Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57A210BA15D911F0A7F1F6D36DB8BCC6.roa
File: 57A210BA15D911F0A7F1F6D36DB8BCC6.roa (raw, json)
Hash identifier: d8qffjW5QqOLddTZlNd2YxSTyI+Sw7Y2mBgKf1jASus=
Subject key identifier: F1:D2:C3:3D:0D:61:4E:12:5E:0E:28:E9:20:30:E7:4F:6C:E0:64:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57A210BA15D911F0A7F1F6D36DB8BCC6.roa
Signing time: Thu 10 Apr 2025 06:59:27 +0000
ROA not before: Thu 10 Apr 2025 06:59:22 +0000
ROA not after: Mon 28 Apr 2025 06:59:22 +0000
asID: 395839
IP address blocks: 154.199.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96421 (0x178a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 06:59:22 2025 GMT
Not After : Apr 28 06:59:22 2025 GMT
Subject: CN=67f76c4f-3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:50:1e:3c:1f:8c:dd:66:29:31:ce:a8:e1:
d9:61:cc:a9:a2:3c:e1:64:3b:7e:08:8c:ec:02:8b:
8d:33:48:84:16:2c:d5:12:9a:c8:3b:8f:f8:6b:d5:
21:48:f3:62:13:75:6e:7f:59:71:ef:87:e2:17:47:
10:a6:60:e5:a0:89:50:df:9d:eb:dd:59:76:3a:46:
27:e8:91:c3:1d:e6:0f:0f:23:e9:fe:1b:e4:df:79:
74:fb:28:ee:b8:d3:15:44:13:a5:96:59:20:6b:b4:
8c:d0:1f:8a:9d:1b:bb:91:18:b1:bf:69:70:6c:c5:
93:24:1b:f9:42:37:36:4c:25:71:47:b3:01:2f:f7:
30:31:c4:a5:1e:ad:85:b7:36:f8:b8:22:b8:06:7a:
18:80:ba:46:bb:2d:03:1b:71:48:8c:28:3d:69:da:
39:c8:6d:19:94:de:eb:45:0d:56:53:c3:af:85:54:
93:4b:a8:67:a9:0c:38:c9:cd:6c:19:79:52:f9:85:
28:1f:61:90:71:71:f5:5b:b0:1d:ec:72:b1:6d:be:
ac:4a:73:79:55:64:64:84:72:96:d8:34:41:c5:ba:
a7:06:7d:55:73:dc:28:dd:a7:d2:eb:55:78:aa:19:
e2:b4:ca:63:b5:c4:9f:a2:1f:26:63:46:59:3a:09:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D2:C3:3D:0D:61:4E:12:5E:0E:28:E9:20:30:E7:4F:6C:E0:64:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57A210BA15D911F0A7F1F6D36DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.8.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:6a:28:be:81:24:f0:9e:d0:97:9b:26:e1:c1:9b:e7:de:69:
61:0d:25:97:3d:3f:6a:30:2d:05:06:9a:6f:34:d1:3e:2b:1b:
2c:95:5e:99:1a:29:09:a9:f4:d8:e0:00:b9:a1:70:12:a9:68:
65:33:15:f2:92:07:ee:29:9d:08:b1:cb:9b:84:28:fc:c2:90:
c2:08:66:f0:80:cd:97:9c:f4:7d:95:af:ae:12:ae:e0:f6:90:
c9:7e:75:54:9d:14:1a:59:1b:00:43:62:7a:56:8d:5f:50:5f:
09:a9:b3:2a:c2:e3:05:c6:16:8e:dd:7b:bb:c7:9a:4d:4e:c9:
dd:32:6c:34:22:82:83:88:91:87:03:32:9c:cd:ae:a7:58:c2:
0c:49:3b:f6:16:09:9e:eb:45:a8:ac:a8:4d:ee:c0:fa:de:23:
d0:6a:2f:5c:c5:50:0f:7d:ac:bb:9a:1e:da:25:db:c4:4e:92:
97:3d:03:a9:12:89:16:46:b9:06:25:50:ef:95:7d:5d:30:86:
3b:53:fa:19:b1:e3:64:a7:82:3e:6d:5f:f3:87:1f:b3:53:48:
fa:0d:58:44:a1:10:8c:e8:5d:27:7c:f0:50:53:a0:cf:80:52:
c3:51:38:d2:72:47:54:7f:f3:91:f0:ec:b9:32:19:3f:0b:b1:
54:2c:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:58:06 2025 by rpki-client on console.sobornost.net