Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F200A952F81811EF9420C89C762E951A.roa
File: F200A952F81811EF9420C89C762E951A.roa (raw, json)
Hash identifier: /uEV4w02TU1gX/wLNE02EuuFfcrVUrolFq+B3g5G4ZI=
Subject key identifier: B3:B9:A9:63:EE:36:73:B5:B3:09:0B:07:ED:B9:72:AE:5D:8B:77:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017008
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F200A952F81811EF9420C89C762E951A.roa
Signing time: Mon 03 Mar 2025 10:19:09 +0000
ROA not before: Mon 03 Mar 2025 10:19:06 +0000
ROA not after: Mon 31 Mar 2025 10:19:06 +0000
asID: 202656
IP address blocks: 154.219.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94216 (0x17008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:19:06 2025 GMT
Not After : Mar 31 10:19:06 2025 GMT
Subject: CN=67c5821d-4706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:5b:ad:81:d8:d9:cd:15:fa:d0:35:90:fb:
1f:37:30:11:2a:65:f3:d8:17:13:26:b3:ce:48:db:
c7:7f:74:b8:e2:c9:89:3c:39:4d:5b:4d:ef:1b:fe:
0f:7a:ce:a6:8a:1f:42:e3:ab:e9:ca:7c:6c:7f:8d:
d6:5c:d0:1b:d1:11:51:30:90:8c:64:81:da:4c:16:
40:16:2b:40:a9:3f:84:61:9e:83:ab:20:1f:ad:75:
6c:ca:69:c7:d6:5c:e2:d7:67:a2:90:fc:8c:87:c8:
91:7f:88:60:7f:a2:f8:ea:06:aa:22:a5:5b:81:f0:
d3:2e:57:90:dc:76:20:42:92:4d:06:bb:70:77:91:
8c:0c:7c:5c:2f:3e:0e:5e:08:5f:42:0c:5c:b9:fb:
d3:c8:a4:d1:f6:89:e5:92:b0:c3:4c:36:05:95:5d:
57:3e:df:a8:0d:f2:95:96:02:e1:e2:09:be:f2:2a:
47:f4:69:7b:31:df:eb:25:8b:5e:90:e3:23:60:6a:
f1:25:dd:4d:04:c6:56:2f:6a:da:26:f2:9c:45:99:
ee:12:b2:1c:fe:11:28:d2:c5:ae:f3:bc:e1:70:79:
bf:f2:16:a9:c3:66:a3:46:cc:61:b6:d8:18:4b:8c:
47:84:0f:a1:3f:eb:eb:74:d9:1e:32:e1:8c:95:27:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:A9:63:EE:36:73:B5:B3:09:0B:07:ED:B9:72:AE:5D:8B:77:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F200A952F81811EF9420C89C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:af:ab:78:7e:99:d4:44:a3:59:86:c6:e1:7c:e2:02:57:92:
9c:62:f4:71:b6:8a:d8:d9:c6:ce:d2:ed:9d:53:70:6a:ac:e6:
e0:cc:5b:a4:e8:0e:10:ad:9e:26:0a:a2:a4:31:fc:da:0d:b4:
a0:d3:e3:97:46:e7:ee:f2:4e:96:06:6a:b0:3a:13:b7:03:18:
67:82:76:52:47:12:dd:4c:e6:aa:f2:7a:73:58:c5:5d:9e:99:
43:e7:0c:0c:1b:00:c6:4f:36:07:02:ed:c8:38:c2:a8:f4:26:
84:c0:af:93:ea:e3:93:6b:71:ff:ba:ca:41:d6:71:d1:69:0f:
92:11:b6:24:e0:05:30:7b:7b:41:5b:e6:f3:c9:4e:13:d9:51:
62:9a:6d:74:4e:77:3d:44:08:f4:46:c6:2c:54:9d:ac:93:53:
7d:52:48:15:b1:74:fc:21:28:ae:a3:83:b2:b6:d8:af:e5:75:
54:65:d9:97:0d:ff:8d:55:9a:ed:3b:c4:cf:70:2f:e6:05:28:
5a:64:cd:5b:47:3c:b8:00:f6:ae:1d:5b:61:b4:f4:d1:8b:63:
a7:dd:d3:83:a4:95:71:fb:86:26:da:35:25:ed:04:aa:9c:25:
d1:9c:f1:23:f9:7e:a1:e2:ec:92:e2:cc:ae:2a:8c:67:00:11:
8e:e5:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:35:54 2025 by rpki-client