Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAAC8546F1DF11EF98C286A5762E951A.roa
File: BAAC8546F1DF11EF98C286A5762E951A.roa (raw, json)
Hash identifier: XlUg+WP4cU82MQqSLiZANHDLirzLPCgqwo1jOvHJn4A=
Subject key identifier: 90:01:90:54:A1:D3:B5:0B:BB:63:50:E9:D7:88:C4:FA:F5:98:03:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAAC8546F1DF11EF98C286A5762E951A.roa
Signing time: Sun 23 Feb 2025 12:14:28 +0000
ROA not before: Sun 23 Feb 2025 12:14:25 +0000
ROA not after: Thu 27 Mar 2025 12:14:25 +0000
asID: 18779
IP address blocks: 154.206.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88939 (0x15b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 12:14:25 2025 GMT
Not After : Mar 27 12:14:25 2025 GMT
Subject: CN=67bb1124-d385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:70:80:ee:69:68:c6:69:d2:fa:10:09:1b:
31:54:aa:cd:92:fa:65:79:9c:67:b1:47:a3:30:aa:
ce:a8:0a:2a:7f:a2:5c:de:83:9c:cc:42:f1:81:17:
5b:46:8c:5f:1b:70:07:6f:e6:34:50:c1:7a:1a:56:
9b:8f:4f:e7:54:64:8f:c8:ee:4d:ab:bd:6a:f1:a5:
9b:de:fb:9e:d7:73:5e:75:9f:55:b1:c2:dc:b3:90:
f3:a6:62:8f:70:6e:16:39:d8:69:45:f9:d5:59:2b:
67:da:3a:b0:5d:1d:0c:4a:56:44:be:c3:bb:84:34:
1c:b3:db:63:0d:4c:74:fe:e7:a7:4b:c8:4e:3d:74:
d7:9f:2d:d7:59:45:ec:f7:f8:10:ad:8c:31:a7:91:
e6:23:a2:db:62:6b:c6:2c:20:aa:20:75:6c:6e:9b:
39:9b:f4:71:78:52:de:80:20:0c:02:2e:3f:d4:a3:
25:f8:40:43:2d:eb:46:4e:12:e0:09:ef:51:4d:cc:
41:88:f3:14:bc:35:b9:c5:06:7e:e0:d8:57:af:9a:
1a:47:fd:5b:13:39:27:e1:83:39:4c:14:9b:ac:38:
2d:46:57:73:a2:6e:17:38:cd:ee:58:af:bb:c6:fc:
85:a4:2b:96:7f:24:39:d0:6c:e2:17:dd:f5:b5:d7:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:01:90:54:A1:D3:B5:0B:BB:63:50:E9:D7:88:C4:FA:F5:98:03:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAAC8546F1DF11EF98C286A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a7:4f:31:74:94:ad:5d:51:02:aa:2d:c1:1b:8e:cd:58:1b:
5c:e6:b1:c1:67:8a:c8:ec:27:d4:cd:2c:3f:6a:0c:56:e1:0c:
bd:db:ae:7f:9b:a4:1d:68:f3:5f:3a:14:cb:56:fe:ef:c8:7f:
b1:1d:82:e4:99:15:a8:76:54:90:1d:b0:a4:9d:c8:45:f7:9d:
59:b2:76:da:86:6a:39:6a:e3:f5:27:95:eb:7a:ea:fc:cc:2c:
4f:e2:37:34:05:24:05:53:65:0e:12:d0:a6:ad:bf:58:b0:fe:
d1:f1:b3:72:d2:ae:32:d4:d3:08:a8:fa:a5:4b:2d:ba:a7:ad:
e3:30:70:90:2b:e0:0c:51:6f:f1:c6:1b:0d:07:1d:c9:9a:2e:
9b:4c:80:1a:5b:d8:93:b4:bd:8a:2c:92:3f:a7:a2:87:85:8a:
c3:b7:6b:a5:ac:dc:5c:3c:1c:ac:ca:9f:47:be:78:fa:af:9f:
75:3b:39:04:61:b9:d0:25:ff:f0:d4:63:3d:7e:31:47:30:22:
9f:bd:28:44:a8:2a:f6:90:5a:94:85:98:00:7a:a4:58:57:4d:
86:3a:45:18:fd:ec:2a:7d:65:59:60:1f:d7:ef:c2:68:76:38:
9c:53:7c:23:b9:74:a3:1d:31:92:77:49:c1:b9:3e:36:9a:13:
70:9f:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:11:20 2025 by rpki-client