Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1100374A8A9811EEA9B1C0254AD9E6FC.roa
File: 1100374A8A9811EEA9B1C0254AD9E6FC.roa (raw, json)
Hash identifier: RBErBJc8mkYrbLSAhjothsjk9vwhmBzAsYR65U2oAV4=
Subject key identifier: F2:6A:78:CC:45:93:3D:9D:37:F4:6E:13:47:73:6B:2F:BD:32:89:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 542C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1100374A8A9811EEA9B1C0254AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:07:02 +0000
ROA not before: Fri 24 Nov 2023 07:06:59 +0000
ROA not after: Tue 26 Dec 2023 07:06:59 +0000
asID: 62240
IP address blocks: 154.195.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21548 (0x542c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:06:59 2023 GMT
Not After : Dec 26 07:06:59 2023 GMT
Subject: CN=65604b96-b7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:43:e8:97:95:75:37:94:3b:ec:39:6d:25:
da:76:e3:b8:34:e9:73:c7:75:37:bf:fc:ab:c4:e2:
2c:a7:77:30:57:aa:7b:e3:df:af:86:68:fc:93:c4:
75:46:88:79:a5:f0:98:ad:c6:8c:d4:39:de:03:ca:
5e:16:51:20:ae:b9:38:03:a7:5e:f6:99:f3:a6:8e:
e6:b8:48:ea:af:aa:73:e5:2b:ba:fd:21:fa:ef:c6:
39:37:66:73:bd:fa:d4:f7:c5:d2:4f:13:0e:2a:21:
f5:0a:aa:ed:fd:35:b4:ee:32:61:ec:74:f7:c2:a6:
03:c6:4b:b6:9e:ee:cf:f0:9a:ae:1f:d9:d4:c5:15:
ea:5b:34:02:06:55:15:4b:b8:25:30:7e:c9:32:5b:
1a:79:7d:54:2e:a9:ff:70:cf:e3:f4:75:e0:5b:d9:
7e:69:a8:6d:fa:39:6d:50:21:6b:f0:a1:ec:78:f4:
cf:16:8a:38:0a:da:99:4c:2e:0f:b6:af:15:ea:8a:
fc:73:af:3b:ad:b2:da:fe:7e:f4:9b:9d:bb:90:17:
93:89:38:68:27:94:b0:06:b3:4e:d7:a4:7e:94:3a:
44:c5:90:63:67:0b:c4:2a:38:15:f6:b2:4f:77:b7:
c9:f2:d5:01:63:e6:e3:b1:a6:a3:c2:15:d5:f7:75:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6A:78:CC:45:93:3D:9D:37:F4:6E:13:47:73:6B:2F:BD:32:89:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1100374A8A9811EEA9B1C0254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.18.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a3:4d:4e:b4:51:1d:3a:1b:65:36:4d:e0:5b:85:3e:61:f3:
3b:2e:fb:4c:39:f7:b2:63:ad:27:94:5e:26:a3:f3:34:70:43:
52:a0:bb:d6:d9:82:b9:00:75:df:13:55:7e:95:3a:b3:ea:5b:
40:bb:7b:3d:01:15:f5:68:ba:2d:b3:88:6a:ff:b4:c5:a4:9e:
dd:6d:2c:f9:0f:e1:b7:e3:48:7c:ba:5c:f0:5a:13:2c:e6:72:
12:86:fa:d3:57:25:a2:ee:6d:0b:29:df:52:39:5b:9e:4b:dd:
24:4e:32:fa:19:a9:e7:64:99:03:cb:78:52:5f:73:8c:f9:0c:
7f:43:9d:c1:f0:7d:7e:ee:5a:f8:f3:db:65:da:89:4e:a1:9d:
9a:73:ac:dc:c3:88:00:fd:93:0f:e6:6a:90:dc:03:d0:68:f8:
6f:52:d8:90:aa:e1:bd:1a:79:4f:25:4e:e1:f1:0d:c4:69:c9:
08:33:30:20:59:f9:6c:18:db:c6:99:83:40:28:d8:4e:0e:1c:
2c:f5:8f:a3:8d:18:e0:8b:14:9e:a0:98:6c:cf:f9:7a:be:08:
32:d4:93:51:d6:07:92:66:65:d8:c3:13:b1:ff:90:1c:b2:64:
80:fa:10:69:39:06:48:b5:97:22:98:e9:d7:6d:11:f3:a0:ae:
1b:ba:08:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:13:00 2025 by rpki-client