Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BE05E2F33211EF91169795762E951A.roa
File: B0BE05E2F33211EF91169795762E951A.roa (raw, json)
Hash identifier: FBnIXyrMc4uq3CxSze1WuHVqcp+zPGAGeGIpEcwCBU4=
Subject key identifier: BE:FC:6E:5B:94:A2:38:54:89:C9:3F:94:CA:F9:47:54:53:6C:22:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BE05E2F33211EF91169795762E951A.roa
Signing time: Tue 25 Feb 2025 04:40:51 +0000
ROA not before: Tue 25 Feb 2025 04:40:48 +0000
ROA not after: Wed 26 Mar 2025 04:40:48 +0000
asID: 5065
IP address blocks: 154.94.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89393 (0x15d31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 04:40:48 2025 GMT
Not After : Mar 26 04:40:48 2025 GMT
Subject: CN=67bd49d3-9398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:f6:cd:b9:4f:e4:95:d4:78:66:eb:ec:60:
75:56:11:ba:dc:31:fa:4b:a8:7d:9a:5d:82:fb:ce:
35:c8:a8:15:76:87:f3:47:7e:87:2e:19:33:5e:4c:
98:05:c1:ac:c9:23:df:91:ff:9c:4c:b1:ad:8d:44:
53:71:26:ff:48:86:bd:75:14:0c:ed:22:1d:96:75:
ca:aa:10:95:6f:d8:8c:ac:42:30:9b:da:24:7a:0e:
b0:46:22:7c:93:13:a4:e8:ff:1b:12:8e:fb:cc:7d:
1a:36:78:13:4a:ec:24:79:12:22:87:10:44:42:20:
76:5d:e2:08:ef:9f:e5:9f:e5:40:ba:ec:6f:78:60:
b1:99:3c:c9:a1:74:2f:a0:01:fe:8f:a5:f8:d8:0b:
b1:a1:81:b1:cb:0f:24:a2:e1:dd:c9:27:65:e8:2f:
d2:7a:d1:d8:24:ed:b2:be:cf:d2:68:82:e8:4d:cf:
a1:e9:ba:36:c5:12:ef:25:96:42:fa:8e:c0:f0:06:
2c:3e:fc:1b:5e:d0:6d:a9:bc:87:f5:35:b5:43:42:
78:a5:e3:07:59:f2:88:1b:35:01:7b:98:2b:fd:3c:
7b:6e:53:fc:14:c1:0f:47:ba:49:56:1c:3b:c4:7a:
fd:af:d6:d3:4e:3f:bd:a6:6f:c5:9e:6d:52:b9:f3:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FC:6E:5B:94:A2:38:54:89:C9:3F:94:CA:F9:47:54:53:6C:22:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BE05E2F33211EF91169795762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.47.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:ef:31:f7:ef:07:51:8d:09:b9:3c:db:65:88:f2:4d:bb:16:
42:bb:2e:cd:b5:ae:32:b2:56:2d:aa:56:1b:6d:29:36:68:07:
eb:ab:63:81:93:33:67:1c:3f:a4:81:6c:ec:d4:92:5d:01:04:
1d:04:60:0c:f8:c4:d3:84:c3:48:48:23:21:4d:40:ec:c0:72:
5f:0b:43:0a:b7:fa:11:f0:b9:77:62:af:62:d5:61:93:e7:aa:
b1:8d:3b:da:55:43:d7:38:57:99:69:39:54:ee:a1:a7:24:37:
04:b7:d9:5d:0e:9d:37:3a:1d:14:1e:b9:25:7c:52:ab:2f:b5:
ae:eb:44:b8:f0:ca:a3:85:1c:2c:b1:ca:f4:d5:af:ab:5d:88:
8c:bd:91:55:b5:ea:d5:74:22:31:b1:05:bf:5d:6a:51:f3:ef:
0c:24:91:d0:13:e8:89:be:65:ae:19:15:e0:ba:46:c7:26:1f:
53:e5:83:3d:68:cc:cb:be:ea:e8:68:44:ab:d5:53:88:58:91:
02:99:9d:43:65:68:fb:8d:cd:8f:f2:a5:d7:7b:9e:b2:e4:cd:
bb:f5:b5:d6:3d:de:78:aa:bd:f3:af:8b:06:2c:c6:c6:f5:9f:
21:20:39:a4:83:25:05:19:2d:e8:53:0b:c3:af:84:7c:4b:84:
19:79:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:19:17 2025 by rpki-client