Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00DA46CA8A8F11EE97A4A3864AD9E6FC.roa
File: 00DA46CA8A8F11EE97A4A3864AD9E6FC.roa (raw, json)
Hash identifier: ct5OidbNoo4hErSVSROJozo7akHIzlo3dcD2DTJ/eK0=
Subject key identifier: F5:C4:E9:CD:EB:BF:EB:23:5A:E1:EF:6D:93:35:36:1F:0C:91:64:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 537E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00DA46CA8A8F11EE97A4A3864AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:02:09 +0000
ROA not before: Fri 24 Nov 2023 06:02:06 +0000
ROA not after: Tue 26 Dec 2023 06:02:06 +0000
asID: 62240
IP address blocks: 154.194.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21374 (0x537e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:02:06 2023 GMT
Not After : Dec 26 06:02:06 2023 GMT
Subject: CN=65603c61-8556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:40:d8:9b:50:9b:a0:23:a2:2e:d8:33:d5:
7e:ef:86:53:cf:b0:83:ce:fe:05:57:a9:f9:4c:87:
5c:46:6a:1f:0f:0c:20:9b:d5:2f:f4:e0:7c:40:27:
6b:0a:a9:0e:1a:96:85:e6:c5:fd:64:60:9e:74:06:
ad:32:fe:43:b7:a1:df:d4:c0:03:e1:9f:81:14:87:
94:c6:99:e7:a1:52:6e:f1:8b:46:03:52:82:8d:47:
c3:6b:8c:4d:e9:a9:b4:92:80:e4:28:b0:69:ee:99:
f0:63:72:2f:92:0c:8a:01:a2:57:ea:61:14:04:0e:
a6:06:4e:7e:68:18:89:73:f0:87:f0:95:44:7b:7b:
72:ec:e5:e8:34:6a:cf:40:5e:8c:90:14:90:e9:7c:
6b:a6:45:99:5c:87:7a:25:bd:bf:fc:f6:80:94:0b:
1a:fa:93:41:d0:72:96:bc:97:c3:44:04:85:9b:b9:
92:3b:c4:92:2c:eb:a9:49:72:98:18:eb:5e:ba:b5:
85:29:f7:5f:02:0d:f5:96:d9:52:2a:19:ab:db:ed:
c7:fc:15:7f:84:2c:00:ae:d7:7d:d2:63:a7:c9:0f:
b3:bc:af:24:db:36:db:c2:b7:1a:cd:97:79:0d:6e:
7b:1b:27:df:ad:57:22:10:4c:b4:4b:1e:14:64:05:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C4:E9:CD:EB:BF:EB:23:5A:E1:EF:6D:93:35:36:1F:0C:91:64:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00DA46CA8A8F11EE97A4A3864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ba:9e:02:92:cb:c9:7a:96:0c:3c:e2:25:f1:fc:dd:d2:e4:
d7:9b:76:49:b1:c7:9f:38:13:91:83:fd:13:c3:04:5f:3e:71:
38:70:4f:57:2e:49:43:5d:c2:90:c2:12:89:61:dd:a8:89:a3:
46:50:e3:76:de:ec:58:00:30:85:20:d3:ce:fa:7f:cf:69:a5:
b0:3f:88:ec:b2:dc:2a:f2:12:9e:2e:17:e2:e7:04:20:14:37:
20:00:cd:e4:35:02:92:26:8a:17:47:45:82:51:2e:9f:c1:20:
86:ba:d2:73:d5:6d:42:38:45:67:e0:e8:e1:d8:ec:03:0a:2f:
a3:13:c8:04:9a:cf:f6:8b:56:d2:41:2a:a1:b5:0c:47:73:51:
e9:96:20:db:11:03:f9:91:66:82:27:20:ad:43:26:3e:48:5a:
35:a3:31:ac:1d:34:42:57:59:b5:bb:3f:58:b6:a9:1d:cf:e4:
8c:9b:4f:7b:1f:46:ce:5b:af:4c:a7:4b:ec:21:66:b7:8f:50:
c1:b2:14:37:ba:94:12:79:31:c7:51:9a:2c:be:8d:53:f9:08:
0c:19:cb:6d:87:71:57:9a:bf:4b:9d:47:7f:b3:d0:be:ff:63:
f9:9e:7a:40:f4:29:19:95:26:e9:e4:8d:a4:85:3e:42:0a:69:
a8:8c:ee:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:36:10 2025 by rpki-client