Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABE3A454F33311EFBC3C0D9E762E951A.roa
File: ABE3A454F33311EFBC3C0D9E762E951A.roa (raw, json)
Hash identifier: VjiA4exz7JEj2vswLuMgQ+Co57J0OIQPoJOjng2CDd4=
Subject key identifier: BD:D5:A6:C3:C6:AF:A6:1C:21:D5:15:26:22:4F:2A:36:3B:09:60:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABE3A454F33311EFBC3C0D9E762E951A.roa
Signing time: Tue 25 Feb 2025 04:47:52 +0000
ROA not before: Tue 25 Feb 2025 04:47:49 +0000
ROA not after: Wed 26 Mar 2025 04:47:49 +0000
asID: 5065
IP address blocks: 154.94.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89405 (0x15d3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 04:47:49 2025 GMT
Not After : Mar 26 04:47:49 2025 GMT
Subject: CN=67bd4b78-7292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:46:0a:14:f7:7a:7b:b4:fb:e2:4c:0f:96:8d:
06:7f:c9:a0:e2:35:61:94:35:ab:0a:c9:58:76:59:
47:46:e0:de:c5:48:8f:c3:e6:43:57:3d:c5:80:c2:
66:6c:10:0c:ac:e3:4a:69:f2:79:ee:3a:db:be:92:
a9:79:0b:fc:63:30:c0:2c:06:1a:9b:6c:9b:44:41:
62:8a:83:47:59:3f:27:04:30:9b:d4:71:14:c0:28:
e6:e6:b1:be:e1:ff:7d:2e:b1:74:73:6e:60:83:4e:
c0:f6:c9:63:a7:7c:b4:15:43:2d:01:28:99:ec:39:
9c:95:cf:e2:01:20:66:57:ed:a5:7e:7c:b0:91:0d:
61:46:12:d7:ea:03:3f:16:f6:fb:c5:34:c0:90:41:
52:92:12:eb:9f:19:45:0d:9a:64:c7:c7:c1:25:8e:
f2:db:66:1d:fa:52:05:56:3c:fc:5a:7e:9a:60:19:
04:3e:52:ba:49:2f:3a:43:bc:47:d4:df:da:c5:90:
13:b1:79:b6:e3:39:0f:08:c6:f4:f8:69:2c:2f:d9:
d2:9a:6e:ea:a8:9b:8c:a6:30:09:07:6c:4e:36:95:
e0:bc:8d:e7:0c:ac:06:6f:78:e0:30:de:b5:9d:9f:
d9:75:26:33:f3:13:cb:cc:2b:4d:71:f9:30:0a:a6:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D5:A6:C3:C6:AF:A6:1C:21:D5:15:26:22:4F:2A:36:3B:09:60:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABE3A454F33311EFBC3C0D9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.52.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:78:43:99:57:3f:fd:d5:d2:a0:a9:72:02:3e:4b:c0:25:c6:
dd:37:b0:b1:f2:c4:d0:cd:61:53:4d:f1:78:8b:df:ee:89:14:
55:5f:ed:cb:a4:f0:57:19:26:a1:4a:dc:3c:70:ad:43:5b:27:
e2:c9:8a:19:56:95:4b:bf:39:a3:40:07:98:f9:dc:d9:fd:e3:
a2:c9:92:f2:1e:3c:05:c1:e2:ba:43:3a:e1:11:fa:e3:63:ec:
02:44:b0:cf:2f:08:6e:a3:ba:23:ff:70:b1:5b:be:9e:12:11:
7c:41:38:c5:05:e3:81:54:20:67:11:33:8b:ce:ab:fa:4d:c1:
ec:69:85:06:d6:53:aa:b7:b4:31:98:a3:fb:36:8d:0b:62:f2:
95:45:e9:49:2b:af:64:cb:34:ce:c0:8d:ac:b5:80:f8:58:5f:
d4:e7:6a:03:0d:0b:da:a2:7a:36:28:c9:ca:41:e8:b9:e5:1a:
37:b0:3f:07:74:d2:d3:4d:da:58:a3:4a:db:7b:da:bf:3b:a3:
76:af:11:b3:25:c0:3b:26:d0:4f:96:05:3d:c8:a7:c1:42:c6:
58:52:d5:58:d3:5b:52:66:fc:13:da:58:9a:11:a3:e1:23:9c:
13:73:ad:6d:b5:a8:d2:fb:38:ef:fa:06:ea:b3:4c:fe:f7:a7:
42:74:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:39:32 2025 by rpki-client