Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03089B048CDD11EEA9C1BC624AD9E6FC.roa
File: 03089B048CDD11EEA9C1BC624AD9E6FC.roa (raw, json)
Hash identifier: EpfC41wdJqVBWv9uguwGq9tPMSizAiCCbONGggnsk+Q=
Subject key identifier: 1A:E3:58:85:04:66:BA:6C:C2:AD:89:2E:09:36:2C:87:E4:05:B0:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03089B048CDD11EEA9C1BC624AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:25:36 +0000
ROA not before: Mon 27 Nov 2023 04:25:33 +0000
ROA not after: Tue 26 Dec 2023 04:25:33 +0000
asID: 62240
IP address blocks: 154.194.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21737 (0x54e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:25:33 2023 GMT
Not After : Dec 26 04:25:33 2023 GMT
Subject: CN=65641a40-8d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:98:0d:99:67:e1:f0:45:3c:a4:d2:ac:01:
68:1e:4e:f6:7d:ab:e7:6c:b2:ef:ba:8a:d2:d3:ef:
30:1f:51:f6:ad:08:23:2c:65:b8:a0:88:ab:c7:2f:
4f:cc:dd:a8:5a:fb:e4:a0:9c:59:ba:e8:a3:ee:a9:
5b:46:2c:03:ff:aa:b6:3d:53:85:7a:54:58:17:dc:
ed:bd:62:79:ba:94:d9:70:4c:ae:43:06:de:81:89:
26:b6:ee:0c:a7:12:12:d3:df:54:fb:0c:a1:ed:a6:
63:73:e5:39:59:2a:35:b9:82:82:68:f9:37:a6:40:
50:da:5c:55:b0:c8:a4:bb:2e:3d:06:43:60:88:df:
b4:18:f5:b0:dd:f2:20:45:dd:23:80:94:e7:93:aa:
64:66:f1:05:d2:84:5f:9d:4c:1c:ab:7f:d6:a4:a5:
59:b2:f8:0c:ed:79:63:51:87:1e:39:b7:af:2f:df:
9d:91:e2:16:83:bb:00:6a:b8:ca:7b:42:3c:bd:5b:
5b:23:a9:12:d4:c2:9e:61:5e:90:0f:b0:fe:f7:97:
b0:ce:e4:29:91:d3:8b:43:3d:66:6c:3e:05:10:4a:
72:a2:06:2d:a5:f6:90:3b:19:24:b8:6d:6c:ae:41:
ee:b7:2f:0f:97:29:67:f5:31:a4:05:ff:7f:13:5f:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E3:58:85:04:66:BA:6C:C2:AD:89:2E:09:36:2C:87:E4:05:B0:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03089B048CDD11EEA9C1BC624AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.90.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9d:af:c9:2b:5a:e3:aa:13:cb:4b:9d:89:21:2f:c3:1b:62:
55:8c:90:e4:02:62:2e:d1:13:e5:cb:32:d8:ce:d2:8c:b4:ce:
4e:09:8c:4e:cf:47:1d:26:a0:ef:62:cf:56:b3:cd:9e:b0:0e:
a5:db:1f:4f:ce:1e:b7:2e:33:51:89:01:17:05:29:cd:72:61:
8e:d2:e6:e2:ad:e1:99:e4:fe:ef:ba:ea:40:07:07:99:73:11:
f2:f1:25:0e:a8:74:4a:0e:0e:e6:04:a7:88:11:e4:f9:15:96:
af:76:3f:24:7d:91:91:be:2f:2f:56:7e:d1:a7:86:24:05:08:
c6:77:68:a4:b6:e0:c5:00:01:cd:d2:ef:d6:27:83:f8:1f:60:
70:b5:db:5f:d3:2b:de:c1:50:1e:83:2d:4b:eb:dc:b3:ba:55:
b8:bf:2d:c5:f9:d4:33:30:a8:bf:50:f8:d8:c7:99:e7:c6:3c:
c9:9d:28:92:84:4b:8f:44:c5:95:9e:a6:59:77:04:c2:08:1c:
18:51:00:cc:a7:94:13:4c:b4:df:18:d0:b0:4a:07:a4:38:5d:
de:fb:95:c2:f7:35:7f:66:30:bd:c5:aa:ac:c7:8d:1b:02:5b:
ef:14:98:c8:10:b4:c7:94:6d:38:59:35:0a:4c:f2:8b:61:25:
82:69:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:15:19 2025 by rpki-client