Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3F511B2F52011EFA5CEDE5A762E951A.roa
File: A3F511B2F52011EFA5CEDE5A762E951A.roa (raw, json)
Hash identifier: jTvCzYc9pkDd+cE1qDULU6/Ejh3cBUcnKJ/gtr3Vp/U=
Subject key identifier: F1:C6:3F:A8:A3:79:2D:37:35:BF:17:DE:44:33:DD:85:D1:24:81:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016914
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3F511B2F52011EFA5CEDE5A762E951A.roa
Signing time: Thu 27 Feb 2025 15:36:41 +0000
ROA not before: Thu 27 Feb 2025 15:36:37 +0000
ROA not after: Wed 26 Mar 2025 15:36:37 +0000
asID: 62240
IP address blocks: 154.196.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92436 (0x16914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:36:37 2025 GMT
Not After : Mar 26 15:36:37 2025 GMT
Subject: CN=67c08689-07c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:a6:d5:7b:87:e7:6b:23:f2:67:50:f6:d7:
0c:d7:5f:f8:65:b5:02:6f:f4:37:5c:8f:b9:39:2a:
2d:4e:9a:7a:27:25:d2:ff:34:04:e4:8c:c7:cd:38:
5e:ba:ed:31:a0:51:08:be:af:ba:68:5a:a5:7b:ad:
71:67:52:41:76:26:3c:6c:a7:b1:06:4c:84:09:de:
34:38:3d:d7:c1:17:8f:90:2e:7d:e7:c9:a5:3b:19:
74:80:1a:64:ca:07:b7:e7:40:40:26:53:44:97:e3:
8c:06:7c:4d:13:e5:0d:00:2d:0f:70:1b:31:50:d9:
82:f7:a0:79:30:cb:cc:63:ce:bf:63:c9:84:f5:66:
30:36:c5:0b:02:b2:46:b3:ad:7c:6a:08:09:2f:6b:
82:ca:90:5d:87:b4:ce:0a:ef:5e:97:2e:d2:a3:55:
c4:f2:8f:12:8a:ef:5f:e7:66:06:e4:5a:cd:27:ef:
12:bc:0c:21:62:4d:a7:f4:45:33:f2:3f:1b:03:22:
3b:1a:81:e1:bc:12:95:c3:ba:3b:1b:71:f7:b8:05:
bb:a7:cf:2f:59:d4:be:06:9f:93:a8:a1:23:37:d4:
89:94:76:e3:fd:21:3e:c2:2b:52:e6:b5:f0:fe:a6:
cf:45:45:23:bb:3b:77:3b:a7:04:30:b1:e4:d6:cc:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C6:3F:A8:A3:79:2D:37:35:BF:17:DE:44:33:DD:85:D1:24:81:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3F511B2F52011EFA5CEDE5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.74.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fa:97:2e:0e:82:f6:0b:f6:93:1a:db:59:27:15:e6:3e:96:
4a:c4:64:33:57:ef:17:9c:52:53:44:de:e8:a9:37:ec:49:d3:
27:1b:68:2c:a2:03:12:b7:88:fa:50:b4:2d:b5:1e:b1:0e:d3:
33:81:a0:6b:e7:ee:d8:40:80:b7:f0:d3:f9:ae:b2:73:f1:10:
5f:4a:b0:6d:5b:22:29:b9:27:8d:10:c5:19:16:34:4c:92:34:
0c:e4:59:4c:d8:bb:89:c5:40:d3:34:2e:6d:c3:06:10:2d:d3:
9b:0a:a9:14:f2:09:c4:10:f2:f3:20:39:e6:a4:33:b1:62:c8:
d2:3d:96:51:10:61:8d:62:60:36:b0:94:01:d2:32:52:d6:9e:
7e:71:6d:22:5a:55:a2:16:dd:67:33:03:59:cd:49:56:ef:aa:
f1:0c:b7:a2:40:62:20:b0:cf:15:c9:6f:9b:91:21:fd:a2:25:
d6:3d:77:e0:6b:ac:f4:77:99:19:c0:62:99:3c:72:ac:17:b0:
ff:54:47:dc:a1:50:f0:71:9e:04:db:f8:cd:7f:11:69:60:ea:
12:2d:73:e5:1e:cf:39:89:2e:e1:56:86:6a:2d:ea:b0:63:d7:
65:a2:4a:48:89:e0:39:89:97:26:4a:b3:e9:e8:8c:30:a1:84:
b4:b7:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:14:13 2025 by rpki-client