Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B469E7AEF4F611EF89CA02BD762E951A.roa
File: B469E7AEF4F611EF89CA02BD762E951A.roa (raw, json)
Hash identifier: RtRQgAlmehkiDYTDCpVAMr/Ght/DEOstt/eZeD8lpWQ=
Subject key identifier: 80:C4:03:91:5E:06:0B:FA:73:17:98:7E:A8:F8:45:7E:26:5F:E3:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0167CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B469E7AEF4F611EF89CA02BD762E951A.roa
Signing time: Thu 27 Feb 2025 10:36:30 +0000
ROA not before: Thu 27 Feb 2025 10:36:25 +0000
ROA not after: Wed 26 Mar 2025 10:36:25 +0000
asID: 62240
IP address blocks: 154.195.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92111 (0x167cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:36:25 2025 GMT
Not After : Mar 26 10:36:25 2025 GMT
Subject: CN=67c0402e-906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:db:64:d8:30:39:62:d6:1d:c7:93:e1:19:
5b:54:4b:ec:86:96:29:7e:63:b2:44:5a:32:13:51:
e4:1e:23:1b:10:e5:bb:53:30:df:bc:59:8a:e9:fb:
17:2d:e9:d8:c6:aa:32:57:2e:57:f8:3a:83:83:42:
9a:79:0e:f7:4b:4c:2a:25:0f:03:35:20:1c:ed:30:
be:f6:2b:59:fb:e9:63:13:3d:b1:51:3c:4e:b9:fe:
af:d4:85:5b:ab:07:a6:53:55:96:2a:ea:2b:bc:83:
c1:96:43:57:49:78:9c:c5:e6:28:b7:44:55:54:53:
cb:a6:3f:bb:b1:b9:c9:df:44:e9:99:fe:da:2c:86:
5f:bb:00:e9:f6:44:72:57:5c:f8:12:39:83:8a:d6:
f9:64:41:53:63:bd:09:a3:2c:e3:1f:40:22:d2:48:
12:ce:d7:b0:29:01:7c:f9:8c:70:de:4e:1f:dd:0b:
6b:c9:a5:fd:a1:fe:62:55:44:5b:90:1a:b4:45:5b:
40:96:b4:da:84:52:e7:07:d2:43:69:af:cb:2e:b0:
e9:a2:a6:58:81:89:b0:27:78:75:b4:e6:ea:ff:d1:
7d:73:65:d5:71:08:41:74:eb:ea:4b:da:6a:5e:c2:
42:3c:90:04:4a:2a:af:3f:34:6c:6c:74:09:24:52:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:03:91:5E:06:0B:FA:73:17:98:7E:A8:F8:45:7E:26:5F:E3:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B469E7AEF4F611EF89CA02BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:37:8e:dc:71:8c:39:75:96:be:a6:f4:a0:d0:c6:05:64:1b:
3e:bf:51:77:c4:e3:a2:7d:9b:8d:29:50:3b:b5:98:57:19:31:
45:ab:9e:db:72:9b:d0:e8:07:53:a2:e5:c6:2c:ac:4c:dd:1d:
49:d5:37:c5:82:c8:26:b1:db:cc:6b:ee:ac:23:73:ce:58:ea:
cd:6a:d4:b2:83:8f:65:94:34:b0:81:68:b0:aa:27:42:5f:a4:
e3:1f:c0:28:5d:d0:1f:7f:ca:14:5b:4d:81:40:88:f6:eb:9d:
b2:11:cf:92:cc:3e:47:03:1f:4c:e1:d6:fa:77:b1:ca:47:4e:
d6:f4:42:d7:b0:d7:9b:1a:76:99:c0:b1:40:87:db:4b:ca:fe:
50:91:75:50:81:46:01:01:9e:40:4d:cd:b9:89:ce:da:f0:7a:
36:e2:07:61:14:9c:23:5b:93:70:38:ea:4d:6d:bd:f7:59:fb:
8f:24:c6:0b:e6:a4:02:e9:20:ef:cb:8d:51:63:c8:24:c1:45:
ca:3b:6f:77:05:3f:5b:94:3a:bd:ed:b2:6d:1f:db:54:9b:82:
5c:85:46:0c:91:d5:a5:0c:38:1f:ba:b1:be:04:19:bd:aa:8c:
d8:37:ae:36:31:ce:d1:84:be:1e:c8:a6:44:c7:af:34:14:69:
52:50:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:26:14 2025 by rpki-client