Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F74BE5E543411EEADED7D384AD9E6FC.roa
File: 0F74BE5E543411EEADED7D384AD9E6FC.roa (raw, json)
Hash identifier: MpXo6id0WIvgsE3J3b4KD0+SJpZKP9P7b86JsqLVP/Q=
Subject key identifier: 56:AD:02:47:C8:D7:2F:EB:F0:38:BD:BF:2A:A6:F6:57:93:3D:52:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3DE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F74BE5E543411EEADED7D384AD9E6FC.roa
Signing time: Sat 16 Sep 2023 01:55:07 +0000
ROA not before: Sat 16 Sep 2023 01:55:04 +0000
ROA not after: Wed 18 Oct 2023 01:55:04 +0000
asID: 174
IP address blocks: 154.84.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15840 (0x3de0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 01:55:04 2023 GMT
Not After : Oct 18 01:55:04 2023 GMT
Subject: CN=65050afb-8610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:9a:aa:f4:ea:49:e1:b3:c5:f9:6d:02:7f:
c0:59:75:78:80:8d:20:0b:fe:3a:47:af:5c:6b:d0:
65:84:6b:f0:43:32:af:1d:a7:2e:55:4c:89:64:c5:
11:f0:30:df:3c:d6:c5:ef:d6:0a:89:13:e6:b0:9e:
ac:f3:03:c4:5c:ca:e3:14:b8:62:ff:54:40:61:c9:
72:19:7e:c0:52:23:d6:fa:d5:ec:b7:4a:dc:d1:4e:
3c:1a:3e:d5:98:1e:c2:fd:e3:43:c6:43:a1:6b:cf:
7f:c0:01:e8:db:cc:9e:a2:1a:2a:63:45:8c:7d:50:
fa:8f:e4:77:67:60:0e:14:d3:02:a7:de:14:3b:46:
14:2e:2e:46:00:80:a7:66:f2:4b:2a:3a:c5:b2:3f:
dd:30:c1:05:b2:43:80:f0:24:65:bc:03:ea:df:ff:
c0:24:df:e2:4e:31:70:79:24:29:ab:4a:d9:77:ca:
ae:63:52:e8:60:c2:4f:92:e6:60:1b:a5:3b:17:9d:
bd:bc:78:80:6a:29:f1:ee:55:ba:4d:94:ef:26:e7:
ae:bb:79:08:68:75:3b:2a:d2:f0:9f:b9:14:54:35:
2a:52:3e:59:44:1f:3c:64:df:7e:04:5a:c6:6f:89:
5f:96:6c:a9:65:19:9c:3d:15:a2:6d:60:8d:4e:ea:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AD:02:47:C8:D7:2F:EB:F0:38:BD:BF:2A:A6:F6:57:93:3D:52:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F74BE5E543411EEADED7D384AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/19
Signature Algorithm: sha256WithRSAEncryption
be:6f:0d:1d:ef:9f:4e:b4:05:79:34:ac:31:d5:7a:90:c2:8c:
2f:0a:d6:a3:ae:0e:dd:e9:54:8f:92:6c:a4:82:85:1a:90:2a:
a1:d0:3a:74:3f:c0:5b:7e:40:cb:33:ed:64:43:99:d5:3b:b9:
ad:bf:13:44:76:ce:94:14:bb:4f:84:09:6e:32:1d:9d:90:c0:
8d:9c:98:ab:ee:cc:ba:2e:90:02:c4:91:6e:8b:d9:30:f5:30:
ce:3f:cc:2d:30:21:6f:a7:f9:7f:f8:8e:c2:a0:b9:71:6b:9c:
fe:d9:2c:94:70:bf:05:48:fa:4a:c1:c6:8a:24:bf:98:c5:5a:
4a:5e:d5:99:36:b4:55:d9:02:d8:42:74:33:21:b2:c8:44:86:
26:c8:7e:8c:8d:ff:50:1b:fe:9d:c5:95:d5:4d:8f:7d:f0:f1:
c9:05:9c:d2:99:ec:f4:73:75:60:5f:37:a3:e9:5e:ff:31:22:
e6:1e:ab:44:21:c0:a9:88:be:4a:19:af:ad:21:68:12:a0:a2:
32:5d:0c:3a:9e:5c:3f:f7:96:3a:1b:d9:b1:23:13:36:24:92:
09:1c:59:f5:06:d0:bc:51:79:ff:2a:47:b3:f7:c2:eb:b6:63:
b9:ce:3b:c1:e0:24:e3:d8:6d:df:a8:38:90:30:e1:3b:04:32:
53:06:ff:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:51:33 2025 by rpki-client