Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B84610EEF33111EF88CB6890762E951A.roa
File: B84610EEF33111EF88CB6890762E951A.roa (raw, json)
Hash identifier: j2J0S5broGcVoBAGqRY90b639HMbOmamIWtNsvi4T20=
Subject key identifier: C1:47:7B:86:C4:5F:4E:5C:F6:98:47:A7:59:26:5F:A1:E3:16:F9:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B84610EEF33111EF88CB6890762E951A.roa
Signing time: Tue 25 Feb 2025 04:33:54 +0000
ROA not before: Tue 25 Feb 2025 04:33:51 +0000
ROA not after: Wed 26 Mar 2025 04:33:51 +0000
asID: 39600
IP address blocks: 154.94.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89381 (0x15d25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 04:33:51 2025 GMT
Not After : Mar 26 04:33:51 2025 GMT
Subject: CN=67bd4832-063a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:ea:47:1b:84:bc:b5:1b:36:8d:b4:b9:84:
a7:ac:4f:84:c1:8a:b4:4d:d7:05:d2:60:0f:47:c2:
0f:60:b4:b3:af:4a:e1:f5:50:20:37:86:36:04:85:
fa:2e:e9:af:95:e0:d1:d4:78:aa:d7:ee:93:01:b9:
c0:62:90:e2:d8:ba:14:32:1c:ab:5c:19:a6:65:41:
ae:8b:37:9d:c1:9f:93:a7:b6:7a:ec:b6:95:56:42:
4a:88:f8:35:0d:2a:ea:23:ee:28:60:32:53:8b:be:
0c:a6:6d:b4:b8:b8:fd:cd:8b:b6:92:0d:84:c2:fa:
0a:86:30:40:bf:10:74:3d:f2:ce:c8:82:fe:c6:81:
80:e3:48:1e:11:05:3f:95:18:d3:80:02:ef:30:52:
d8:91:ec:63:64:c3:d5:8b:3f:08:81:ee:a8:dc:c0:
3a:cf:32:a0:01:b4:c9:ac:0c:67:19:a7:0b:b5:6b:
f0:43:3a:29:e4:79:c2:41:bb:a8:2e:d4:00:15:92:
e1:28:92:54:b3:f0:57:fe:8f:c2:f1:b6:2a:d2:cc:
b2:37:84:fe:1f:e4:e6:ac:f6:d5:9d:1c:8e:10:d8:
3c:64:28:7c:13:51:1e:54:ef:12:d9:34:f2:5d:22:
6b:d6:d2:50:5a:ab:04:3e:ab:ff:bf:ef:f2:e3:47:
e2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:7B:86:C4:5F:4E:5C:F6:98:47:A7:59:26:5F:A1:E3:16:F9:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B84610EEF33111EF88CB6890762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.33.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4d:ab:10:e4:f7:be:5f:ac:42:da:5f:a3:85:73:4d:36:85:
7b:2d:2f:6b:77:f2:82:56:d0:21:ee:9d:02:84:6a:db:45:e7:
7e:3f:ab:e2:95:2b:9b:a6:ce:bf:83:93:a6:88:b2:fe:f4:79:
41:6c:80:2b:ec:23:1f:0d:ed:cc:5a:99:24:b9:06:36:2d:7c:
c0:d3:66:b0:83:bd:07:d7:a1:50:11:3b:b3:68:45:c0:3b:ec:
59:f2:d7:56:da:f4:f0:f8:01:d2:27:9b:ff:27:a5:a8:24:78:
59:30:e4:35:f2:68:ea:ed:76:a4:a3:3d:59:a0:8d:7d:de:a0:
ae:e6:72:55:2f:6f:1e:19:cf:e7:2b:9d:fd:9e:6b:14:e1:df:
4e:df:4d:59:da:1d:73:00:2b:a1:10:65:66:84:0f:5f:e7:91:
73:35:c3:73:03:2d:9b:01:65:de:8b:d6:2e:63:d3:ef:a9:b3:
4e:06:06:eb:1a:76:5e:d3:60:8f:13:cc:99:b0:44:41:1e:b5:
c0:82:ae:89:6e:cb:3d:ac:bd:71:32:50:11:4d:e1:92:9d:ad:
c1:a4:78:95:65:af:3b:c1:de:20:3e:f7:74:ee:53:ba:7e:7f:
2f:61:b0:79:95:65:04:7b:2b:44:54:bc:a6:8d:c3:7e:96:e4:
7c:39:bb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:40:19 2025 by rpki-client