Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0433FA6A8CDC11EEBACA605F4AD9E6FC.roa
File: 0433FA6A8CDC11EEBACA605F4AD9E6FC.roa (raw, json)
Hash identifier: nx7uliuhdyXv0TvGwTc/5SiuF7OO2Nd5uo4j8LOLjes=
Subject key identifier: 62:FE:DE:AA:96:70:89:48:64:D0:77:2C:2D:47:17:96:3F:BE:E3:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0433FA6A8CDC11EEBACA605F4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:18:29 +0000
ROA not before: Mon 27 Nov 2023 04:18:25 +0000
ROA not after: Tue 26 Dec 2023 04:18:25 +0000
asID: 62240
IP address blocks: 154.195.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21712 (0x54d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:18:25 2023 GMT
Not After : Dec 26 04:18:25 2023 GMT
Subject: CN=65641895-d39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:d6:24:d0:86:c2:8e:6b:d8:0e:21:4b:82:
51:26:2c:55:78:17:3a:db:e1:5f:d8:c5:56:3f:54:
e7:f4:d5:25:1a:a8:8d:68:71:e5:c7:e8:9d:6d:6c:
eb:b0:de:3a:7d:1a:89:88:9a:77:3a:18:d2:d4:e6:
37:a6:95:9e:0b:98:be:11:31:c5:75:de:00:aa:be:
71:d1:ec:7c:9b:5e:9f:93:b6:60:8c:ef:ef:d2:3c:
80:b1:88:7b:93:6c:ae:0a:8d:8b:99:5f:31:46:61:
ff:af:53:2d:b8:59:88:be:69:ce:24:a7:dc:dd:ab:
a9:52:7d:64:bb:cd:b0:3b:b9:f7:a5:7a:f3:1c:b1:
8f:94:b3:f1:7f:c6:23:a9:f4:0d:11:2c:8c:fc:75:
c5:b7:86:43:79:1c:89:cf:3a:63:b4:ed:63:5f:dc:
61:ae:c2:5c:6e:25:00:a6:96:e4:05:9b:5e:31:22:
ef:f3:85:ca:69:04:da:d4:d0:5a:ae:a4:f1:07:5a:
ab:42:c5:d9:c9:48:5a:e0:ee:e4:2a:ff:e4:83:ae:
bb:e8:56:7b:09:76:9e:bf:0f:39:99:da:b3:89:09:
b3:a5:8a:6f:4e:42:95:c1:90:17:af:89:ba:bf:02:
9d:52:39:b1:2d:45:ef:65:ef:3e:4f:81:7f:2b:a3:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:DE:AA:96:70:89:48:64:D0:77:2C:2D:47:17:96:3F:BE:E3:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0433FA6A8CDC11EEBACA605F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.113.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:95:18:17:72:53:fd:f1:c0:8e:c7:cb:c3:fa:f9:9e:67:6a:
64:9f:5d:2b:d0:16:f1:ef:18:3f:f4:1e:7b:81:56:e3:e3:00:
ef:5f:4d:02:a4:41:31:c3:d1:2d:29:b3:21:62:e9:ca:ff:47:
10:51:1a:c7:13:e3:30:15:9f:75:0b:51:e7:31:1f:34:dd:36:
59:e3:bc:8b:7b:09:1d:ba:23:07:35:ae:f5:b6:20:a1:18:6e:
92:54:f9:7b:57:70:f8:94:ba:03:06:46:61:a0:69:f5:62:f4:
41:99:6b:3d:0e:73:35:3f:e2:57:43:3e:2f:65:20:cb:5d:e5:
8b:65:08:5b:ee:11:68:07:86:42:fc:bb:82:60:d1:cd:d4:e4:
33:93:f2:ed:d2:1e:bf:35:a0:3a:bd:7e:72:da:85:dc:17:fb:
52:8e:b9:97:7c:de:cc:64:7c:6d:dd:bd:96:ac:f6:94:fa:4c:
60:b3:7b:ed:b7:2a:91:8a:14:80:99:7a:f8:1f:91:6d:65:cb:
b0:19:15:c6:7e:57:0d:63:b3:cb:b2:80:e8:09:4a:dc:a0:ea:
38:1d:d7:cf:ff:d2:07:95:12:1e:18:40:89:74:b5:9c:27:72:
84:3e:2a:93:7e:dc:69:55:2d:8a:a8:8d:ae:73:22:4f:f9:98:
61:fb:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:44:07 2025 by rpki-client