Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13E7BFF88CDE11EE929DFE654AD9E6FC.roa
File: 13E7BFF88CDE11EE929DFE654AD9E6FC.roa (raw, json)
Hash identifier: Z+sSxxwXinBz/A4lUfsCpgMyROYYyxQkOtx8eSnFV+w=
Subject key identifier: B9:65:E7:B0:35:B1:70:F4:5E:B5:75:C5:4F:16:57:95:C2:35:AA:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5504
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13E7BFF88CDE11EE929DFE654AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:33:14 +0000
ROA not before: Mon 27 Nov 2023 04:33:11 +0000
ROA not after: Tue 26 Dec 2023 04:33:11 +0000
asID: 62240
IP address blocks: 154.195.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21764 (0x5504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:33:11 2023 GMT
Not After : Dec 26 04:33:11 2023 GMT
Subject: CN=65641c0a-bbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:a6:ce:b0:c5:96:ff:13:e0:10:86:71:ff:
9b:07:a3:f1:72:a2:fd:67:53:3b:47:0a:6c:09:6e:
7f:ba:f5:02:01:3d:f1:11:21:02:78:c7:b3:0f:27:
38:ee:2f:a7:c3:2d:1d:82:fe:d6:ef:01:b1:50:86:
22:cb:4e:71:ff:de:64:0f:eb:f0:11:73:10:14:a2:
8b:7f:6f:76:a8:97:46:3c:a3:e2:3f:b3:8c:84:cc:
63:aa:df:d0:58:46:9b:c0:ee:f3:b4:9a:b8:30:a1:
34:9b:45:b6:45:68:d7:c8:df:97:49:d2:f5:f4:f4:
a8:d9:2e:a3:49:e2:aa:61:f9:4e:ad:b6:ee:77:98:
8e:11:bf:e6:a4:e8:d5:18:87:97:c9:1f:19:84:dd:
ce:9c:07:bb:00:4a:da:1c:c5:ca:e0:15:32:52:8a:
67:25:3e:e5:f0:cd:b7:71:05:6c:d3:fc:95:c7:31:
93:72:fe:10:4c:53:4c:4e:7d:d1:ca:58:9d:0b:24:
c3:3f:0c:6d:8e:49:c6:62:b5:9b:27:74:17:d6:b8:
27:ff:d4:72:68:47:fb:5b:a2:d2:5f:b8:c3:b4:23:
52:ef:d2:e1:99:32:55:fe:a7:3f:bb:7a:dd:79:6a:
a1:6e:0d:19:72:fb:d9:c6:78:36:6f:88:a5:0d:46:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:65:E7:B0:35:B1:70:F4:5E:B5:75:C5:4F:16:57:95:C2:35:AA:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13E7BFF88CDE11EE929DFE654AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.165.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f0:07:43:b3:78:80:45:8d:8a:60:de:b5:e6:19:20:ea:bf:
9c:08:54:3d:64:98:d7:9c:5e:20:af:e9:c7:18:13:20:e8:8a:
53:04:f7:01:28:be:1d:19:40:06:b4:59:36:34:ff:2b:b7:7e:
c5:5e:6c:eb:1c:8c:76:2f:a8:0c:4d:db:36:0d:e4:fb:06:6c:
28:86:8e:26:20:2e:29:3c:a5:0a:64:83:c1:5e:6e:4d:b8:15:
7a:49:ff:f3:79:9a:03:3b:d7:49:ea:b3:54:cb:03:94:44:85:
e2:ad:ab:fd:c0:71:25:13:34:72:6b:2c:22:f2:54:55:6a:8b:
b6:87:3a:b3:c5:8a:f1:ff:f4:6e:1c:ca:68:67:90:bd:eb:38:
6b:17:e5:1c:d7:81:85:55:d2:6a:24:6c:76:fd:a5:5e:4b:ef:
81:fa:90:ee:1c:83:74:c6:69:54:23:4a:7e:d9:bc:f1:f8:a0:
b6:5f:62:d3:c1:4b:3f:46:56:50:71:ea:5c:98:8c:e6:d9:bf:
fa:4a:61:8e:df:57:16:62:5d:7f:3b:f3:32:c3:d3:b3:fe:a5:
32:fa:dd:69:a3:58:f3:94:63:69:7e:08:61:9e:51:02:32:90:
15:f6:b3:33:cf:29:ee:15:01:8e:6f:f9:0b:43:70:b4:43:80:
b1:f6:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:07:01 2025 by rpki-client