Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE53FB0CF59E11EFBC8223BE762E951A.roa
File: CE53FB0CF59E11EFBC8223BE762E951A.roa (raw, json)
Hash identifier: dV/iDmwcBcqFid+mZiR33yiLmvHICn3r70c2s2GCeDs=
Subject key identifier: 43:02:27:47:57:6E:99:34:46:50:AF:0D:43:DC:15:56:BF:1A:9D:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE53FB0CF59E11EFBC8223BE762E951A.roa
Signing time: Fri 28 Feb 2025 06:39:49 +0000
ROA not before: Fri 28 Feb 2025 06:39:45 +0000
ROA not after: Sat 29 Mar 2025 06:39:45 +0000
asID: 984
IP address blocks: 154.200.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92625 (0x169d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 06:39:45 2025 GMT
Not After : Mar 29 06:39:45 2025 GMT
Subject: CN=67c15a35-3355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a6:90:a4:92:0a:56:c3:ec:8d:bb:71:b9:a4:
76:c0:2b:a2:80:17:84:5b:27:93:28:4a:fa:3f:5c:
00:2d:f3:dc:a4:2b:fa:ac:94:43:0a:b6:07:6b:7f:
e2:2d:28:dc:ef:f5:b8:55:00:54:7c:58:78:4f:24:
30:6a:15:e2:77:05:9d:94:79:08:ce:0b:30:df:e5:
f7:ee:d6:d6:c3:86:4d:d9:63:87:b9:be:5a:3b:ee:
f0:f5:f0:4d:a0:8e:ac:8d:0c:e7:70:1a:72:ab:24:
84:22:16:d3:a1:19:db:32:f0:25:e3:76:f5:a0:22:
67:77:49:c6:b1:e3:41:a1:91:10:49:12:df:68:1d:
b4:42:4e:35:6d:f0:0e:45:25:59:e9:94:f0:df:0a:
d3:b8:83:c5:3a:c2:67:17:35:68:26:44:9a:c7:5c:
3c:01:1d:20:58:cd:f7:cf:46:bc:7a:02:cd:1d:9e:
d9:4b:9f:c2:d8:bc:17:30:61:09:39:b9:3c:47:ac:
42:75:a1:1f:71:3d:b2:70:82:74:15:68:d5:6b:5f:
49:af:2f:08:7b:28:3b:cc:72:b0:4d:9b:ff:88:3e:
df:5c:19:96:a2:b1:94:58:e4:e6:4d:49:c0:89:74:
25:d0:88:e6:c9:ca:f2:cd:a1:d2:c7:11:0c:4a:15:
0a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:27:47:57:6E:99:34:46:50:AF:0D:43:DC:15:56:BF:1A:9D:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE53FB0CF59E11EFBC8223BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.144.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d8:8a:98:10:44:a5:f1:97:a7:2e:97:09:ea:1e:00:62:d6:
cc:4f:f2:9c:04:6e:61:e8:76:dc:f0:78:0f:8c:f6:fe:e6:46:
84:2a:f1:30:cd:18:42:88:19:9f:a0:7a:b1:fd:e8:3f:37:36:
06:15:8b:65:52:2e:1c:db:28:8a:5a:29:2c:22:3a:1f:3e:07:
ea:79:70:c5:f9:d4:01:b2:22:53:1a:39:c6:4d:74:f6:f1:09:
d1:79:5f:e4:5d:55:7e:86:ea:41:be:b1:07:eb:c2:5c:95:b7:
04:5a:77:e5:98:71:6e:91:6b:7e:29:70:ce:55:5a:8c:20:5e:
f5:c1:bc:ea:d3:66:4a:4b:b3:7b:fa:cd:2e:9f:47:3f:49:a8:
4b:71:8f:07:47:81:b2:c6:f2:7f:77:40:5b:56:70:18:55:be:
22:d2:18:f5:5c:10:08:39:6c:2a:a1:05:8c:83:5a:e3:ad:fe:
ba:ba:73:d0:03:5d:ad:86:fc:37:91:79:a3:69:a6:72:0a:b4:
43:46:b6:f2:ed:f2:6f:39:69:f8:2b:d8:e7:57:87:a8:aa:4d:
23:0a:be:a4:84:d7:0d:87:2d:94:40:94:5f:1c:b3:f8:54:55:
96:0a:ae:3d:f2:f3:44:43:94:d1:74:96:f5:f8:f6:24:db:2a:
5f:92:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:40:23 2025 by rpki-client