Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4BB0C82F62E11EFB158FA8F762E951A.roa
File: F4BB0C82F62E11EFB158FA8F762E951A.roa (raw, json)
Hash identifier: 3lte1LvaXe3IcgJLUfOlv8kvSD8kdNlxCjDeZvvYKEA=
Subject key identifier: 12:C2:D3:BC:AE:9F:F2:72:58:F6:11:A9:56:BF:B2:49:88:7D:3D:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4BB0C82F62E11EFB158FA8F762E951A.roa
Signing time: Fri 28 Feb 2025 23:51:41 +0000
ROA not before: Fri 28 Feb 2025 23:51:37 +0000
ROA not after: Wed 26 Mar 2025 23:51:37 +0000
asID: 62240
IP address blocks: 154.194.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93417 (0x16ce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 23:51:37 2025 GMT
Not After : Mar 26 23:51:37 2025 GMT
Subject: CN=67c24c0d-efed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:74:99:73:e0:11:cd:70:5f:c8:76:65:46:
43:22:fb:cc:38:a6:5f:fc:87:dc:56:1a:77:e7:6f:
6a:58:4f:f5:05:60:5b:b5:59:50:81:72:00:78:b0:
7b:6b:7e:a5:96:59:c7:94:83:b7:54:19:1f:13:e4:
0f:89:ee:84:1a:2f:7c:03:20:24:70:db:2a:c2:b1:
ad:2f:e7:7e:98:57:65:55:37:f8:02:83:30:6a:d1:
f4:f6:b1:09:db:e9:cc:07:7c:91:99:dd:75:93:64:
91:8d:89:3f:ea:7c:5c:b4:18:96:8b:c3:61:48:9f:
a0:a8:71:95:0d:ba:a3:bd:06:35:99:55:58:ad:24:
24:70:81:1e:97:ea:6d:52:fe:d3:0f:fe:14:09:b0:
48:95:5e:05:de:21:62:12:3f:22:87:91:da:b2:66:
da:0c:13:d8:b9:1c:a7:26:84:c5:a7:ab:e1:c5:76:
1b:fa:3a:72:cb:ca:f2:f1:44:42:29:49:a4:45:3a:
b1:be:04:31:9b:f0:c1:0a:7b:84:a2:2a:6a:2f:e0:
ef:9f:0f:b9:80:99:6a:71:66:82:f8:89:16:d3:7f:
c3:5c:d5:09:04:2b:39:84:42:02:24:9e:b8:39:6e:
15:ea:fd:63:00:a1:08:71:0b:5c:52:d5:f3:f6:ed:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:D3:BC:AE:9F:F2:72:58:F6:11:A9:56:BF:B2:49:88:7D:3D:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4BB0C82F62E11EFB158FA8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.71.0/24
Signature Algorithm: sha256WithRSAEncryption
62:46:1d:4d:f9:67:b5:44:5d:3e:f0:84:c1:88:ff:6c:60:69:
fe:bf:ff:2a:4b:e4:d6:d8:2a:f8:15:57:10:0c:62:7b:9e:d2:
5a:d6:cb:fc:be:b3:32:ae:0d:d0:a9:eb:33:09:cb:38:99:11:
35:10:02:09:d2:50:6e:69:bd:9c:29:28:87:4a:15:b9:67:11:
d7:cd:c5:f3:f8:bf:c3:c2:d0:a0:08:67:09:c3:e0:9b:10:33:
f0:94:03:64:e8:0a:a7:e8:c5:09:d4:c1:9d:e8:f7:b2:c5:77:
e9:61:22:96:47:1b:51:86:7c:96:c0:c8:36:01:2e:dc:6a:92:
5c:36:35:4e:a2:b1:b1:73:81:8c:7a:3a:b4:d1:bd:c8:11:d7:
a7:98:6b:44:f4:20:06:f8:74:39:be:71:09:5c:a3:9e:03:2d:
f8:7b:a4:17:c9:b1:0f:f8:aa:bd:ba:47:ae:37:78:60:98:0d:
ab:15:82:0f:a6:9a:a6:64:02:07:99:24:9b:a7:21:dc:64:d3:
b2:58:8a:25:91:d4:e3:2e:ed:1b:3a:65:31:b0:e4:8b:12:37:
e3:ce:f6:af:84:0e:0d:17:cf:a9:ab:f8:7d:9a:55:c5:b5:50:
1d:d3:93:e2:37:28:ce:4b:5c:5b:2d:66:52:0d:d6:26:56:fa:
5d:db:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:56:08 2025 by rpki-client