Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5471AC6F81A11EFA9F5ACA8762E951A.roa
File: B5471AC6F81A11EFA9F5ACA8762E951A.roa (raw, json)
Hash identifier: Y1ZyWvD/qjxQvyqpMVxxnA3aI63q0tnKsFZ9k5QqAew=
Subject key identifier: 94:88:0D:C5:56:E8:87:C4:09:AB:EB:B5:58:8B:1F:EA:D6:86:D2:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01701D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5471AC6F81A11EFA9F5ACA8762E951A.roa
Signing time: Mon 03 Mar 2025 10:31:47 +0000
ROA not before: Mon 03 Mar 2025 10:31:43 +0000
ROA not after: Mon 31 Mar 2025 10:31:43 +0000
asID: 202656
IP address blocks: 154.219.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94237 (0x1701d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:31:43 2025 GMT
Not After : Mar 31 10:31:43 2025 GMT
Subject: CN=67c58512-3119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:da:fc:c9:cb:22:f5:08:c4:72:7c:6b:8e:
a0:a7:5e:99:e7:05:50:9b:f7:da:82:1f:0c:5d:37:
61:01:52:e0:13:19:92:61:4b:9d:a9:67:16:05:63:
92:27:1e:e6:96:3e:a7:c5:4e:f5:37:35:48:4f:43:
77:69:db:e5:ca:da:8f:eb:10:37:41:1f:ce:5a:cd:
4a:a9:8c:74:0a:90:50:00:45:8a:c5:90:2a:fb:77:
52:19:37:e5:3b:e5:a2:d2:fd:78:fb:ee:76:e0:74:
9a:49:24:5a:27:24:2d:8b:20:1a:4f:c2:da:97:a3:
1d:2c:00:6b:cf:70:3b:d0:64:a0:0f:67:39:51:6b:
51:17:7e:df:20:42:ad:70:6d:ad:eb:66:2d:ab:ce:
d2:9c:b7:53:78:a3:59:09:dd:4f:3d:22:fe:38:06:
3b:a6:5e:b3:f3:d1:fa:b4:9d:8f:19:bc:c3:30:1a:
99:9a:42:53:ef:30:67:18:ce:c8:c4:ef:d6:63:25:
c2:ce:1e:b5:88:44:6a:8f:60:1e:50:d1:54:a8:c9:
55:0a:ea:ed:3b:19:bf:f5:7f:56:25:da:fe:9f:b1:
03:13:41:9a:35:11:ea:9c:b4:c7:f6:b7:19:d8:17:
f4:70:c2:01:dd:c1:d2:b4:3e:8a:77:aa:bb:19:16:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:88:0D:C5:56:E8:87:C4:09:AB:EB:B5:58:8B:1F:EA:D6:86:D2:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5471AC6F81A11EFA9F5ACA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.23.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:76:80:de:67:c8:90:4b:22:7f:85:9c:1a:55:d5:2d:3c:b5:
91:99:cb:83:20:b0:bc:95:48:29:f1:02:7b:6d:99:f7:74:f0:
6d:b0:30:56:0e:6c:69:be:29:82:8f:75:d3:6a:b9:6c:7a:d8:
7c:07:da:13:75:b2:ba:68:97:14:54:e6:b7:b3:1b:28:4a:76:
01:1f:c7:81:d2:1d:09:ef:70:c9:b5:18:8e:cb:61:65:f8:5b:
e7:38:ea:9e:ac:82:96:09:53:10:8f:d9:0b:4b:3c:ce:5c:99:
70:f2:51:da:14:7c:c2:27:54:c3:2c:64:03:83:0e:95:ca:33:
97:2b:6e:02:ed:cc:5f:a7:7a:2e:fc:48:4b:72:18:b2:ad:8d:
a6:78:81:28:f6:ee:8a:2f:7c:c8:4f:f4:7f:16:55:ae:09:e1:
48:80:95:af:cc:c0:b9:1e:1d:44:20:86:a9:78:2f:ca:cd:fb:
ac:2b:22:ac:d6:c4:ce:76:6f:cb:7c:33:9b:10:21:1b:d1:ad:
1a:29:49:f1:71:1b:23:5d:5e:16:27:5b:0d:bf:f8:5e:24:62:
59:3a:c9:bb:a5:20:85:10:96:89:58:67:46:6e:b9:e7:8f:2b:
ca:9f:a8:ed:1c:16:ae:28:30:48:13:f1:79:61:71:ca:bc:68:
00:5f:f0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:06:42 2025 by rpki-client