Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A6DC60E460011F08DD22E7EDAE4EC9C.roa
File: 8A6DC60E460011F08DD22E7EDAE4EC9C.roa (raw, json)
Hash identifier: QNbs4oI4ct7YnOq6bDOuiabHD/sS79zk3kijVF7ZfA0=
Subject key identifier: 74:C3:B2:02:FF:80:C4:94:DA:C3:99:7D:67:3A:0B:AB:7C:CC:A4:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A6DC60E460011F08DD22E7EDAE4EC9C.roa
Signing time: Tue 10 Jun 2025 13:40:59 +0000
ROA not before: Tue 10 Jun 2025 13:40:54 +0000
ROA not after: Mon 16 Jun 2025 13:40:54 +0000
asID: 152849
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99788 (0x185cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 13:40:54 2025 GMT
Not After : Jun 16 13:40:54 2025 GMT
Subject: CN=684835eb-7e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:ac:d9:b6:0e:bd:11:28:9f:6b:23:a2:7a:
68:c7:6e:50:b2:c1:a6:83:1b:bc:11:b1:b2:44:43:
f6:7e:48:4a:04:4e:3d:4b:e3:70:03:6c:c0:36:f6:
68:3e:57:6e:e4:7b:80:ef:25:1b:c2:4d:78:e9:75:
e9:a8:a5:57:bb:bb:00:6e:77:3c:e1:8f:1f:cc:ab:
24:50:f5:b5:f2:bf:1b:fd:68:33:7b:65:fc:e7:34:
fb:5f:2c:39:6c:fd:8a:b5:92:b0:9a:ae:38:5e:65:
37:2a:e2:09:85:8f:bd:d7:0d:b5:e0:10:93:58:cf:
2d:05:c9:33:b8:7a:e9:30:f4:0f:86:56:60:8c:07:
0b:7b:20:20:44:6e:dd:07:47:2b:df:38:35:38:b9:
69:4a:af:b6:a8:82:c0:31:c4:30:cc:71:e9:74:0e:
df:8a:74:ac:f6:1f:4d:6a:50:e6:e5:73:ec:f2:44:
e1:63:cd:4c:e4:d1:9d:9d:ae:e9:63:18:07:03:0b:
16:44:df:f7:ba:48:77:a9:3a:e5:8d:9b:5f:09:4a:
c0:31:46:e8:66:67:58:3d:58:3d:08:6b:48:a2:75:
d3:d4:3a:c6:6b:a4:ea:a5:7e:88:14:5d:ab:fc:79:
84:5f:ee:6e:db:d2:25:09:f9:ee:cf:94:51:1a:08:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C3:B2:02:FF:80:C4:94:DA:C3:99:7D:67:3A:0B:AB:7C:CC:A4:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A6DC60E460011F08DD22E7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
69:3f:34:f1:72:45:e6:4d:31:fa:12:0a:b0:21:0c:d0:15:7c:
08:8f:fa:7d:69:86:c8:1f:8f:e2:73:53:bc:5d:15:c3:44:68:
09:b6:ba:e4:43:f1:e2:ea:fe:80:ba:f2:9a:8f:e1:c4:01:e6:
48:6f:c4:e4:7d:b5:98:44:a1:16:49:57:e1:00:2c:c0:b6:e1:
b6:0e:aa:9d:e3:8e:9f:f6:e7:bd:17:f1:97:11:69:9d:95:1d:
62:a9:2e:ce:53:1c:e9:2f:65:c4:d5:a1:3d:dc:aa:00:74:f2:
c3:9e:61:54:56:59:5a:86:f1:2f:f1:70:1c:88:f2:9a:ed:f0:
b3:67:db:cf:a8:89:d9:9c:b6:fc:56:b7:bd:b5:c5:8d:f6:8a:
cf:ac:7c:6c:33:82:a1:89:86:6f:6b:1e:d0:df:ac:f4:d4:5f:
52:aa:66:d7:9a:7a:55:ba:bc:d6:d8:b3:28:83:47:11:04:3f:
8e:c5:40:f8:6c:0e:aa:b8:87:99:a6:21:a6:e1:b6:ca:9a:ab:
36:4b:ab:15:87:04:47:06:33:a5:3e:b0:e2:62:c0:f9:8b:8f:
46:8c:70:2e:e9:c1:ba:0b:86:38:e9:39:ef:4a:22:7a:e7:79:
28:87:45:18:0e:94:6d:1c:0b:62:77:34:b9:d1:b9:0c:5d:a6:
69:66:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:48:50 2025 by rpki-client