Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3312E92F68911EF8557BD8A762E951A.roa
File: D3312E92F68911EF8557BD8A762E951A.roa (raw, json)
Hash identifier: BlmR2up92c1+uiWxi2MyqofhZMS+uPXL8UJ/shHLj/E=
Subject key identifier: 7A:8D:E8:25:A7:4D:1A:29:B2:F3:85:4E:25:AE:33:C1:6B:8D:AE:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3312E92F68911EF8557BD8A762E951A.roa
Signing time: Sat 01 Mar 2025 10:42:09 +0000
ROA not before: Sat 01 Mar 2025 10:42:05 +0000
ROA not after: Mon 31 Mar 2025 10:42:05 +0000
asID: 202656
IP address blocks: 154.222.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93660 (0x16ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 10:42:05 2025 GMT
Not After : Mar 31 10:42:05 2025 GMT
Subject: CN=67c2e480-9aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:5b:02:61:b0:5b:88:53:cb:c1:74:40:5a:
c1:1a:77:ec:f6:ac:7c:84:21:de:b2:c2:d8:c5:96:
fe:9a:43:7f:00:ba:21:29:c4:61:91:98:ca:b4:2e:
82:3f:47:0f:d3:ed:dc:24:b1:20:f1:e6:8f:6d:db:
b1:c5:f0:92:69:15:ae:99:5a:8d:bb:b1:1c:8c:27:
76:00:64:00:48:b4:da:49:6c:f8:3c:85:37:b0:5e:
c1:cf:a2:02:fe:64:f7:b4:ad:9d:20:86:e4:32:a4:
3b:19:93:52:25:27:ba:e3:0f:5f:9c:4f:f0:d3:3f:
6f:4b:d5:48:38:b2:75:75:da:a7:13:df:6c:c6:c5:
c3:99:d9:56:d3:23:7f:1e:f0:8f:85:5e:54:dd:bc:
a7:b3:e9:7f:da:49:8a:8e:69:6e:94:e3:cd:75:0f:
2f:e5:17:a3:50:9c:08:a2:51:49:e9:67:4e:fd:69:
e7:74:ab:35:73:a6:9d:41:5a:23:ed:1f:ba:11:d6:
94:b2:c7:c0:b8:e5:92:25:72:e2:19:ae:11:cc:03:
a4:ad:67:ad:d5:9d:d9:f6:a4:f4:ae:f3:5f:65:c3:
2e:16:a9:01:f4:bb:22:d2:4d:a7:0f:62:35:e3:83:
5c:41:6c:62:b5:5e:74:5c:84:b0:35:d2:70:a4:e3:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:E8:25:A7:4D:1A:29:B2:F3:85:4E:25:AE:33:C1:6B:8D:AE:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3312E92F68911EF8557BD8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.41.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bd:97:89:8c:f8:44:9e:53:d6:63:c2:32:13:85:16:41:99:
40:d9:37:9c:83:47:80:89:2c:f1:3c:5e:33:64:c6:20:ec:d3:
29:5e:3e:24:96:49:43:cc:02:4e:bd:c1:c1:7c:3f:b5:08:84:
0a:19:f7:2b:e9:d5:8e:32:b7:d6:df:ce:9c:39:26:c7:38:f7:
8c:41:df:d1:c1:44:7d:f0:aa:28:69:61:88:27:4e:6d:94:79:
43:ae:d9:e9:ee:53:46:d6:3c:64:4e:43:e5:d5:80:c1:5c:50:
23:8b:65:ab:2e:95:85:18:45:0a:9b:03:d1:22:48:37:40:1c:
ca:7d:dc:50:38:ea:01:0f:49:e9:26:27:41:c0:cc:4c:02:0c:
d9:22:c1:2e:db:4c:e1:93:91:8e:34:e0:45:31:c3:5c:b8:85:
23:e1:c5:a6:43:1f:4e:16:fa:73:45:cc:ff:98:a8:63:9d:55:
92:88:28:bf:6d:8e:f6:2e:95:bf:92:ff:7f:1a:44:24:b0:c3:
9c:25:25:b1:62:9b:42:3e:c3:12:28:66:7a:67:13:c1:81:ee:
87:ed:55:4f:50:ce:ff:fc:67:cd:e3:72:73:2d:64:2a:89:fa:
47:f5:24:15:52:b8:9b:03:fe:6b:96:8b:6c:74:55:34:5d:49:
33:d2:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:55:07 2025 by rpki-client