Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A72C78DCF4E611EFBE6CB850762E951A.roa
File: A72C78DCF4E611EFBE6CB850762E951A.roa (raw, json)
Hash identifier: mvUbJJaujHvrAqyFaqbf8hd94mcP2YPKYGNi+US3jxo=
Subject key identifier: 57:98:67:F3:93:79:1E:65:45:B9:7F:17:B8:BF:E2:5A:AD:2D:41:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A72C78DCF4E611EFBE6CB850762E951A.roa
Signing time: Thu 27 Feb 2025 08:41:36 +0000
ROA not before: Thu 27 Feb 2025 08:41:32 +0000
ROA not after: Wed 26 Mar 2025 08:41:32 +0000
asID: 62240
IP address blocks: 154.195.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91901 (0x166fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:41:32 2025 GMT
Not After : Mar 26 08:41:32 2025 GMT
Subject: CN=67c0253f-5bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:93:85:d2:c4:d3:f2:5c:90:5c:6d:0f:64:
e9:b2:0b:1f:e8:7e:19:4b:59:09:7d:6e:3f:81:c4:
7c:83:64:a5:eb:34:c9:44:e5:d0:9f:09:b1:14:0b:
c3:bc:59:74:22:ba:ba:09:f6:ea:29:ac:f0:56:54:
88:1d:a9:ff:d1:0d:62:87:1e:ef:03:86:be:66:9e:
23:8f:4d:c5:c0:8e:43:dd:ae:25:ed:27:fd:5e:d0:
44:e3:6b:e7:c0:49:d5:2b:94:75:6e:86:37:ed:af:
ad:cb:ad:fd:f6:f6:90:00:dd:0c:16:1c:d6:d5:82:
b7:c7:70:08:62:d7:c4:f3:ad:f2:cb:1f:4b:b8:aa:
a6:50:35:07:97:27:78:05:aa:51:7f:9a:ff:31:2c:
a0:0f:4b:0d:2a:77:72:a7:b7:dd:79:3a:95:ed:0f:
c7:b0:c3:07:a1:31:86:27:ff:29:04:8c:93:5f:99:
2b:4a:0c:25:45:c1:fb:05:18:9c:b5:09:ad:2d:89:
e6:8f:92:6a:3b:34:5d:b2:f3:99:c7:84:91:f2:7d:
5f:f1:d6:7c:20:65:26:66:b2:b8:15:0b:2b:48:18:
b9:27:3f:e1:cb:36:8e:d7:4f:56:b3:ee:11:bf:5f:
10:2d:fb:63:af:9a:0b:aa:22:4e:4b:57:6f:96:79:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:98:67:F3:93:79:1E:65:45:B9:7F:17:B8:BF:E2:5A:AD:2D:41:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A72C78DCF4E611EFBE6CB850762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.189.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c1:ab:ae:82:8a:b7:1e:21:37:a4:10:77:c8:39:2b:21:da:
12:67:6d:bb:7a:dd:34:66:d2:e5:3b:a3:d9:56:84:a9:d9:12:
9b:c8:e5:e8:05:0e:a5:40:0c:61:73:86:4e:51:a1:15:e4:2c:
ee:97:3e:fb:f4:25:b5:18:5e:9c:b2:d7:f9:62:c0:3a:0b:14:
a5:fb:2c:13:1e:f5:10:1a:90:9f:13:8f:6c:0d:ee:9e:cc:60:
2a:9f:55:3d:96:2d:ee:c2:f7:7f:13:5b:3e:45:aa:7f:6d:da:
0e:24:3b:f3:62:dd:09:41:7f:3f:5e:27:9c:65:af:08:b1:c4:
1c:0d:06:9b:ce:7c:61:d3:b3:61:ba:ed:18:21:28:b0:9a:73:
85:cc:10:e3:38:8c:0a:bd:a6:ae:31:e9:5b:a7:1a:cc:10:37:
72:3d:ad:e8:4f:e4:28:70:79:90:38:25:43:b5:a3:d7:ee:e1:
c5:7a:d7:c5:6e:11:ce:98:98:3a:9e:95:88:87:d2:f3:1b:69:
c2:ff:42:38:8f:d5:ac:fc:50:dc:4c:f5:db:a3:60:8f:65:51:
66:fd:da:f4:b2:16:4a:19:4a:a6:3b:6e:3a:20:b3:a3:3a:e8:
6d:e7:2e:4f:d8:96:12:07:85:b2:93:40:29:b8:77:48:8f:60:
f3:4d:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:05:24 2025 by rpki-client