Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5D8B794F61E11EF9363FEA0762E951A.roa
File: C5D8B794F61E11EF9363FEA0762E951A.roa (raw, json)
Hash identifier: 6tYtk/nhH54b4NAf924g5taZyTAQfGU/J6n50nNjt70=
Subject key identifier: 8C:37:DC:B6:80:74:9F:BA:61:D3:55:9F:B3:5B:BC:3F:7A:BA:40:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5D8B794F61E11EF9363FEA0762E951A.roa
Signing time: Fri 28 Feb 2025 21:55:50 +0000
ROA not before: Fri 28 Feb 2025 21:55:46 +0000
ROA not after: Wed 26 Mar 2025 21:55:46 +0000
asID: 62240
IP address blocks: 154.196.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93285 (0x16c65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 21:55:46 2025 GMT
Not After : Mar 26 21:55:46 2025 GMT
Subject: CN=67c230e6-b0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:ab:49:6b:59:a6:e2:15:db:32:06:42:de:
ce:37:f9:ae:86:1a:f4:c6:93:70:a1:2d:96:80:0e:
77:a0:b4:79:78:03:7c:5c:97:dd:87:6d:bf:24:da:
63:b8:09:4a:dc:d7:e5:fe:3d:d7:41:50:04:f5:7d:
67:da:66:3c:35:72:ac:f5:b4:d2:14:90:01:6b:bf:
b0:85:7c:28:5c:12:c2:f3:cd:6a:e4:ac:cb:a2:1f:
1f:fc:f2:b8:e3:05:7c:b7:ad:ed:bf:03:79:80:f6:
64:e2:cc:98:1c:24:00:f3:4d:af:37:b1:43:12:9d:
2f:3e:5a:83:67:52:e1:41:fa:e2:ec:03:91:41:b6:
83:5b:6e:a6:18:90:48:c7:7a:5f:b0:5d:56:1b:e6:
37:49:f3:a5:9a:47:4c:a3:38:07:b3:ac:55:61:3f:
db:84:86:cd:a6:5b:03:8c:56:17:19:05:82:8b:a4:
53:ea:71:b5:67:51:f5:83:3b:e3:7f:c6:4b:3b:35:
43:50:1d:41:eb:36:f6:de:18:7a:d4:b5:ff:4f:00:
56:56:3d:d4:ae:03:9b:c8:a0:57:6d:72:d4:fe:15:
9e:da:88:a3:fb:5a:f0:97:c0:ce:65:6b:20:a1:70:
d2:ed:c3:5b:da:42:5d:6b:d8:e1:c3:3a:9e:26:bc:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:37:DC:B6:80:74:9F:BA:61:D3:55:9F:B3:5B:BC:3F:7A:BA:40:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5D8B794F61E11EF9363FEA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.87.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:af:4f:3e:4d:1f:86:39:f2:e4:b9:81:d2:cd:76:40:20:e0:
bd:52:11:bb:f5:2b:4d:11:9c:39:3b:9a:32:21:df:4b:54:29:
c4:58:fb:a9:b8:7d:d4:c6:40:be:2e:ce:64:7b:65:22:a8:5d:
2b:73:8f:93:a2:ed:89:23:04:74:3d:18:a6:59:fa:f1:eb:8e:
fc:85:03:95:67:d9:62:80:bd:3a:b6:30:b3:08:12:63:db:c7:
db:bc:aa:45:4b:60:c1:ac:8c:92:8a:a0:1f:04:fb:72:fb:13:
c6:cc:3c:4d:b2:af:38:e4:1e:b4:7b:2d:16:ac:7a:9c:d3:f0:
58:7a:c6:7f:0a:56:de:f1:38:b8:72:64:a8:e9:ad:f2:bd:c3:
aa:6c:0c:02:60:e4:f3:5f:0f:43:56:0f:e3:05:6c:dc:d3:ae:
4d:29:9f:94:b8:3d:4d:27:ce:a7:08:f7:2c:40:57:df:b6:2e:
fc:21:eb:eb:2a:df:83:26:72:a2:31:f3:d1:69:48:df:df:f5:
7b:b0:0d:f6:50:cc:6d:05:38:fa:12:9a:d5:5f:99:54:e8:99:
a6:e5:4f:79:ea:c8:4e:54:15:2a:c6:77:37:9b:ac:57:8f:72:
9c:82:07:22:02:8a:bd:00:3a:b7:ee:db:bc:a4:1b:d7:3f:d4:
ff:5d:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:49:56 2025 by rpki-client