Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C1B474058211F0A580E267762E951A.roa
File: D2C1B474058211F0A580E267762E951A.roa (raw, json)
Hash identifier: vsluAOBHTc6OtVrTt57xxaFpmaOB/zvNRvIPy6VnEIU=
Subject key identifier: 07:57:D8:5E:77:A9:D0:42:B2:EB:80:EE:02:00:F3:61:B9:73:A6:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017545
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C1B474058211F0A580E267762E951A.roa
Signing time: Thu 20 Mar 2025 11:59:49 +0000
ROA not before: Thu 20 Mar 2025 11:59:45 +0000
ROA not after: Thu 03 Apr 2025 11:59:45 +0000
asID: 45669
IP address blocks: 154.198.64.0/19 maxlen: 24
154.198.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95557 (0x17545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 20 11:59:45 2025 GMT
Not After : Apr 3 11:59:45 2025 GMT
Subject: CN=67dc0335-1678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:88:d4:f2:69:48:fc:d2:63:34:72:6b:2a:
69:7e:76:bf:b4:25:21:a6:bb:2c:5a:bf:90:2e:97:
2d:e0:9d:1b:aa:28:db:a6:af:5a:f5:b0:88:19:60:
73:98:7f:ef:7a:7c:07:1e:b4:aa:bc:af:a4:bd:99:
9e:90:a5:91:eb:b7:f6:e2:8e:2c:f1:1e:5c:47:77:
8c:f7:e1:4b:e7:20:ae:3c:7e:15:87:0a:78:f3:56:
49:10:17:43:e9:2d:31:83:b1:f7:fd:c0:1b:cf:39:
92:14:b3:83:1e:5a:a6:6d:b6:2d:bf:55:02:66:41:
d9:cf:0b:97:1d:4d:39:fb:b5:56:31:7a:27:0b:b4:
cc:82:98:e3:df:9c:ee:69:e3:56:64:1b:18:da:cb:
a6:c7:5d:8d:9a:fe:02:c5:57:d8:a4:50:ed:bd:f7:
01:35:2e:f8:6d:5e:a8:e5:d8:22:9d:a7:df:16:71:
5d:f0:96:7e:95:e5:df:cf:ae:28:51:d3:37:04:12:
01:20:c5:b8:36:6a:88:00:96:9c:45:f9:ae:6a:cb:
f6:06:99:43:27:f6:8c:fe:77:43:95:73:88:5d:03:
92:ea:a1:bc:c9:ce:54:fb:eb:76:de:f5:2e:26:65:
ce:00:21:06:c7:d9:3a:13:0b:b0:0b:21:7a:e1:d7:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:D8:5E:77:A9:D0:42:B2:EB:80:EE:02:00:F3:61:B9:73:A6:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C1B474058211F0A580E267762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
45:0d:c4:e1:ab:36:5d:7b:5f:48:ef:5d:83:6a:3f:28:ef:c0:
13:db:1a:cb:fb:66:84:4c:b9:f8:5f:e2:f4:6b:55:a8:da:66:
0c:dc:dd:88:ca:3b:13:ec:52:5b:0a:1e:14:cc:8d:b0:dc:85:
f0:a0:4a:81:68:ea:5a:a0:ea:23:35:c8:4a:10:44:59:bc:e5:
d1:da:14:59:ad:db:db:7f:4b:12:31:79:66:d1:f2:02:31:59:
93:a7:bd:db:f8:be:97:c2:f7:90:70:f0:72:ce:b0:7c:c9:29:
d7:ba:5b:c0:69:6a:e6:a6:f0:3f:e4:a6:03:6d:66:c0:c3:3e:
9e:0f:77:da:7b:8a:1a:84:44:35:47:1d:a2:5a:6f:4b:0a:13:
cf:00:d7:3d:4d:11:17:7f:6d:48:8f:03:b1:18:d2:32:f2:ce:
0c:53:c1:c4:97:a0:ad:8a:06:5e:41:81:b5:7a:b7:f0:27:0c:
b2:7b:fb:bc:62:76:80:8a:56:1c:d0:71:fd:54:93:b7:8f:3b:
75:1c:b8:27:c4:50:89:80:4f:e0:73:63:c1:2c:ec:64:f3:12:
95:35:ac:5c:84:44:01:7d:86:24:f5:e3:c2:d9:30:86:af:16:
71:eb:a9:f3:0f:5f:67:74:7c:4f:40:40:48:59:df:6b:42:25:
a2:97:0f:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXVFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzIwMTE1OTQ1WhcNMjUwNDAzMTE1OTQ1WjAYMRYw
FAYDVQQDEw02N2RjMDMzNS0xNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvOWI1PJpSPzSYzRyayppfna/tCUhprssWr+QLpct4J0bqijbpq9a9bCI
GWBzmH/venwHHrSqvK+kvZmekKWR67f24o4s8R5cR3eM9+FL5yCuPH4Vhwp481ZJ
EBdD6S0xg7H3/cAbzzmSFLODHlqmbbYtv1UCZkHZzwuXHU05+7VWMXonC7TMgpjj
35zuaeNWZBsY2sumx12Nmv4CxVfYpFDtvfcBNS74bV6o5dginaffFnFd8JZ+leXf
z64oUdM3BBIBIMW4NmqIAJacRfmuasv2BplDJ/aM/ndDlXOIXQOS6qG8yc5U++t2
3vUuJmXOACEGx9k6EwuwCyF64dcyRQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAdX
2F53qdBCsuuA7gIA82G5c6ZhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMkMxQjQ3NDA1ODIxMUYwQTU4MEUyNjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsZAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFDcThqzZde19I712Daj8o78AT2xrL+2aETLn4X+L0a1Wo2mYM3N2I
yjsT7FJbCh4UzI2w3IXwoEqBaOpaoOojNchKEERZvOXR2hRZrdvbf0sSMXlm0fIC
MVmTp73b+L6XwveQcPByzrB8ySnXulvAaWrmpvA/5KYDbWbAwz6eD3fae4oahEQ1
Rx2iWm9LChPPANc9TREXf21IjwOxGNIy8s4MU8HEl6CtigZeQYG1erfwJwyye/u8
YnaAilYc0HH9VJO3jzt1HLgnxFCJgE/gc2PBLOxk8xKVNaxchEQBfYYk9ePC2TCG
rxZx66nzD19ndHxPQEBIWd9rQiWilw94
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:08 2025 by rpki-client