Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCD8EF1AF5BA11EFA14A0B7D762E951A.roa
File: BCD8EF1AF5BA11EFA14A0B7D762E951A.roa (raw, json)
Hash identifier: Xf2u5YyNVq+bUUTzToPwibh+REtE8cy9oX61GkULUP8=
Subject key identifier: 53:1F:F9:20:9D:32:58:1F:D4:25:CE:28:62:77:31:6B:5D:13:B1:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCD8EF1AF5BA11EFA14A0B7D762E951A.roa
Signing time: Fri 28 Feb 2025 09:59:45 +0000
ROA not before: Fri 28 Feb 2025 09:59:42 +0000
ROA not after: Mon 31 Mar 2025 09:59:42 +0000
asID: 54600
IP address blocks: 154.202.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92789 (0x16a75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:59:42 2025 GMT
Not After : Mar 31 09:59:42 2025 GMT
Subject: CN=67c18911-9f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:b0:ed:11:01:d9:56:08:e6:a0:a7:76:8f:
50:3a:d2:6c:f2:eb:6c:b0:04:b5:40:e2:76:61:45:
a7:43:85:6a:8c:07:b2:8c:f1:a8:35:90:ae:a4:21:
cc:e8:bb:78:cf:f5:c2:d7:3a:42:d9:c4:8c:49:57:
6f:a2:e8:59:d4:05:27:82:0e:ff:6d:ac:36:73:d4:
dc:60:e3:e8:8a:5c:71:b1:9d:0c:33:99:03:77:2f:
ad:a3:3c:f2:ee:9f:26:e0:1a:d5:c9:bf:92:ac:b1:
6a:04:8d:36:2c:e2:09:b5:32:42:d8:70:a4:23:05:
f3:1e:4e:b5:8f:16:80:31:25:41:08:9e:1e:e9:d3:
ab:31:40:2d:25:d8:64:df:65:45:f9:90:b1:ce:9b:
9d:e8:74:17:a8:0e:f2:f2:c7:de:62:60:95:0e:ff:
25:56:97:91:59:55:b4:d8:ef:5f:23:d2:f3:da:d4:
a4:be:96:d7:b0:d5:43:7f:af:78:f7:8e:56:17:28:
83:17:af:cc:e2:d4:f7:34:36:e5:be:6a:22:52:56:
a0:ac:44:de:22:79:4c:50:9d:e8:fc:4d:73:38:dd:
bf:fe:19:dc:00:ff:2b:41:6d:8c:c4:c9:86:b0:24:
9e:19:6b:cc:4d:a6:e5:1c:a7:97:5e:89:27:f7:9e:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1F:F9:20:9D:32:58:1F:D4:25:CE:28:62:77:31:6B:5D:13:B1:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCD8EF1AF5BA11EFA14A0B7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
97:de:ca:c3:12:6f:f0:97:ce:55:a6:01:80:85:28:ad:78:cf:
7b:14:76:f7:14:9e:69:59:fd:2f:a5:d0:a8:95:2e:a2:64:dc:
78:26:88:0c:66:83:0f:bb:b5:c3:a4:e6:5c:b8:dd:8f:dd:1f:
f0:6e:a5:da:e2:9f:a3:07:71:51:42:5c:30:bf:03:83:a6:03:
51:c9:14:6c:a0:1d:d9:96:a8:7c:bf:f7:71:ca:0e:f0:6d:3d:
d5:8f:3e:25:df:f6:f5:bb:04:ab:1e:f1:be:4f:d9:ca:f6:b5:
0f:f5:c2:36:4f:b6:21:e7:be:13:0f:b5:dd:40:82:d0:49:34:
53:0b:da:7a:92:43:5e:0a:8a:3a:31:30:be:76:b2:3c:0f:dc:
86:b0:71:7a:0d:04:36:38:8e:0f:66:19:6d:76:92:87:c9:08:
68:4a:87:5d:26:5a:e7:0d:ab:50:46:22:26:fb:f6:a2:1b:eb:
61:9b:1d:c6:27:7a:ca:1a:e7:ea:ea:e4:99:39:d4:66:ba:33:
3d:4c:17:1c:ec:97:7e:4a:ab:0c:26:ac:26:26:ea:b9:a5:df:
ac:48:72:07:72:b1:f1:7f:89:ec:e6:d6:ea:c8:d5:cf:4d:30:
e9:07:29:05:14:7d:eb:ec:bf:5b:62:90:07:43:0f:aa:90:46:
2e:27:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:33:52 2025 by rpki-client