Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14451A808CDA11EEBCD734594AD9E6FC.roa
File: 14451A808CDA11EEBCD734594AD9E6FC.roa (raw, json)
Hash identifier: +E8So1wfOVUnblf7uQWRowKq9WT4dgZ0fvuuHWXGtR4=
Subject key identifier: F7:7F:60:C4:1A:5D:6B:BF:A1:2F:F5:85:0B:B5:2E:FB:86:20:AD:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14451A808CDA11EEBCD734594AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:04:37 +0000
ROA not before: Mon 27 Nov 2023 04:04:33 +0000
ROA not after: Tue 26 Dec 2023 04:04:33 +0000
asID: 62240
IP address blocks: 154.194.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21664 (0x54a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:04:33 2023 GMT
Not After : Dec 26 04:04:33 2023 GMT
Subject: CN=65641554-c1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:af:71:a5:88:65:12:e6:f6:f2:56:77:4a:
1d:84:59:7d:77:8a:72:15:9b:61:35:5a:dd:78:c7:
b2:2f:b5:3f:9f:79:94:26:94:4e:5f:a4:7d:07:c3:
59:eb:91:ac:be:68:8a:87:e2:1b:b5:ac:04:a8:7c:
09:96:4e:6a:69:e0:42:7b:eb:4c:b1:45:8a:f8:7b:
14:be:bf:be:cc:4d:6e:4c:b2:33:46:56:c8:24:c1:
7b:f4:16:cd:6c:b4:ba:4c:bf:66:c5:20:ef:9e:ed:
e2:81:6e:19:c5:eb:e3:17:f3:56:f7:36:d2:38:a5:
93:f3:8f:85:93:e7:27:6a:aa:b3:6a:b9:04:76:c7:
df:7a:de:a2:90:8b:78:5a:97:29:ef:3b:d3:29:90:
ba:7b:f3:a3:ba:1b:56:2d:7f:6a:a3:24:f6:35:08:
2e:fa:af:e2:8d:5f:5a:16:09:a8:e7:6d:bb:ea:3a:
0f:84:0c:df:50:fc:19:0c:4d:b9:ea:08:11:4d:96:
7b:95:93:9a:d8:aa:16:d8:32:19:0d:d7:ea:e9:c2:
01:9c:05:6a:42:57:32:fc:e5:a1:86:37:f7:77:c1:
e2:a7:72:44:15:d7:34:0e:14:ed:a9:a5:4b:24:a1:
3c:5b:91:46:2e:1b:1e:e5:ca:65:29:78:cb:57:44:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:60:C4:1A:5D:6B:BF:A1:2F:F5:85:0B:B5:2E:FB:86:20:AD:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14451A808CDA11EEBCD734594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:46:11:02:f2:ba:d1:e0:78:03:ca:b3:34:02:9f:7e:87:49:
c5:4e:18:c7:46:54:37:a4:2d:85:3f:b8:63:cc:ba:36:de:97:
ae:ed:a1:38:3e:8e:bd:78:61:85:bd:1d:72:84:8f:d8:a9:c7:
68:cb:29:82:dd:bc:0d:87:33:6d:49:98:40:1e:fb:e8:a9:b1:
78:bb:1a:6c:60:75:cb:26:e3:ad:2c:f1:cc:0b:67:53:6c:ca:
fc:7a:e0:6e:a8:06:4d:a8:25:5b:ee:d8:f0:b2:0c:97:4e:ee:
71:bb:cb:7d:79:8f:45:4a:27:d8:2a:62:59:bf:2d:10:46:28:
aa:0d:87:46:7c:d0:d3:2d:f7:9e:da:f1:4a:de:04:50:e7:35:
82:b6:1b:32:38:a8:2b:f0:e5:26:cd:af:c4:93:1c:3f:a8:b0:
0f:ef:df:00:7c:c6:08:8d:b4:5f:aa:a0:4e:3f:cc:a9:03:c0:
34:05:d7:66:b5:20:77:71:c6:56:24:1e:8e:e8:d6:33:6f:f2:
ad:d2:8e:0e:98:c4:b2:be:23:39:a6:ca:6f:c4:93:6d:c4:76:
ca:8b:30:d5:a5:69:55:20:dd:77:72:0f:0d:5f:b5:aa:03:96:
cc:1b:f2:ff:9d:d3:95:1a:ad:18:34:0a:a4:45:f1:a1:a1:32:
bb:d2:14:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:52:59 2025 by rpki-client