Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/178FB6708A8A11EE956666764AD9E6FC.roa
File: 178FB6708A8A11EE956666764AD9E6FC.roa (raw, json)
Hash identifier: a9MmuZunBkFLGjUOHMIqs+hvqzb4mu21TrISN3OYr1Y=
Subject key identifier: 1B:E3:69:BC:B5:1F:B2:01:F7:81:66:0F:92:8B:9C:E1:A8:19:C4:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5332
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/178FB6708A8A11EE956666764AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:27:00 +0000
ROA not before: Fri 24 Nov 2023 05:26:57 +0000
ROA not after: Tue 26 Dec 2023 05:26:57 +0000
asID: 62240
IP address blocks: 154.195.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21298 (0x5332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:26:57 2023 GMT
Not After : Dec 26 05:26:57 2023 GMT
Subject: CN=65603424-3cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:90:7d:5f:2c:6e:75:fd:ba:69:41:44:70:
49:4e:eb:7a:be:8d:3a:b5:a6:71:af:73:34:a2:17:
5a:ff:e8:70:80:a7:cd:59:0f:45:c5:b5:d7:de:31:
85:54:25:e2:02:59:d9:36:dd:58:dd:63:69:d2:4c:
68:8f:4a:81:c4:32:4c:00:d8:29:84:ed:88:41:1c:
47:18:8f:ec:ff:a7:21:6b:2d:13:fa:fb:15:74:c5:
68:0a:09:f8:f5:7f:f6:51:1f:f8:28:fb:d0:94:9b:
70:85:4d:16:20:7a:7e:52:ac:46:81:31:2b:a7:e3:
5f:0a:a3:f5:38:75:4a:40:48:1b:31:ac:0d:87:ae:
6b:68:1c:24:27:ce:96:10:10:bc:bf:bc:38:bc:99:
53:b4:c7:6a:47:9b:5c:28:35:d7:3d:28:4c:a2:e9:
56:50:5b:1f:6a:65:2d:46:01:b6:9f:40:6e:1f:9c:
a7:d6:7f:8d:25:d8:9e:b4:7d:d3:aa:66:5d:07:77:
af:72:17:19:c2:9f:7f:07:c7:20:bd:45:c2:32:91:
9f:68:82:10:0b:45:9f:bd:c4:6e:ae:4b:a4:b8:09:
da:89:b9:d3:2a:9f:7d:1a:ed:95:32:36:f4:b8:6c:
d2:a7:c9:d0:a5:9c:69:8d:22:78:cf:d0:28:57:94:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E3:69:BC:B5:1F:B2:01:F7:81:66:0F:92:8B:9C:E1:A8:19:C4:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/178FB6708A8A11EE956666764AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.98.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5a:8c:05:73:6e:99:27:2f:75:f6:b0:cb:a0:ee:58:71:c0:
cb:c2:86:16:ea:59:39:c8:5d:a4:00:c1:8c:34:3e:9f:c7:5c:
bc:ec:08:31:f8:55:4b:03:ce:25:3f:25:8a:7c:88:fe:ef:16:
d9:68:74:99:dd:0b:7d:79:76:d7:2f:e8:38:14:5f:b8:4f:4a:
78:41:a1:23:87:78:9e:ab:2c:f4:5f:c5:65:c8:bb:35:d5:d9:
4a:a8:6d:c1:3f:fb:3f:29:ab:d1:65:6c:45:10:59:a7:5b:7b:
e1:f3:cb:b9:34:58:eb:a0:33:f8:75:25:27:7f:03:61:ce:03:
f2:cb:7c:23:12:02:ba:5e:6f:86:f0:bb:f5:4d:64:0b:d6:30:
91:54:88:22:9f:be:8f:2f:55:a3:95:07:dc:8e:ea:67:06:3e:
26:0f:9a:2e:25:c4:f3:b4:ce:79:df:5b:e8:bb:0f:01:2d:c3:
96:82:89:6a:ea:74:03:77:31:59:d8:16:97:fe:fd:e5:55:a4:
c0:b2:b0:ee:78:cc:02:bf:ab:90:08:eb:ce:da:89:b6:b0:6e:
65:c9:7f:5e:80:e1:cf:c1:b1:a4:19:49:b7:7a:b1:a4:ee:df:
d8:1f:85:b9:88:dd:dc:58:64:fd:17:f5:df:be:25:a5:b1:44:
6b:9f:c8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:15:10 2025 by rpki-client