Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6950E58F50A11EFA59EED45762E951A.roa
File: D6950E58F50A11EFA59EED45762E951A.roa (raw, json)
Hash identifier: bW318eaZwxf4pTy48JpWlcmmwFXK6CneF5Q3P23nEqE=
Subject key identifier: 6B:BF:07:17:32:02:34:3C:F4:8F:B9:DF:D2:A7:29:DF:50:CB:92:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01685F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6950E58F50A11EFA59EED45762E951A.roa
Signing time: Thu 27 Feb 2025 13:00:37 +0000
ROA not before: Thu 27 Feb 2025 13:00:33 +0000
ROA not after: Wed 26 Mar 2025 13:00:33 +0000
asID: 62240
IP address blocks: 154.196.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92255 (0x1685f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 13:00:33 2025 GMT
Not After : Mar 26 13:00:33 2025 GMT
Subject: CN=67c061f5-6f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:ce:bb:3b:f0:bc:90:55:7c:b6:d1:4f:db:
02:37:2f:15:96:92:41:5f:38:df:42:ae:0c:66:de:
dc:59:0e:d8:6b:32:ab:77:e8:b5:6b:8b:76:93:35:
0f:c4:12:2c:81:2d:01:8d:72:32:e6:04:14:44:db:
df:bb:4d:2e:e3:8b:db:b1:f2:25:19:ca:1c:df:7c:
32:b7:00:61:b4:a3:19:e7:79:08:30:9d:46:54:e2:
b4:83:f4:83:5b:c2:40:98:b2:cb:35:a6:30:ea:b3:
49:37:6e:a4:04:fd:64:7c:7b:2f:15:ac:4f:11:22:
9f:ba:0e:91:bb:a8:f3:56:92:45:ad:c3:6f:21:3a:
e4:af:44:3a:f9:5a:46:16:e4:8e:37:20:8e:3a:9a:
57:84:b0:76:fb:b3:8d:f4:bd:01:fe:b4:fd:72:43:
df:0c:71:41:6c:6c:d6:9b:b3:f4:aa:3d:59:1a:90:
b9:98:f6:ec:39:9b:b5:e5:9a:1a:79:fc:19:9f:a0:
45:a3:ef:b5:23:b1:67:65:4f:53:65:b3:df:bf:f8:
bb:ec:7c:55:e4:86:57:45:31:d8:27:49:df:2d:70:
99:61:61:ad:e9:4e:c2:6c:49:6f:1c:52:a6:c6:ee:
a2:9e:17:5d:ef:7f:8f:78:92:57:c3:a0:de:0c:d2:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:07:17:32:02:34:3C:F4:8F:B9:DF:D2:A7:29:DF:50:CB:92:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6950E58F50A11EFA59EED45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.46.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:72:73:bd:13:8d:c9:5f:81:3d:63:44:ee:a1:e3:1a:87:0e:
f5:8c:a9:1f:b4:d7:52:ff:d9:05:50:7d:7d:bf:64:33:26:98:
83:ea:de:de:a7:8e:1c:6b:5d:59:9b:ab:71:3e:fa:af:cc:33:
66:a9:8b:b3:fe:05:05:c6:d5:9e:87:07:ff:76:a2:19:ac:b8:
0b:06:59:86:b6:8b:b7:67:9b:f7:03:06:ed:48:0b:6a:a1:39:
73:2d:0a:05:15:71:52:2f:b8:65:09:a4:54:65:29:55:54:a9:
db:00:1f:40:ae:ca:47:0b:e2:7d:01:ae:5a:51:0f:d0:fb:56:
cf:4d:c1:c2:42:4c:b1:9c:a0:d2:de:a1:58:7f:3d:1c:68:3b:
68:d8:32:ed:a7:07:1e:71:58:ba:0a:cd:cb:5b:ad:bd:3f:38:
83:ec:41:28:4f:e2:98:8f:0a:cf:ab:27:dc:49:53:4b:5c:8b:
b3:d2:1f:8e:94:62:63:49:45:d3:3a:e3:6f:c7:79:61:0e:eb:
2b:16:f4:ca:7c:dd:f6:a5:a7:80:72:93:cd:15:ed:b6:61:31:
6f:6b:35:63:85:4d:c5:86:65:7a:92:7a:52:25:f6:9f:45:6a:
53:40:89:a1:1e:18:e4:b9:f7:ea:ec:74:bb:1c:92:d9:c6:f8:
05:13:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:46:24 2025 by rpki-client