Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE49B0DAF81511EF9EA51F86762E951A.roa
File: AE49B0DAF81511EF9EA51F86762E951A.roa (raw, json)
Hash identifier: 3ja/xGie9IwEbfBSjR3eWaOsFkfS/3NYYUEGojKSKQU=
Subject key identifier: E7:B5:09:07:53:D0:52:88:62:93:63:DB:CA:A8:4E:49:DE:30:4C:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE49B0DAF81511EF9EA51F86762E951A.roa
Signing time: Mon 03 Mar 2025 09:55:47 +0000
ROA not before: Mon 03 Mar 2025 09:55:44 +0000
ROA not after: Mon 31 Mar 2025 09:55:44 +0000
asID: 202656
IP address blocks: 154.219.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94175 (0x16fdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 09:55:44 2025 GMT
Not After : Mar 31 09:55:44 2025 GMT
Subject: CN=67c57ca3-c3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:43:82:cb:53:eb:d8:7c:1c:c3:46:cc:5d:
3a:29:82:fb:f6:72:1d:ef:65:f6:3d:13:8e:10:bc:
33:57:71:4b:d0:16:1e:e5:bc:c4:fd:bd:b8:c6:5b:
3f:c1:1c:25:df:07:89:e4:dc:8b:d8:0e:cd:f5:41:
00:ce:95:55:99:e3:da:e5:d1:d4:cc:4a:18:6b:b0:
f6:72:88:a4:a6:0a:c0:2e:38:f5:13:5c:44:bc:1a:
0d:ba:7b:1c:c5:7b:65:e3:42:56:39:64:83:5c:ad:
ca:67:b8:ce:2d:fa:1e:82:81:6d:57:dd:a9:5b:29:
a3:30:e6:bb:25:cc:77:e5:45:6a:6d:82:39:ba:2d:
4a:d0:81:1b:4e:de:f4:b0:5d:93:e2:d8:56:01:c7:
23:fb:a9:3c:47:76:d4:b2:bc:64:43:a1:89:88:6d:
9b:6c:8a:82:74:7f:49:23:55:8f:d5:c4:95:ef:16:
f0:d1:cd:a9:50:b5:fa:13:19:4e:8a:24:1f:35:d5:
10:1c:19:c1:6e:33:2f:22:a0:6d:e6:1e:91:47:72:
5c:ac:8c:b9:bb:1b:e2:21:8b:3a:64:3e:6f:ff:ee:
15:17:53:50:59:51:bb:24:bc:29:34:f7:d2:91:0b:
27:2f:81:42:b1:d2:fb:01:c3:da:de:3f:64:b4:a8:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B5:09:07:53:D0:52:88:62:93:63:DB:CA:A8:4E:49:DE:30:4C:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE49B0DAF81511EF9EA51F86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:7e:15:1c:74:2f:26:c7:d9:b2:95:f1:25:79:65:11:d8:2e:
f8:6c:0e:9d:24:ab:1a:17:ce:46:92:98:aa:f4:00:14:3c:45:
80:d0:c7:a0:b7:0b:89:4c:77:71:1a:47:d0:04:de:24:94:64:
44:84:69:5f:1c:d3:59:8f:fa:70:e5:51:f6:ea:10:ea:f1:f1:
79:0d:07:92:ae:ed:1f:76:6d:a9:16:dc:04:40:7e:d9:59:e9:
27:68:65:38:b4:35:0d:74:7a:34:4f:5d:c5:3f:4a:72:a8:ea:
d1:cc:01:5a:c4:e5:44:42:98:1c:fc:c2:5e:a6:f9:fc:a7:c7:
bb:15:f3:9a:2c:30:22:a5:6e:8c:73:bf:c0:3e:93:3b:f7:e9:
31:d2:4d:6c:94:e4:53:eb:c6:27:78:1f:dd:12:5c:13:5f:3f:
83:fa:f8:24:d2:96:1e:bd:09:7d:41:d1:b4:b0:32:6f:7c:a3:
77:34:f5:10:0b:05:89:91:89:28:27:47:cd:4e:35:9d:4a:13:
8b:fa:de:68:58:80:f5:8a:0b:cb:8a:ea:6c:62:4e:aa:0f:a8:
ff:12:db:82:bd:18:2c:62:b7:4d:c0:f9:4b:ca:e2:e7:4a:91:
cb:11:90:75:b2:2d:dd:da:e7:76:7e:7e:cc:66:a0:7f:f9:0b:
19:83:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:51:20 2025 by rpki-client