Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5B33E820D3911F0AD7C529C762E951A.roa
File: D5B33E820D3911F0AD7C529C762E951A.roa (raw, json)
Hash identifier: SYXGYCH2VRwxkZj65CrTr0hLDgoRpEnO/0Uz3/1S9Eo=
Subject key identifier: DE:33:F8:25:E9:07:1E:5D:66:62:B9:D9:A4:81:86:0E:F8:8F:97:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01770D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5B33E820D3911F0AD7C529C762E951A.roa
Signing time: Sun 30 Mar 2025 07:37:30 +0000
ROA not before: Sun 30 Mar 2025 07:37:26 +0000
ROA not after: Sat 26 Apr 2025 07:37:26 +0000
asID: 134489
IP address blocks: 154.82.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96013 (0x1770d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 30 07:37:26 2025 GMT
Not After : Apr 26 07:37:26 2025 GMT
Subject: CN=67e8f4ba-86a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:38:d5:92:31:d6:2c:53:80:12:53:67:1f:
e1:e7:17:df:a5:7c:5a:9d:d8:30:7b:0d:22:c5:08:
f1:de:65:d5:3d:0f:a5:2a:ae:a7:23:fc:83:a7:e4:
e5:22:91:1a:e4:0d:b3:b3:e8:e7:65:2f:59:32:14:
77:10:b8:92:7b:19:1c:a9:f6:01:e5:d9:2e:b9:e3:
27:55:39:cb:96:96:90:f0:da:76:aa:55:2c:b1:4d:
eb:eb:cf:af:d1:a8:d5:ea:10:2d:50:c7:1e:51:53:
11:a8:96:f8:69:74:7c:e6:a4:4f:09:b8:35:f5:16:
06:e9:2c:57:f2:7e:b4:e9:4e:fe:3e:38:1d:ac:7c:
d0:cc:c6:67:92:ab:a9:00:ee:78:f6:b7:91:6b:e5:
d5:c4:81:6a:6d:d9:3f:3d:f4:57:fc:6c:e2:ca:2f:
69:75:45:aa:63:6a:04:66:7a:39:6b:58:df:31:bf:
c0:f6:42:3e:1d:53:f5:9f:2f:23:fb:c4:53:dd:f7:
4a:3c:bd:c0:ef:7e:e6:7d:0a:c9:6d:11:aa:11:7f:
45:a2:ba:10:7c:ec:77:70:3a:7c:63:45:35:76:7c:
51:8c:d4:b4:51:a9:b6:03:b5:e1:fe:77:82:d9:a3:
59:a9:68:d5:f9:9b:36:8c:19:5d:ae:55:99:07:fe:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:33:F8:25:E9:07:1E:5D:66:62:B9:D9:A4:81:86:0E:F8:8F:97:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5B33E820D3911F0AD7C529C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.17.0/24
Signature Algorithm: sha256WithRSAEncryption
14:75:14:e0:1d:f5:11:ff:89:98:b3:3c:3c:e4:25:8f:06:77:
a8:98:f1:99:1a:a4:be:62:c1:8b:63:81:f9:54:5c:cf:fc:8b:
dc:ff:0f:5c:9d:3b:63:70:58:d4:64:ce:7f:1f:cb:c4:a2:d8:
ad:ce:f5:b2:43:a1:76:fb:35:bd:9e:4a:f6:a9:92:8f:d5:b4:
62:37:e1:8b:9b:e5:c4:17:7b:30:cd:01:b7:70:72:ef:3e:d2:
a9:22:da:e5:ec:a9:48:62:d3:fa:2b:f1:1a:73:43:82:57:a8:
21:9a:70:88:cd:37:da:5d:ff:19:6c:ca:cb:99:bf:01:60:b8:
c3:4c:5f:6d:f1:0d:ad:97:5d:99:72:a5:e1:e9:e0:21:40:39:
a5:9b:83:d9:bb:ee:8f:4b:4d:e8:fe:d0:85:1c:0f:46:48:87:
d3:44:5e:62:48:f0:bf:c7:89:81:87:14:8e:47:58:d3:fc:de:
03:9e:e1:54:43:1d:df:00:b0:3b:45:dc:63:18:c7:29:a9:21:
a8:01:16:4c:2c:6a:47:bd:35:2f:2f:fe:65:a4:1f:df:fc:5c:
76:fc:f9:0b:c7:68:c5:87:fd:8b:41:14:cf:41:b8:a5:df:e1:
32:f4:e2:e8:c9:29:d5:75:b8:84:f1:77:3b:58:dc:7b:87:32:
da:0d:68:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:43 2025 by rpki-client