Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07179F328A9A11EEB5BE452C4AD9E6FC.roa
File: 07179F328A9A11EEB5BE452C4AD9E6FC.roa (raw, json)
Hash identifier: GAQ3mE27RdwoC4O10InJwtPhLGhAxVyiVrQxw34d5gU=
Subject key identifier: B3:CD:EA:72:24:C4:BB:11:CA:B2:F4:6C:EE:C8:B2:76:DC:C0:3B:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5458
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07179F328A9A11EEB5BE452C4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:21:05 +0000
ROA not before: Fri 24 Nov 2023 07:21:01 +0000
ROA not after: Tue 26 Dec 2023 07:21:01 +0000
asID: 62240
IP address blocks: 154.195.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21592 (0x5458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:21:01 2023 GMT
Not After : Dec 26 07:21:01 2023 GMT
Subject: CN=65604ee0-fc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:1c:af:34:ba:d5:c6:f0:b6:f4:e0:05:a4:
64:58:8e:f3:57:32:08:3a:90:00:a9:33:fd:c6:10:
bf:a2:b3:01:1b:b0:fa:5b:18:d7:06:ed:34:8a:f0:
9c:52:8b:0b:14:ef:63:b3:b9:12:dc:0b:bb:f8:fa:
ce:d3:43:52:e3:85:b0:af:5a:6d:4b:5d:81:ba:ad:
8a:0d:cf:7e:05:5e:1d:81:e2:7a:32:f8:50:c4:c4:
b5:15:a3:bd:72:7e:62:8e:85:9a:74:af:44:91:7d:
68:3a:ba:a4:91:0a:58:d2:7b:df:91:79:ef:ff:ea:
9e:d7:82:f5:28:86:da:37:5c:ab:ce:99:08:52:2c:
3a:6d:6b:87:ae:c1:07:5f:34:af:ba:e9:78:1b:87:
89:fc:90:b7:25:c1:83:87:3a:28:37:6b:8b:82:be:
d1:e5:58:1a:38:d0:ab:ca:4e:6c:a5:d0:40:a1:11:
13:f0:e7:91:ff:8f:6d:81:97:36:88:cc:00:47:45:
e5:cf:fc:43:05:3e:95:f2:b6:6b:5c:fd:cd:67:98:
29:da:6d:4e:c6:c4:45:43:88:46:90:d2:41:ba:ec:
ed:61:56:2b:4e:49:03:7a:df:0c:86:df:60:22:25:
c4:a6:41:d6:03:8d:72:06:39:a7:35:a2:85:d3:f5:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CD:EA:72:24:C4:BB:11:CA:B2:F4:6C:EE:C8:B2:76:DC:C0:3B:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07179F328A9A11EEB5BE452C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.133.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b6:e1:d5:23:6d:ca:61:d6:d4:e0:39:b8:5e:66:24:d1:01:
4e:ea:9d:da:0d:13:7a:9f:2f:7f:37:a4:f7:96:59:3c:ed:9e:
83:7f:73:17:be:ac:78:d5:6e:72:00:6d:fc:86:7e:9d:5d:ca:
ec:85:da:00:c0:5a:f9:d6:f9:0d:6d:ce:c7:56:b7:ab:6c:88:
5c:ce:af:82:70:8d:12:63:4f:46:38:23:17:21:5f:80:19:43:
cf:74:70:47:71:ed:66:8d:ac:ea:55:96:ea:36:03:48:41:f0:
e6:95:1d:4a:55:b7:dd:89:e6:06:4d:53:ce:93:0c:f3:cd:11:
db:53:ab:42:ae:8d:93:77:3a:12:2f:35:33:7a:1f:27:5b:08:
19:de:e9:e9:74:84:26:90:e8:74:a3:99:e1:ec:3d:37:fe:01:
39:9b:aa:3b:48:5b:b5:34:8d:d5:06:fa:98:d3:4b:2a:0d:36:
ad:bb:5c:d4:24:63:ad:8d:b1:77:a2:45:a7:5c:9f:50:9a:ce:
1d:ff:09:04:3d:30:d1:b8:7a:c4:14:13:1a:2e:b4:f7:b1:46:
8d:0c:c7:e0:ee:07:1f:0f:63:8d:40:a7:c3:5c:90:d3:91:e9:
89:fb:a5:a6:b7:0a:d4:55:9a:51:59:00:f9:ce:9e:37:92:51:
72:bb:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:05:00 2025 by rpki-client