Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0969ED1AA02A11F0A31958C2DAE4EC9C.roa
File: 0969ED1AA02A11F0A31958C2DAE4EC9C.roa (raw, json)
Hash identifier: Wi8crmgLzngOuShiHSjsWryqMMQD4GkCkoIDchAASfs=
Subject key identifier: D6:CC:D2:E8:9F:D0:0E:9F:BA:2F:AA:CC:8F:63:E5:DB:77:FF:BA:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A21F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0969ED1AA02A11F0A31958C2DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 07:24:46 +0000
ROA not before: Fri 03 Oct 2025 07:24:41 +0000
ROA not after: Sat 18 Oct 2025 07:24:41 +0000
asID: 211392
IP address blocks: 154.84.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107039 (0x1a21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 3 07:24:41 2025 GMT
Not After : Oct 18 07:24:41 2025 GMT
Subject: CN=68df7a3e-3562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:cc:80:02:f1:cd:1c:3b:fc:8a:8a:55:63:
ca:3d:b8:90:71:de:e5:0f:80:5a:55:63:42:d1:0a:
fa:d2:cc:1f:b8:75:bf:81:13:ce:e7:61:60:0a:8f:
38:7e:a1:e3:6c:87:42:93:d9:5f:d3:71:8f:8b:de:
5e:d2:1a:0c:8a:2c:fc:78:87:ef:bf:16:4a:0b:8b:
61:3a:ba:2a:d9:b6:fc:b1:b6:67:1e:c6:76:4d:b4:
a1:5e:c3:5f:83:cc:72:81:d7:fb:8f:6c:01:64:0e:
93:dc:24:ce:51:25:c2:ba:ea:ab:ca:3e:f4:21:f9:
07:8f:d9:fa:48:9c:b9:d3:6f:bf:08:c8:c2:60:de:
02:23:ba:3f:d5:15:de:3e:a4:7f:d9:78:04:97:4e:
cc:4b:8b:75:27:1d:b1:98:10:dd:cf:99:5b:50:e5:
dd:a5:52:04:fe:d6:37:0f:4b:3a:3d:13:15:e4:12:
0d:7a:e5:7c:bf:4a:10:c6:ef:26:19:1e:e8:94:5d:
1e:0f:ae:60:ad:40:0e:be:f7:07:7f:89:30:cf:60:
4d:33:1c:3f:3f:36:40:f4:16:31:21:0f:e1:e4:d7:
10:3b:b4:f6:38:0f:e0:c6:93:48:d4:c5:1e:b7:91:
e3:3a:11:89:5c:c8:58:9c:50:13:3a:0a:e9:2d:75:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CC:D2:E8:9F:D0:0E:9F:BA:2F:AA:CC:8F:63:E5:DB:77:FF:BA:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0969ED1AA02A11F0A31958C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.14.0/23
Signature Algorithm: sha256WithRSAEncryption
12:d5:57:b1:53:01:3f:fb:83:3c:49:5a:df:fa:cc:9e:7b:6e:
ca:7c:20:1e:50:6b:60:c2:0d:8a:c7:23:fd:fb:6c:66:c4:da:
54:bb:70:d5:2c:8e:b6:87:e1:a2:d6:bf:ea:6e:e0:d1:11:36:
7f:9e:d3:8e:3a:fd:97:08:97:fc:63:4c:d1:a7:2d:20:dd:2b:
e7:27:5e:c8:04:20:41:0d:0c:ad:a8:f5:9c:72:3e:9e:9a:a5:
d2:e9:b9:85:f3:b5:4f:cd:df:4e:78:af:b2:b4:7e:d7:a2:47:
f1:be:67:4c:3a:5c:02:34:31:af:8a:63:96:f2:b3:dd:eb:2c:
19:c9:23:3a:2b:41:bd:8a:93:f9:0c:37:10:03:6c:a9:74:94:
15:38:49:9d:bc:ab:89:c7:1d:47:d3:7e:ec:35:1e:9c:f3:75:
5b:ce:09:18:87:f9:c2:51:ae:4a:1f:80:74:07:75:51:79:5f:
ec:60:25:39:a5:b2:6f:a2:b3:f5:2e:f5:50:9b:57:e5:f3:aa:
5f:08:30:70:ea:93:c2:7a:5e:3b:7f:58:19:75:5b:4a:35:ae:
d8:9a:7a:8e:c9:e6:38:fa:fa:ce:5a:3f:c4:0a:4a:db:0b:7b:
52:7a:9d:a7:c5:08:23:14:b8:74:d9:8c:b9:e4:69:ef:d3:29:
33:6c:19:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:44 2025 by rpki-client