Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0042B6AE8A7E11EEBCE8EC4D4AD9E6FC.roa
File: 0042B6AE8A7E11EEBCE8EC4D4AD9E6FC.roa (raw, json)
Hash identifier: EQ8vxVBYkFoWgwrawhE2j9znC9W9Q+zKbKMh9rkzpgc=
Subject key identifier: 39:78:C0:B9:30:0C:4A:9C:D5:9C:A6:22:9F:46:15:21:C8:C3:A8:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 528E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0042B6AE8A7E11EEBCE8EC4D4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:00:27 +0000
ROA not before: Fri 24 Nov 2023 04:00:24 +0000
ROA not after: Tue 26 Dec 2023 04:00:24 +0000
asID: 62240
IP address blocks: 154.194.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21134 (0x528e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:00:24 2023 GMT
Not After : Dec 26 04:00:24 2023 GMT
Subject: CN=65601fdb-1938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:ee:78:40:31:cf:08:fc:3d:ed:cf:8a:19:
00:92:a5:ac:fc:76:66:d9:d9:64:2b:75:35:8f:03:
8d:8a:cf:d3:b2:ae:1c:e7:5f:94:64:b5:ef:95:d2:
95:93:4c:87:2c:43:b3:1b:06:f0:10:dd:8e:40:1e:
f5:ce:7d:f4:d8:ce:ae:84:25:25:ea:0c:bd:2e:d8:
30:50:aa:87:1f:f0:cd:27:c0:57:a0:c4:9b:62:88:
c0:52:a0:a8:bb:18:4d:64:bd:5b:ac:01:ac:1e:96:
93:51:a4:85:cb:e2:25:c7:86:3b:83:a8:ce:10:52:
7b:22:eb:d2:dd:dd:0c:04:47:f3:bd:a4:ab:cb:0b:
18:2a:ac:ec:4a:e6:d1:85:27:3c:88:6c:e9:0e:c2:
70:7e:4b:63:6d:56:88:85:c9:9d:75:e5:2d:bf:6a:
5a:41:07:38:a7:01:be:b8:36:62:1b:9a:bf:c5:f4:
09:8c:8d:51:01:ad:e8:bf:29:ae:9c:fc:51:f0:ec:
fc:05:e1:71:f1:dd:2f:46:9e:78:b1:3e:ad:47:b3:
db:4e:63:ca:05:3f:0f:af:8f:5e:d0:6e:bf:fb:37:
49:a3:b5:8f:3f:d9:9d:87:ed:9e:de:a6:89:8a:93:
02:06:a6:d7:82:8d:4c:4d:17:ab:34:aa:f9:88:02:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:78:C0:B9:30:0C:4A:9C:D5:9C:A6:22:9F:46:15:21:C8:C3:A8:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0042B6AE8A7E11EEBCE8EC4D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.126.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b9:1d:2e:b5:a0:6b:be:6a:72:66:4b:bf:17:99:45:83:9e:
1f:1b:ea:1e:05:c9:a8:70:04:9f:7e:a8:96:c5:62:10:39:ef:
72:2e:1f:d9:c0:34:c0:4f:29:c6:80:9f:46:a9:1e:8e:7c:b1:
73:3c:30:c2:96:a8:bf:72:06:41:96:89:cd:75:50:ee:49:54:
6d:0b:41:d5:c0:d9:8c:de:2d:ee:73:c3:cc:5a:88:01:3d:25:
2f:55:25:d6:57:79:7e:23:56:b0:ae:ca:9d:dc:ad:1f:bf:45:
f7:df:ca:88:ec:8c:53:7b:4f:b6:96:af:ce:04:99:1b:40:9d:
24:70:48:ed:ce:49:83:9b:dc:de:95:1d:08:d8:fe:89:fa:f2:
0f:03:a5:57:d7:61:4c:17:01:d1:07:4e:b2:82:12:ab:a5:01:
cf:32:20:20:60:63:ad:86:25:82:87:e7:04:e5:48:f7:5f:5d:
99:68:2e:99:a1:3d:da:4e:48:c8:60:d8:9b:48:34:19:ce:89:
9b:3b:b3:69:65:90:e5:4c:64:f4:bb:bc:e5:da:8b:07:16:3f:
7d:93:c9:77:3f:07:28:55:55:65:10:19:99:51:5f:eb:f9:c4:
6d:92:1a:00:52:31:a8:f8:cb:87:5c:42:dc:af:57:d3:ce:cd:
d9:27:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:33:52 2025 by rpki-client