Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1144AB2E8A9C11EEBDFFD9324AD9E6FC.roa
File: 1144AB2E8A9C11EEBDFFD9324AD9E6FC.roa (raw, json)
Hash identifier: SlzBB0ngpvWrPS5yn36G/dFKKVRx0RnMMws5C11+ukI=
Subject key identifier: 8C:EB:CA:60:BB:C2:6A:DA:13:C1:10:5D:8D:76:7D:AE:86:A4:4A:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5482
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1144AB2E8A9C11EEBDFFD9324AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:35:40 +0000
ROA not before: Fri 24 Nov 2023 07:35:37 +0000
ROA not after: Tue 26 Dec 2023 07:35:37 +0000
asID: 62240
IP address blocks: 154.195.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21634 (0x5482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:35:37 2023 GMT
Not After : Dec 26 07:35:37 2023 GMT
Subject: CN=6560524c-77ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:d4:92:8a:30:42:5d:39:71:a6:9b:99:42:
b8:08:a3:1e:2b:54:15:fb:c9:78:7e:8f:e5:f9:e8:
a1:16:0b:f8:ff:8a:42:1f:1f:90:28:07:83:57:1e:
61:ae:fa:7a:a9:c6:22:14:7c:00:d9:e8:fe:83:5b:
05:b5:89:d0:97:eb:fd:53:f9:66:90:ce:fb:44:b0:
d2:3c:fa:98:a9:19:bb:88:a6:02:33:73:dc:33:d9:
0c:4b:c6:57:55:c8:f1:bb:26:46:c5:67:0f:43:b1:
78:3d:73:59:13:db:e8:e6:2a:ef:5c:3c:24:7e:be:
66:93:23:36:25:d7:33:ae:56:66:9b:f7:ec:dc:a1:
08:e3:4c:e4:b3:d5:6a:c8:77:49:6c:46:66:e2:c6:
c3:ef:7b:4f:ca:dd:dd:a1:58:7e:02:4a:ed:c3:8e:
42:d5:fa:66:ab:60:20:d7:c1:64:8d:6a:c5:79:48:
04:9e:36:d8:ae:d8:04:6c:53:56:6b:cf:97:37:28:
bc:31:75:ee:6b:b8:63:3d:54:66:f6:d5:52:1e:28:
26:59:fe:fc:60:10:30:8f:ca:cc:28:fb:76:f3:50:
8b:56:ab:8a:61:90:92:a3:e0:4e:5e:ef:a3:54:4c:
9a:30:9a:cf:92:c7:3c:5b:35:35:25:44:ec:95:6e:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EB:CA:60:BB:C2:6A:DA:13:C1:10:5D:8D:76:7D:AE:86:A4:4A:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1144AB2E8A9C11EEBDFFD9324AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.123.0/24
Signature Algorithm: sha256WithRSAEncryption
12:24:0b:dd:60:49:21:ca:5b:a9:69:0d:92:f2:94:1f:12:07:
9c:4b:dc:4c:58:b0:cb:2a:b2:b8:64:63:27:7b:9c:13:ee:b9:
22:b0:f7:5d:12:f9:e3:5e:84:c9:41:b5:4c:eb:eb:e2:a3:9a:
0b:c8:82:28:8e:8a:16:34:db:b3:ce:c6:7d:58:4b:b8:7b:a0:
8f:09:42:13:59:15:0e:ff:97:73:14:26:03:2b:6a:8f:32:f5:
71:e8:0e:87:2f:78:3d:7c:af:70:7e:7d:99:3f:e7:47:bf:0f:
23:90:70:17:34:d2:2b:56:73:7d:79:bf:63:82:36:8c:11:87:
2d:a3:09:58:2a:0f:bc:f9:36:8d:d8:51:af:f8:f0:2c:fa:2b:
f6:d1:a3:26:56:80:c4:33:40:43:27:ac:20:e9:8f:f5:91:53:
bf:c2:ac:68:7e:31:79:37:a0:2c:1a:99:ee:5e:bb:74:74:1b:
7b:ad:9c:b6:71:07:d8:10:50:7c:ac:78:fe:e2:71:9c:bc:dd:
ae:31:14:f2:18:63:7d:a2:b5:0e:cf:db:15:5a:99:86:05:c7:
6e:f8:8a:0a:d3:4c:d6:12:f3:37:7e:bb:83:3e:de:9a:b4:51:
11:89:74:8b:68:ae:16:2a:e7:0f:cd:01:5d:18:6a:1a:76:dc:
be:80:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:36:48 2025 by rpki-client