Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADF45AB4F67511EFA2397081762E951A.roa
File: ADF45AB4F67511EFA2397081762E951A.roa (raw, json)
Hash identifier: gUOgRdQ4q+isquhxV1sOIUDBOL3tafBTlfuJP+fUHC4=
Subject key identifier: 38:D2:68:6B:7E:07:6E:C0:C0:A2:4A:1C:91:89:F9:77:50:20:C1:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADF45AB4F67511EFA2397081762E951A.roa
Signing time: Sat 01 Mar 2025 08:17:56 +0000
ROA not before: Sat 01 Mar 2025 08:17:52 +0000
ROA not after: Mon 31 Mar 2025 08:17:52 +0000
asID: 202656
IP address blocks: 154.219.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93514 (0x16d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 08:17:52 2025 GMT
Not After : Mar 31 08:17:52 2025 GMT
Subject: CN=67c2c2b4-e7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:e3:af:a0:e2:d2:66:60:b5:72:73:30:ce:
4d:2a:94:d1:0a:32:24:b6:eb:92:39:0e:5b:2c:04:
63:53:d7:c1:29:be:d3:a9:b2:dd:19:ca:00:d0:c7:
1b:70:88:ef:c9:e4:9d:3b:58:04:31:2e:3a:52:23:
ec:1f:62:6b:b8:35:fb:2e:e3:0c:be:37:af:ce:99:
17:5d:c7:a3:3e:08:70:47:a1:33:e1:f7:a5:95:00:
a5:07:f6:06:ca:b5:23:d8:81:5d:89:28:d5:42:bb:
c1:b9:c2:24:17:c6:ab:a8:c8:55:b9:9d:46:e9:ec:
d7:da:88:e4:d6:f8:93:a8:46:00:3b:19:31:15:0c:
8f:a8:b0:c2:df:da:d4:ae:e8:91:6b:14:6b:4f:02:
08:26:ae:6c:e9:24:7e:90:92:a6:d1:f4:5e:41:b7:
0a:57:50:33:57:62:29:23:7c:e1:69:9a:b1:4d:ef:
44:a6:52:55:74:cb:28:ab:a1:36:4d:8e:93:fc:35:
df:6e:d3:66:17:d0:98:48:68:68:6a:ee:dd:f8:62:
63:26:7d:05:0b:b3:b0:09:d2:e3:16:e2:1c:8b:88:
c4:95:90:0c:e8:54:c2:c2:a5:6f:82:ca:1b:5b:d0:
f8:99:48:bd:10:91:91:86:6c:59:e4:45:9d:fb:4b:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D2:68:6B:7E:07:6E:C0:C0:A2:4A:1C:91:89:F9:77:50:20:C1:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADF45AB4F67511EFA2397081762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.207.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e3:e4:8c:23:e5:dd:9b:aa:44:cb:65:7d:94:53:95:3b:9c:
e1:09:d9:24:29:00:f8:64:ad:f5:a2:fd:aa:56:f4:9c:49:38:
59:30:16:c0:8c:3a:6d:2d:d7:60:da:e3:b2:91:ad:50:9f:67:
10:d3:8d:d0:8b:2b:bb:b7:83:ad:fb:d1:81:84:e9:c2:60:b8:
b2:04:1e:3d:4d:07:73:00:64:d0:5d:82:81:67:5c:b2:89:35:
c2:43:1b:bd:86:f7:38:26:57:71:53:be:91:f7:6e:54:5f:50:
e5:5f:6d:73:01:d5:b6:fa:00:56:dd:ee:90:72:56:27:c8:db:
14:6a:52:e7:f6:c9:55:b8:6b:0f:8a:f2:83:06:86:33:0e:eb:
a8:3a:9d:37:2f:1d:b2:90:14:b2:fc:7d:9d:42:f8:35:e3:c9:
5a:8e:2d:cc:7d:0f:f9:07:aa:dd:01:f1:94:cd:ad:57:d1:43:
f0:82:41:a2:f8:74:de:19:54:5c:db:60:12:af:8b:64:7c:98:
5e:40:c0:1c:1b:69:cf:c7:19:8c:14:d6:fd:af:ad:25:61:16:
16:93:2f:13:72:39:f6:38:35:38:32:5b:d0:65:4a:84:bc:3a:
5c:f1:91:15:84:11:d2:f7:52:eb:8c:d0:c5:29:cd:6a:9e:a8:
86:a5:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:28:21 2025 by rpki-client