Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD42085EF81911EF903E6EA1762E951A.roa
File: BD42085EF81911EF903E6EA1762E951A.roa (raw, json)
Hash identifier: aai5uiLu9FFPZQ33Bsob51nexjcOPtTs1RKgsWkyOvA=
Subject key identifier: FB:58:AF:7B:82:55:0E:8A:C2:49:46:C9:2E:EC:3D:BD:88:11:C2:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017010
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD42085EF81911EF903E6EA1762E951A.roa
Signing time: Mon 03 Mar 2025 10:24:51 +0000
ROA not before: Mon 03 Mar 2025 10:24:46 +0000
ROA not after: Mon 31 Mar 2025 10:24:46 +0000
asID: 202656
IP address blocks: 154.219.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94224 (0x17010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:24:46 2025 GMT
Not After : Mar 31 10:24:46 2025 GMT
Subject: CN=67c58372-5dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:7f:53:48:24:70:12:f7:69:39:00:48:51:
48:00:70:92:5d:37:84:7b:d3:c6:c1:90:7d:a3:1a:
a4:30:42:2f:24:e4:b7:d8:0f:68:cf:19:d3:53:15:
06:c6:79:76:25:76:99:9d:60:c7:b2:d5:93:69:cd:
3d:4b:3f:93:7f:52:f5:65:5c:5d:14:03:7f:ef:ec:
89:4d:ca:24:f9:9f:ab:7a:22:c7:79:ad:a7:ef:e9:
ac:e4:62:71:e1:21:1f:f1:be:cf:da:09:7f:79:b8:
67:00:5e:8b:1c:cf:bd:ed:13:00:e7:48:ba:b4:c8:
58:dc:d6:24:3f:92:ee:9d:22:d1:e1:e7:9e:8d:61:
ba:f1:ae:c7:dd:7c:62:68:60:4b:32:b5:53:9c:e9:
3a:56:c6:cd:11:27:6b:2e:5e:fd:6b:d4:86:1d:d6:
25:22:6f:36:11:8a:8a:a0:53:cb:b0:af:fb:4d:ac:
d4:a4:66:8b:80:99:97:43:06:5a:c9:f0:3e:e3:a9:
17:f6:0f:e6:77:f2:81:db:14:cc:d3:d6:a9:04:d9:
d6:e2:e9:4e:6d:d5:b3:ae:12:6d:1e:ff:73:1f:4a:
c3:ac:1a:1f:30:9f:da:28:98:13:dd:f4:06:21:ae:
5d:f8:d2:31:0a:ac:88:49:9e:5d:8e:34:f5:5e:22:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:58:AF:7B:82:55:0E:8A:C2:49:46:C9:2E:EC:3D:BD:88:11:C2:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD42085EF81911EF903E6EA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.21.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2b:00:a0:00:c7:21:41:36:de:33:dd:90:af:aa:6a:50:0b:
e3:9a:4d:f8:05:25:54:06:e0:d1:c7:cb:b3:62:84:4d:a4:50:
fc:bb:60:de:52:2c:26:dd:9f:ea:51:57:2e:91:c2:37:26:2d:
94:b1:16:9e:37:c4:28:30:91:a5:d1:9a:98:75:a8:f8:16:e5:
78:ad:b2:df:ed:fd:63:f8:f7:e0:2e:a1:28:65:10:21:61:a3:
9b:f6:9e:35:8a:65:f9:58:47:e8:ee:87:dd:d5:01:a1:a2:8e:
8e:e2:c6:74:b5:ba:5b:f1:30:ac:fd:20:bd:71:fd:c6:88:c4:
0d:1f:6e:28:d3:0f:8d:5c:17:53:ec:94:dd:b0:43:d3:f2:27:
a3:bf:3c:de:03:c4:98:9f:f3:da:f1:ef:0a:69:69:2d:a8:c7:
29:89:fa:e3:37:30:6d:7a:3a:f6:91:42:cb:c5:7b:9b:ca:2f:
f1:a4:7d:5a:0f:91:e7:a4:ef:9a:72:c6:c0:f7:37:b5:86:82:
46:38:db:3e:b5:53:24:eb:8a:e3:05:9f:a1:5c:06:18:24:b1:
3e:86:b2:d8:59:44:4b:2a:33:e6:37:49:d2:7d:37:b6:c6:45:
02:66:fc:a8:f2:26:38:1f:cf:4d:e2:22:53:61:c3:34:6b:48:
e8:8d:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:30:31 2025 by rpki-client