Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2EED37AF61911EF89192D80762E951A.roa
File: B2EED37AF61911EF89192D80762E951A.roa (raw, json)
Hash identifier: lM5SDbkQ4UbA9KYw4DYVX/UdtdHn2zH0qOZYTUs5UR0=
Subject key identifier: E0:8A:8A:DF:3F:D8:51:F3:AF:DB:0E:5D:E1:24:62:1F:4E:13:3C:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2EED37AF61911EF89192D80762E951A.roa
Signing time: Fri 28 Feb 2025 21:19:31 +0000
ROA not before: Fri 28 Feb 2025 21:19:27 +0000
ROA not after: Wed 26 Mar 2025 21:19:27 +0000
asID: 62240
IP address blocks: 154.194.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93235 (0x16c33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 21:19:27 2025 GMT
Not After : Mar 26 21:19:27 2025 GMT
Subject: CN=67c22863-16c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:47:0a:88:32:7f:1b:71:f6:17:a4:f4:9c:
82:b4:59:bf:83:f7:c7:23:fc:e0:92:06:56:4a:26:
c0:ad:23:13:2d:99:c2:6f:3c:b4:30:93:93:59:f7:
0d:62:2b:96:7d:c9:7d:84:61:5e:7c:2b:f1:fe:2f:
1e:3d:cc:26:f5:49:81:4a:53:05:ff:3b:d5:62:c1:
eb:7b:36:71:83:f2:53:18:77:59:56:91:50:93:d4:
97:08:1e:8a:d9:01:b5:07:d6:d1:29:21:2f:91:5b:
05:d7:5d:74:65:bd:35:45:4f:bd:e8:b9:4c:43:da:
c5:3f:ab:d2:af:26:e2:03:b5:21:71:44:ed:4c:0c:
29:ff:77:d5:87:ca:7a:f4:c4:51:8b:47:2e:a8:08:
86:32:26:e9:0c:a7:ac:3c:93:02:d6:65:16:9e:0e:
3c:96:a0:b8:d9:02:48:35:58:ec:d3:c1:58:11:9b:
03:3d:84:16:2d:de:78:30:5e:a8:2e:97:3e:d2:c8:
78:c7:69:ea:6a:a8:9c:91:82:5a:b0:7e:62:ba:b9:
f1:a5:21:41:46:5f:aa:8c:a3:81:ca:3d:b7:42:25:
6b:73:7d:fc:f1:b7:fa:76:a5:bb:3b:fd:e4:38:07:
4b:dc:19:94:9c:4d:50:90:50:d8:64:d5:1b:e5:03:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:8A:DF:3F:D8:51:F3:AF:DB:0E:5D:E1:24:62:1F:4E:13:3C:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2EED37AF61911EF89192D80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ab:10:96:9d:c0:20:60:9e:f7:db:4b:1a:27:65:29:a7:1f:
7c:2e:c3:bb:ca:04:cf:bf:ac:f3:08:1f:6d:b1:ba:6f:c8:ff:
92:59:9f:ef:c2:e5:12:93:9a:1d:43:ba:ea:15:18:96:5b:ee:
9b:46:6b:50:10:a1:4d:45:9a:de:2d:64:34:51:28:df:4c:27:
0d:11:05:a4:e8:ee:3c:fb:0b:f9:7f:d2:8b:c5:4e:14:3e:9b:
7e:ed:40:b8:8c:ba:7d:81:2b:41:f4:cb:34:83:49:08:31:d0:
9d:ed:a2:04:f3:20:2c:98:e9:97:3f:61:da:33:32:77:15:72:
14:54:52:46:b6:34:a1:25:5a:89:a6:0e:fe:48:96:73:7f:b6:
3e:0c:0e:11:23:fe:76:35:42:3c:06:6e:39:f2:7a:b2:a7:6d:
2a:9d:1b:30:9f:ee:ef:ad:6b:04:a4:a4:d7:b7:e5:8b:83:53:
f1:6d:74:95:4f:94:95:0e:18:db:0c:89:c4:5e:8d:db:08:60:
56:27:87:86:0c:33:a1:8a:46:7a:dc:eb:af:14:ff:22:18:87:
ef:ae:b3:58:9c:a8:8f:b3:2a:d7:44:71:ad:f7:9c:e9:64:8c:
08:91:a0:28:72:c9:8c:93:b3:a9:13:e3:c6:15:a2:cf:40:c4:
6f:5c:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:17:14 2025 by rpki-client