Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1275759C8DCF11EE9796B6664AD9E6FC.roa
File: 1275759C8DCF11EE9796B6664AD9E6FC.roa (raw, json)
Hash identifier: znp99bIh0gsEbd0QXCTn7c/NB17UULkvzIBKC79WunU=
Subject key identifier: 8C:48:2B:74:E5:4E:4C:57:61:1F:12:9D:44:B2:04:B6:C9:6C:77:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 55D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1275759C8DCF11EE9796B6664AD9E6FC.roa
Signing time: Tue 28 Nov 2023 09:18:20 +0000
ROA not before: Tue 28 Nov 2023 09:18:17 +0000
ROA not after: Tue 26 Dec 2023 09:18:17 +0000
asID: 62240
IP address blocks: 154.195.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21970 (0x55d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 09:18:17 2023 GMT
Not After : Dec 26 09:18:17 2023 GMT
Subject: CN=6565b05c-9322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:5f:41:59:ed:53:a9:23:55:14:b8:45:c0:
af:85:7d:ce:fc:0d:a5:1c:17:7d:42:fa:43:3a:1e:
2b:a3:af:e7:49:2a:2a:3b:6c:21:55:1a:51:e4:7a:
e4:c2:06:3c:c4:2c:47:e6:e4:90:d6:08:78:36:c4:
ec:93:25:7f:16:76:7c:34:e2:c8:8e:f8:a7:77:fe:
68:2c:c8:43:0c:9b:0a:59:a3:01:67:bd:c9:5f:99:
25:00:93:ab:d3:7a:99:66:e6:d8:bc:e1:dd:72:85:
41:e0:09:ed:ca:20:cb:5d:04:8f:88:07:f7:9c:10:
16:6b:b9:1e:21:25:64:e9:20:8b:77:33:67:08:58:
ec:da:15:49:12:3d:b2:f7:70:aa:8d:83:96:84:69:
10:04:80:53:27:48:5f:4b:f2:f8:24:76:3d:cf:c7:
0a:24:1f:1e:7f:e5:6a:52:6a:41:3a:fb:99:62:c4:
88:a4:9d:ca:2c:9e:e1:e0:0f:ca:e4:e5:dc:10:4e:
2e:68:b0:ad:ad:f0:a8:6c:79:a9:77:e1:cf:58:a0:
bf:31:d1:9e:55:9c:d2:5c:a2:df:bf:e5:a4:ab:06:
11:35:ac:94:d3:c2:f1:83:24:5e:1b:2a:cb:b8:15:
05:92:7b:50:cb:ff:2b:67:db:9c:30:ff:30:bc:25:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:48:2B:74:E5:4E:4C:57:61:1F:12:9D:44:B2:04:B6:C9:6C:77:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1275759C8DCF11EE9796B6664AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.180.0/24
Signature Algorithm: sha256WithRSAEncryption
44:40:6e:0a:b1:73:8a:65:e4:cd:89:31:42:be:c4:ce:f9:e4:
92:c6:53:f4:ee:59:f5:f1:66:2a:87:58:a7:b2:e7:37:80:1b:
d5:3b:f9:89:f0:61:0b:61:0a:72:59:01:06:c0:fe:62:33:6f:
13:bf:60:c0:35:e5:20:0f:44:2c:45:59:19:3d:62:74:47:94:
8b:46:2d:0c:39:d0:34:87:bb:a4:3c:60:df:20:16:10:b1:c9:
88:99:6a:12:4d:fc:7c:a0:5b:c7:5b:c3:cd:1a:05:56:78:df:
69:68:ef:06:d5:1f:39:0a:2e:ca:d1:eb:aa:4c:3b:40:f7:ce:
ae:ff:07:31:bf:1a:72:91:18:cc:cc:d1:f5:3b:8a:0d:73:4a:
f7:01:06:3d:c7:76:36:c6:d7:09:10:00:58:22:fe:03:9f:0b:
09:d2:e5:c0:7e:f4:ef:a8:c5:50:ac:9d:ca:4e:f4:c8:b3:b9:
ec:c7:a6:22:e3:92:e8:77:9d:fd:dd:f4:cb:05:f2:6e:06:50:
7f:7d:37:db:93:ba:14:4a:72:55:bc:6f:bc:39:fc:26:9d:da:
29:30:a9:db:2d:6b:8a:c4:d9:c1:f7:c0:be:c0:10:5a:22:15:
59:26:8d:ca:99:36:53:84:ef:35:2f:4d:4d:5a:ed:46:c1:d7:
14:0f:78:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:57:00 2025 by rpki-client