Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8804970F5B611EFAE279B63762E951A.roa
File: C8804970F5B611EFAE279B63762E951A.roa (raw, json)
Hash identifier: 8EOwyDwX9rqwFOe+oI7JsOF8nOlu2gH4moA6z/SAbzI=
Subject key identifier: 7A:55:27:C4:45:CA:0B:78:CA:3D:5A:64:66:47:88:A0:27:E0:64:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8804970F5B611EFAE279B63762E951A.roa
Signing time: Fri 28 Feb 2025 09:31:27 +0000
ROA not before: Fri 28 Feb 2025 09:31:23 +0000
ROA not after: Mon 31 Mar 2025 09:31:23 +0000
asID: 398823
IP address blocks: 154.209.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92747 (0x16a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:31:23 2025 GMT
Not After : Mar 31 09:31:23 2025 GMT
Subject: CN=67c1826f-6e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:a2:9a:8a:eb:6f:30:78:91:3a:8f:f1:0c:
3f:ff:d2:ae:98:7c:69:30:d6:b6:42:84:ea:e4:24:
ef:a3:a3:d7:a6:31:b5:f5:c5:58:e8:fb:ed:8d:fc:
ac:7e:26:3c:ae:38:b2:d6:5b:60:f1:d9:ce:18:12:
57:98:0a:0b:c2:9d:46:81:e5:c4:3d:db:bd:88:15:
8f:2e:e5:60:c6:40:a2:71:2e:dd:0b:54:1b:d9:61:
2e:25:c3:cf:be:7f:c2:7d:87:cd:2f:64:50:ac:24:
58:93:2c:ee:3b:a2:64:9b:83:ff:84:72:30:14:92:
93:7a:f9:cd:ac:84:03:a0:ab:19:e6:b7:62:7a:29:
ab:1e:d1:f1:be:84:cf:d8:7c:51:e2:e6:f0:c3:f2:
d7:7f:52:d9:c0:6d:14:48:5a:bd:d2:01:f6:f0:f2:
61:c3:60:1e:bf:d4:77:6e:87:4c:5c:56:5c:25:67:
fb:30:32:d3:e6:31:a5:c7:e4:bb:74:0f:d5:0b:9b:
4a:0b:80:ad:16:e8:e7:97:2f:18:a9:46:22:af:f8:
cc:85:98:fc:06:4b:b5:a4:4e:32:33:2a:e4:0b:a0:
98:5c:b9:11:2b:58:ce:b1:86:f7:97:64:05:2a:45:
77:67:48:02:b8:cd:be:73:23:20:2e:9c:4f:03:f2:
a3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:55:27:C4:45:CA:0B:78:CA:3D:5A:64:66:47:88:A0:27:E0:64:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8804970F5B611EFAE279B63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.80.0/21
Signature Algorithm: sha256WithRSAEncryption
68:52:76:86:38:e1:2e:62:5b:0b:ad:63:16:94:75:11:2f:63:
08:f0:00:5b:0a:ef:cc:7d:e9:e2:ca:06:d9:da:bf:60:83:b4:
c7:8d:a2:8e:fe:8c:10:b4:46:e0:cf:84:92:ce:de:f6:cf:98:
34:22:fc:43:4e:1d:ad:16:35:b7:68:31:ba:31:43:ae:36:4e:
03:7a:ed:13:ae:82:fc:97:aa:ba:a0:b1:ca:fe:01:c2:8c:5d:
e3:4f:36:5e:1b:5e:85:d0:04:56:58:65:b1:67:3e:07:68:55:
05:28:40:11:ba:2f:62:42:f9:b1:2f:6d:4d:56:85:8b:e5:57:
e3:4c:07:5f:79:f6:61:94:e6:2a:c4:ef:62:cd:16:8b:d6:c4:
9a:33:9f:35:93:ed:68:78:de:10:41:ce:b9:2b:b2:15:5f:a7:
d9:aa:57:fd:56:42:95:50:cc:5f:2a:41:af:d5:fa:1d:2b:2e:
61:fb:14:4c:f6:af:6f:a4:6c:43:c7:0c:a9:71:70:08:9c:93:
ec:26:fc:f3:8c:36:b8:10:a6:be:59:19:50:f3:27:78:b1:0c:
0f:90:58:66:c1:24:b4:4a:4f:05:03:2d:fa:a4:f4:1c:95:b3:
a0:bd:6c:38:be:78:42:eb:66:76:97:11:af:6e:29:8f:c5:f7:
fb:79:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:19:57 2025 by rpki-client