Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F061D856F6C311EF9BE6F590762E951A.roa
File: F061D856F6C311EF9BE6F590762E951A.roa (raw, json)
Hash identifier: 8L5Xo23Wj54atNJ6vAbjoNlmHgwxzq9umnbSnyZXTZ4=
Subject key identifier: 02:1A:41:3D:A8:AB:C0:D3:E9:48:F9:4F:66:9E:7B:4F:20:F3:74:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F061D856F6C311EF9BE6F590762E951A.roa
Signing time: Sat 01 Mar 2025 17:38:08 +0000
ROA not before: Sat 01 Mar 2025 17:38:04 +0000
ROA not after: Mon 31 Mar 2025 17:38:04 +0000
asID: 202656
IP address blocks: 154.219.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94013 (0x16f3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 17:38:04 2025 GMT
Not After : Mar 31 17:38:04 2025 GMT
Subject: CN=67c34600-dbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:bc:73:cd:8b:23:39:d3:ab:c2:7a:45:6c:
f8:2c:f4:e0:96:7c:27:08:e8:63:91:77:4e:cf:5c:
5e:44:cd:14:73:e3:db:32:af:b2:c2:3b:47:49:d6:
6d:ab:c7:66:27:3a:9a:a5:a5:7e:06:30:44:11:ce:
57:ff:e3:c8:69:5c:a3:02:c1:5d:4d:60:1c:c7:59:
27:d7:71:5a:d0:82:9e:49:5f:f4:4e:ab:00:db:06:
d8:3e:47:05:d9:95:25:03:65:55:15:0d:33:16:59:
ed:b0:fc:98:ca:ce:1b:7c:1e:f9:a7:d7:75:ab:58:
b8:80:16:a3:d6:3b:c7:cc:c6:60:43:5f:da:64:a3:
04:31:a1:72:48:61:c3:5d:79:0b:34:e0:c3:41:45:
18:d2:67:ca:2b:2f:4d:75:50:cd:2b:d4:53:51:19:
27:78:8d:7e:b7:d0:ef:66:56:56:df:61:8a:9b:e7:
e4:15:5a:2a:de:8a:5a:c4:4d:f2:5a:65:ca:5c:12:
11:84:d6:9d:d5:eb:f9:c0:ea:b8:14:30:35:d9:aa:
38:3d:31:0b:13:08:ae:5e:41:14:4f:5c:d6:d6:1b:
11:b6:cd:fe:4d:81:47:96:19:0c:b4:ed:e7:84:2c:
d7:0e:ec:6b:20:cf:05:90:a0:f1:5c:62:51:f4:bc:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:41:3D:A8:AB:C0:D3:E9:48:F9:4F:66:9E:7B:4F:20:F3:74:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F061D856F6C311EF9BE6F590762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b2:82:88:3e:0c:e3:20:57:6c:ad:c3:39:1e:84:94:b7:db:
30:42:3a:d0:c6:cb:65:87:bb:c8:78:83:fe:82:05:03:8f:dc:
5e:64:da:b3:8a:58:7d:58:80:e5:98:b6:48:eb:ba:5e:e6:1b:
04:de:40:a3:81:34:ed:26:9e:2c:17:57:81:39:27:2e:5a:96:
8f:9e:84:19:1e:57:14:5b:f6:1d:fa:88:b0:b0:45:3a:a0:4d:
53:79:4d:55:bc:b3:b7:c3:56:6f:bd:fe:23:46:4c:ba:12:6a:
6c:c4:2a:78:73:ea:59:bb:6a:46:75:fe:13:f9:66:97:7d:32:
8b:4e:7a:66:f9:26:a5:dc:85:3f:d1:56:f5:35:96:9a:18:ee:
0b:97:c7:39:74:f2:c9:a3:34:56:b3:83:fa:3f:f3:23:85:27:
c0:ef:cf:5b:35:e9:dd:ca:3a:66:82:35:16:c0:7d:9a:63:0a:
e0:8e:b0:df:99:09:b0:9c:0b:f4:c9:1e:14:c2:e4:b1:7b:21:
e2:cf:98:d0:12:dc:9f:1b:3b:f1:78:73:b8:2e:24:5d:b9:d7:
36:38:7a:93:f7:cf:38:3b:7a:3c:d2:0b:e3:af:d4:e2:fc:70:
ab:c7:b9:d4:f5:17:22:70:38:34:4f:2e:ed:91:13:1f:4c:b9:
fe:14:d9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:25:01 2025 by rpki-client