Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9011876F51811EFA7D709A3762E951A.roa
File: E9011876F51811EFA7D709A3762E951A.roa (raw, json)
Hash identifier: /fobo+rPOUHcmC8tfbXl2QA6yBNjuWp4vpL/UKovv9Y=
Subject key identifier: 0D:57:94:BE:D2:31:C4:65:AD:28:B8:CD:37:DC:3C:F2:86:1A:12:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0168C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9011876F51811EFA7D709A3762E951A.roa
Signing time: Thu 27 Feb 2025 14:41:21 +0000
ROA not before: Thu 27 Feb 2025 14:41:06 +0000
ROA not after: Wed 26 Mar 2025 14:41:06 +0000
asID: 62240
IP address blocks: 154.196.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92358 (0x168c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 14:41:06 2025 GMT
Not After : Mar 26 14:41:06 2025 GMT
Subject: CN=67c07991-629c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:56:b3:25:ea:ad:41:2d:58:61:26:ae:56:
23:46:95:f4:a2:f8:71:76:3b:4b:ae:8f:4d:65:86:
1a:c1:8f:a7:c3:5c:61:0f:e4:f4:ba:8f:67:b3:26:
c5:63:40:22:a4:c9:85:66:f8:f6:f5:f6:5d:36:43:
da:25:f8:26:86:70:ac:c7:0f:9d:ce:e5:a4:c0:eb:
87:1f:94:71:71:73:ca:7e:c8:bc:2f:66:2c:18:ae:
e7:92:eb:33:5a:e8:7a:f7:61:cd:01:7f:d2:d1:eb:
87:a7:a0:f6:d6:8b:9e:3a:9a:da:95:77:49:1c:7f:
a2:25:c6:6f:6e:75:39:3d:bc:70:37:fa:f0:dd:c5:
5c:b0:3e:37:e1:55:6d:d5:6b:64:2d:47:4e:03:5d:
8c:e6:a1:60:03:00:36:c2:0c:db:0d:04:a1:46:8c:
1a:72:d3:60:1a:e0:52:01:ea:81:39:f9:77:24:36:
9c:4f:23:d6:b0:9e:9e:ea:b7:0a:4d:cf:ed:cf:5a:
ae:53:a7:63:78:41:27:a6:43:cf:3b:80:65:1c:bb:
c6:e9:73:bd:3e:0d:09:be:2b:f3:5f:c8:bf:45:3e:
9d:ca:39:0d:14:f2:84:4d:14:a1:69:89:bc:eb:3a:
df:0d:23:b8:90:e6:b5:c1:f5:13:1b:72:a5:d9:dc:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:94:BE:D2:31:C4:65:AD:28:B8:CD:37:DC:3C:F2:86:1A:12:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9011876F51811EFA7D709A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.28.0/24
Signature Algorithm: sha256WithRSAEncryption
26:cc:b1:3c:2e:e7:61:27:94:01:cc:d4:18:63:41:a8:24:a4:
57:88:0c:46:36:79:b0:fb:61:a0:54:cc:46:bd:7c:38:8b:57:
6e:aa:fb:e4:7a:bb:bc:c1:8e:9e:1a:c2:b0:55:eb:ab:3d:c6:
d6:66:76:c4:c9:e8:e5:17:9a:ac:61:58:a0:52:a2:15:5e:3a:
85:32:1f:87:72:70:1a:e2:ac:60:47:43:98:86:f1:28:b0:44:
8a:b8:3f:a4:e3:b1:50:80:2f:34:f8:71:ac:d8:f8:18:fc:02:
7c:74:21:ba:f6:6a:7b:c2:f9:aa:f8:e4:7d:26:29:8e:29:ae:
3a:6f:95:db:ba:82:00:9f:43:98:39:d7:75:65:a2:82:0d:f3:
95:62:5a:b2:ab:e7:ee:6a:44:9b:eb:db:81:d0:43:ba:43:f1:
2a:66:87:2a:f3:c9:ab:f8:c1:8a:f6:b8:fe:63:d4:31:e7:a1:
76:8f:45:97:6d:08:c3:33:56:3e:ae:14:5b:31:74:ad:e3:85:
91:1a:98:49:26:c8:22:2e:8e:5a:b4:2d:54:f4:47:9b:de:11:
05:da:a6:4e:2e:f9:38:2e:f0:93:13:c1:c4:96:72:58:58:90:
8c:03:44:cb:22:a7:c2:a1:e9:2b:45:cc:cf:37:6d:19:fb:26:
cd:82:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:54:23 2025 by rpki-client