Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB880A54F51D11EFAD182F46762E951A.roa
File: AB880A54F51D11EFAD182F46762E951A.roa (raw, json)
Hash identifier: sq3gOyFreYqszk0RxgP21vKvt/rKdRBjqXUVGoCrPAA=
Subject key identifier: 94:E8:DF:67:12:B2:20:75:08:15:62:E0:C7:1D:12:1C:EC:3E:78:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0168F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB880A54F51D11EFAD182F46762E951A.roa
Signing time: Thu 27 Feb 2025 15:15:25 +0000
ROA not before: Thu 27 Feb 2025 15:15:21 +0000
ROA not after: Wed 26 Mar 2025 15:15:21 +0000
asID: 62240
IP address blocks: 154.196.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92404 (0x168f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:15:21 2025 GMT
Not After : Mar 26 15:15:21 2025 GMT
Subject: CN=67c0818d-68d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:1f:b8:53:cb:59:de:e7:1a:a3:58:d3:4a:
b3:ac:6c:2b:90:a2:5a:82:ec:5c:ed:99:04:cb:2c:
1c:6b:58:50:d3:bf:bd:ff:0c:6d:b9:57:cc:7f:bf:
1f:56:da:f1:be:f9:6e:31:bd:14:e2:40:e5:36:d0:
be:f7:27:a8:17:95:ef:ea:40:f5:c9:49:28:bf:23:
66:05:f8:91:07:19:bf:23:14:c3:e2:6d:94:87:75:
b0:12:5a:da:1c:da:ce:27:e1:cf:9b:98:57:de:20:
82:60:e2:87:99:82:8d:ca:f7:d4:e2:e6:c1:b1:de:
58:d6:d5:21:bc:b4:86:7f:c6:4b:d6:0a:96:ab:eb:
4c:ea:3b:cf:a1:41:5c:05:c1:0e:4c:71:d0:89:46:
9b:72:e6:6f:32:86:52:9a:5c:1b:9b:86:4c:a6:91:
37:c9:0c:73:98:f6:bf:62:a6:f6:bb:23:26:ff:86:
db:8b:59:54:c1:0f:5d:29:41:4d:1c:ee:6c:c4:96:
5a:fb:91:7d:f1:a3:97:b2:99:cd:84:4e:3d:6c:b9:
ff:c3:83:20:c6:c2:3a:8f:a1:14:97:2e:13:8b:d7:
47:74:03:10:21:89:be:6a:66:c6:d8:ff:4f:9f:85:
b7:6f:32:96:88:19:66:c8:9e:fc:05:bf:f3:be:44:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E8:DF:67:12:B2:20:75:08:15:62:E0:C7:1D:12:1C:EC:3E:78:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB880A54F51D11EFAD182F46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.62.0/24
Signature Algorithm: sha256WithRSAEncryption
32:db:82:38:bc:ab:58:e1:79:0b:5d:83:9c:68:b3:e9:34:9b:
8d:00:f2:a0:f8:2b:6a:b4:d9:4b:13:b3:ea:93:7b:c7:a3:e4:
ed:27:66:56:96:6f:bb:af:ab:3c:75:ac:f4:33:f1:72:5b:4e:
56:03:e1:00:b0:fb:d6:7d:f4:5e:8b:98:f7:35:b1:05:a6:93:
bd:41:4b:a5:da:80:21:32:65:76:7a:76:b1:eb:41:21:e2:8b:
0e:3a:83:36:0f:52:19:30:5c:80:38:05:12:ee:58:c5:bc:db:
4f:94:cb:5d:18:9c:7b:de:4d:79:cd:b1:8f:9e:03:cf:56:68:
52:8d:2b:a9:01:d2:48:28:9b:d0:39:fc:95:68:b6:f9:34:93:
35:ee:68:1c:24:16:e0:9e:a1:df:a4:b5:27:6e:d8:51:5e:9f:
6f:8e:7a:f1:8a:41:ea:05:f2:ae:cc:3b:67:cd:d3:03:d9:88:
c1:5d:d7:6a:b0:80:1d:ae:da:35:65:a4:bd:28:88:fc:a2:0e:
1e:38:9a:fb:7b:15:97:77:b4:c9:ac:75:df:db:9f:de:ff:21:
75:48:1f:a3:1e:0f:21:cd:cd:46:70:33:48:fc:e5:e0:94:61:
ea:97:88:12:69:7b:31:3c:01:d4:f7:53:94:f2:94:16:7f:85:
6d:9e:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:58:54 2025 by rpki-client