:13:4c:3f:
56:c4:ae:18:36:79:b8:ef:fc:d2:0d:f8:84:7f:a3:
9e:0a:b1:36:45:7c:68:32:b9:2a:9c:15:b2:8e:85:
97:a0:2b:c2:85:ec:c2:6a:13:05:44:2b:9c:31:50:
bf:39:72:69:be:73:7c:d6:05:41:1e:c9:c9:72:aa:
62:be:4d:98:26:f4:c6:54:01:c3:4b:a0:7b:e4:71:
8c:8f:7e:73:68:c2:1d:6b:ad:18:87:9b:8a:bf:13:
36:a3:be:11:d1:c1:e8:da:2b:f2:32:95:78:06:91:
ce:e0:38:f5:28:14:31:12:dd:ba:45:a5:05:d8:46:
24:a1:88:52:42:22:68:25:4a:35:d5:b2:67:ec:0f:
2b:86:13:df:2d:2e:08:03:1a:b1:e2:40:7d:20:3d:
c2:30:3f:c9:57:1e:2d:df:70:23:cb:88:6f:72:98:
4a:95:5f:5f:6f:54:5f:10:d7:ed:e2:53:54:16:c3:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F8:A8:F8:03:49:F6:D0:16:26:C1:71:65:D0:8B:25:A9:78:ED:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A360177CF4FA11EF83167358762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.41.0/24
Signature Algorithm: sha256WithRSAEncryption
82:30:ad:df:0f:0a:92:c6:9a:c1:5d:06:f5:aa:90:c2:07:e7:
68:d6:83:f9:dc:38:3e:51:98:26:1c:e2:92:ff:54:07:af:27:
6d:75:00:00:6e:cc:10:d3:c6:61:35:ed:81:e7:6c:c1:17:0c:
30:f2:90:a4:f0:63:5c:8a:b4:d6:3e:a0:04:ff:f1:6c:de:e4:
e9:2d:81:1e:1a:6b:59:9c:ad:70:23:75:2d:4a:42:12:c7:dc:
e2:45:ad:c7:11:a8:cb:8b:63:7c:71:f4:f5:a1:58:4c:27:a7:
e7:e2:09:35:55:05:aa:8f:8e:05:34:bf:8f:b1:3e:ce:28:15:
8e:9c:fd:15:60:fb:cc:17:07:bf:6f:53:82:4e:dd:1c:94:e1:
01:52:36:9a:05:8c:8f:69:98:66:74:10:1f:33:53:6f:8a:a7:
5c:37:81:2c:35:41:85:6d:40:61:b1:4c:f3:32:55:aa:43:6d:
8b:1e:fa:43:b2:e5:2f:1d:f3:ad:c6:fb:65:a7:8f:02:85:3e:
27:f4:d9:6a:10:29:b1:ea:57:8b:2f:2d:70:9e:13:6d:32:55:
5a:58:51:93:2e:36:e3:43:0d:77:d9:19:3e:d8:64:46:40:84:
07:5d:a9:d4:a4:78:06:98:e0:e7:c0:5f:73:9b:50:69:97:ce:
53:4f:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:43:19 2025 by rpki-client