Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA525C80F4E411EFA3AC8E44762E951A.roa
File: BA525C80F4E411EFA3AC8E44762E951A.roa (raw, json)
Hash identifier: mzzA/8BSwxFkAlFer2AWXBd5l3rmct3tPEF4wRaR2sU=
Subject key identifier: 2E:3F:17:41:88:43:25:0B:C3:EC:BA:B7:F6:CB:8C:6F:EF:25:CE:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA525C80F4E411EFA3AC8E44762E951A.roa
Signing time: Thu 27 Feb 2025 08:27:49 +0000
ROA not before: Thu 27 Feb 2025 08:27:45 +0000
ROA not after: Wed 26 Mar 2025 08:27:45 +0000
asID: 62240
IP address blocks: 154.195.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91877 (0x166e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:27:45 2025 GMT
Not After : Mar 26 08:27:45 2025 GMT
Subject: CN=67c02205-7cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:23:a1:d1:d4:29:68:a8:6f:7a:bc:38:02:
ad:ee:ed:bc:ca:3d:eb:d5:9e:90:d1:f3:b1:8d:7e:
73:27:d0:b6:a9:f0:70:47:5f:dc:e3:dd:2b:37:00:
0a:01:11:a7:0a:ac:62:e4:9a:57:54:0e:e8:e2:10:
76:09:b9:2f:05:49:a6:f1:ec:5b:e4:2b:e9:7f:ba:
c7:8b:ce:84:2a:3c:bc:4e:74:6d:e1:30:e8:7f:ad:
cd:92:2f:1f:65:0a:41:9d:b0:f1:bb:00:ca:ca:92:
87:a3:af:a9:74:6d:43:bb:fd:d1:20:70:34:2b:2f:
ca:65:d8:60:0d:34:cc:cb:b8:70:53:60:a5:5f:1a:
f7:92:3b:2d:50:ef:7d:46:a6:08:19:74:17:06:8e:
84:28:85:e5:e0:62:63:07:52:11:df:c7:e0:7b:fc:
41:b1:7a:6e:1f:f6:00:83:54:d0:29:6d:58:97:80:
1e:cf:b1:36:1b:6e:fd:79:cd:c7:1b:a7:ed:d7:8b:
78:4d:01:1c:a9:ea:52:8d:9f:f1:13:d9:6b:d6:0d:
c8:01:9d:72:01:f3:43:d9:0a:fd:78:db:71:8a:1f:
2c:33:b2:ce:9a:fe:9d:2c:15:ff:25:c5:2f:83:fb:
89:f5:24:39:8f:2a:68:7f:7f:b2:fd:2c:df:24:9b:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:17:41:88:43:25:0B:C3:EC:BA:B7:F6:CB:8C:6F:EF:25:CE:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA525C80F4E411EFA3AC8E44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.184.0/24
Signature Algorithm: sha256WithRSAEncryption
12:51:5e:bc:04:58:2d:a7:80:10:fa:54:9d:37:b3:dd:ec:10:
62:6d:d7:bd:93:00:21:af:f4:bf:b4:c2:dc:3d:61:c9:16:74:
9f:5e:33:d7:e9:40:23:cf:6f:c0:0a:4b:79:3d:46:a5:e8:c6:
a3:f4:5e:1b:a9:d7:ea:91:ed:3d:f4:63:20:d8:79:5b:da:43:
33:c8:8d:a4:f8:09:9f:76:58:5d:73:cd:1c:b6:2c:cf:88:01:
61:09:19:41:1d:9c:ad:29:ae:2d:a5:67:39:f9:88:ee:45:00:
c3:05:db:25:ee:e0:a5:99:b0:38:f9:c7:b8:50:35:81:72:99:
a9:a5:46:37:66:d1:df:88:fe:af:ca:8f:3e:ea:0c:36:5a:ad:
ac:61:cb:f1:5e:42:e7:d8:d1:58:f2:26:4c:27:71:87:8a:28:
af:28:27:8a:00:01:3e:3a:36:18:95:0a:46:ca:08:2c:f9:dd:
83:3f:82:c5:bc:ed:ba:80:92:8c:d5:61:96:e7:62:91:13:ea:
bc:91:8d:9a:5f:98:70:4e:0f:ac:8f:c1:8a:2e:4f:04:e3:f5:
d8:06:d0:44:b9:da:80:33:1f:9c:f7:52:e0:10:5b:47:d0:71:
bc:61:4b:db:45:9f:79:f5:eb:3e:80:19:2a:44:c0:35:0a:a0:
01:e8:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:01:46 2025 by rpki-client