Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF2E9788F67E11EF987FA8BE762E951A.roa
File: AF2E9788F67E11EF987FA8BE762E951A.roa (raw, json)
Hash identifier: zF+2EA/uH9HEZ88kkfBQfuNOH7e5m4vpBanmADu6CBQ=
Subject key identifier: 9C:B3:F3:B5:69:43:69:84:42:AD:CA:A0:29:F8:26:81:90:48:1D:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF2E9788F67E11EF987FA8BE762E951A.roa
Signing time: Sat 01 Mar 2025 09:22:24 +0000
ROA not before: Sat 01 Mar 2025 09:22:20 +0000
ROA not after: Mon 31 Mar 2025 09:22:20 +0000
asID: 48031
IP address blocks: 154.222.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93584 (0x16d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 09:22:20 2025 GMT
Not After : Mar 31 09:22:20 2025 GMT
Subject: CN=67c2d1d0-d7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:66:2c:96:fe:01:b8:0e:1c:f9:39:b9:f0:
d3:64:11:00:3a:e1:f7:78:83:c4:8b:a0:41:f6:29:
b0:7a:5a:f8:0f:18:4a:8c:c8:ab:15:b6:f7:c1:6b:
c6:ca:23:09:3d:18:aa:d9:e4:49:a0:4e:2d:b3:9f:
42:98:5d:c6:86:51:f8:ba:25:52:a2:4c:87:5d:37:
1f:6c:71:0a:d1:65:e7:83:8b:b6:b4:56:9c:93:54:
be:6e:23:55:fa:d2:11:35:9a:4b:3d:d5:ae:fd:4e:
ee:4a:26:f6:e3:29:87:40:84:b6:64:94:e3:25:ef:
a8:b8:2b:f5:40:3c:69:db:f1:18:d8:3c:50:30:68:
66:61:b7:3d:a6:83:65:a0:6a:bb:26:38:ab:ec:c1:
4d:d9:3c:cd:29:d8:5f:1b:13:9f:bc:14:29:7a:8e:
ee:52:7a:13:e1:13:70:e6:fd:31:6a:1b:7a:82:35:
5c:73:46:09:df:25:30:34:4e:82:c0:dd:c5:31:32:
57:b5:02:9e:ee:bf:3e:77:eb:76:74:43:10:86:9b:
dc:a3:7d:57:97:c9:04:31:fc:1d:4c:b0:53:b1:0a:
39:1f:eb:2d:f4:f6:80:31:f2:94:82:41:ac:05:f2:
7a:cd:c5:1a:e0:c1:b7:cd:8c:1c:d0:3a:a9:b2:1e:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B3:F3:B5:69:43:69:84:42:AD:CA:A0:29:F8:26:81:90:48:1D:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF2E9788F67E11EF987FA8BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:17:ec:41:56:e6:39:94:e2:e2:0a:97:8f:5f:8e:21:f3:d3:
24:f1:3e:2e:5c:ff:3f:a0:33:bd:27:1a:45:80:e4:c9:33:ca:
bd:70:81:8f:76:e7:11:9a:32:e6:7b:b5:81:0a:a2:3f:6a:fa:
b2:6b:55:2f:5c:1b:a0:0b:9a:0a:eb:96:d7:e6:fc:3e:e4:32:
ff:a1:d5:da:fa:d4:f9:30:7b:6f:15:4b:2b:85:c4:9f:90:9d:
59:49:43:b5:12:a6:17:91:44:30:64:a3:51:b5:75:85:a7:b4:
df:49:02:59:04:e0:16:78:fe:ca:cf:b7:21:a7:31:13:d7:cf:
47:53:32:c5:65:a5:f5:08:09:62:e2:ae:71:eb:c0:a4:43:76:
94:93:47:41:b5:90:aa:66:8b:19:22:04:13:31:36:16:2a:be:
09:83:84:df:d9:c8:6c:6c:f4:54:28:27:15:d9:bb:6b:84:1b:
6a:e6:ae:cf:d6:6f:cd:d6:a6:3e:ed:9f:87:b5:d6:aa:50:7a:
49:f0:4a:41:32:a6:2f:09:78:00:5a:c4:23:e8:e7:f2:aa:c6:
b0:6b:72:f6:00:bb:c9:2e:f9:17:7c:37:ec:8d:ac:f6:ef:14:
8d:2b:5a:c3:6e:f4:05:28:a3:e4:e4:fd:0f:93:7f:cd:c5:11:
f8:78:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:28 2025 by rpki-client