Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB704106F62211EF876533BD762E951A.roa
File: BB704106F62211EF876533BD762E951A.roa (raw, json)
Hash identifier: aDgu0Pa1VSGbokJGVyyhtQ7xyVAeoSsntOyzPcCLw20=
Subject key identifier: DB:80:15:E9:53:30:69:E8:06:08:A1:33:EE:04:02:3F:0E:D6:B0:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB704106F62211EF876533BD762E951A.roa
Signing time: Fri 28 Feb 2025 22:24:11 +0000
ROA not before: Fri 28 Feb 2025 22:24:07 +0000
ROA not after: Wed 26 Mar 2025 22:24:07 +0000
asID: 62240
IP address blocks: 154.196.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93323 (0x16c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:24:07 2025 GMT
Not After : Mar 26 22:24:07 2025 GMT
Subject: CN=67c2378a-79d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:a0:66:68:95:b0:8b:dc:8d:28:c0:43:10:
8f:57:74:a2:df:e2:67:7a:cb:2a:74:7f:1a:ee:cf:
d1:5a:69:a4:ce:8a:46:d7:53:50:fc:33:19:d7:25:
c8:b0:71:18:26:ba:48:13:72:00:5f:b4:54:26:0e:
15:ba:78:b8:aa:0f:2a:16:18:ef:b3:42:69:db:2f:
82:23:d3:91:90:8a:b7:8a:fc:a1:69:23:49:26:f4:
92:a6:5a:2f:16:f7:f5:ca:e4:8c:ad:8d:d0:df:37:
c2:14:db:4d:e6:6d:0a:42:27:53:cf:60:c6:44:5e:
c6:62:8a:a6:3d:21:17:46:a9:44:ae:e2:8d:46:cb:
4e:fb:32:87:b2:0d:35:a0:cb:82:3e:d9:02:57:28:
e4:7b:84:0e:13:1d:9c:07:29:75:6e:77:d2:af:c4:
14:c5:77:6c:a0:a9:6f:e0:db:67:1d:a8:da:cf:35:
18:99:7d:a0:63:b1:1d:76:4b:b7:f9:3f:45:33:68:
7b:ef:3f:b6:61:ef:5f:4f:dd:be:3c:e1:64:ca:aa:
e3:ca:c8:d9:50:e0:4e:f3:f3:13:5b:a8:cb:e6:21:
6f:b4:0b:9d:bf:55:00:63:19:23:6f:73:d7:0e:65:
ba:a8:b6:bc:57:1c:f3:28:43:75:1e:e0:f9:65:3c:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:80:15:E9:53:30:69:E8:06:08:A1:33:EE:04:02:3F:0E:D6:B0:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB704106F62211EF876533BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.84.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ea:35:8c:11:b8:db:4a:50:1a:8f:5f:b4:9a:b3:c3:64:6e:
e8:13:59:82:9d:e5:a6:62:1b:0d:f6:9a:b7:c7:1e:12:2f:a7:
9c:28:af:be:4b:b7:ab:ad:4d:01:be:61:86:96:59:40:79:83:
d4:59:06:76:c4:f8:c8:bc:73:c8:a4:24:6d:c7:02:2e:2b:53:
12:9b:f9:e0:42:26:0b:81:0d:65:db:ac:9a:15:6f:95:81:84:
b0:1d:1d:9e:08:c2:8a:41:d8:32:91:7f:f2:bc:bd:99:c8:ed:
ca:3e:cf:1c:97:7e:b8:8b:95:4e:3d:3b:60:d0:b8:de:3d:fb:
14:79:c1:00:18:d5:ff:6b:b7:98:82:d4:a0:fd:80:71:95:11:
10:17:0f:99:b5:35:d2:a9:47:cb:93:cf:4b:b9:80:9f:0d:fb:
89:e8:8c:6d:a4:27:51:e4:f2:48:81:d8:36:b6:c0:31:95:10:
1e:88:52:46:aa:5a:66:37:c5:e5:e8:68:a1:39:60:8a:ad:09:
55:78:ee:56:2d:04:17:57:7d:0b:58:5b:b3:57:45:1f:e9:61:
c8:aa:52:30:b1:47:4e:cb:27:f0:ef:0b:47:82:e5:86:f0:ec:
09:47:d2:03:d8:5e:b0:e7:ee:21:0f:a0:f9:4a:20:c2:7f:ba:
91:d0:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:38:00 2025 by rpki-client