Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A89D0FC8CDF11EEA53369694AD9E6FC.roa
File: 1A89D0FC8CDF11EEA53369694AD9E6FC.roa (raw, json)
Hash identifier: GJhduGJ3SOzFOBKejIVB8SgHJWSMBCDIE2KFyR65If8=
Subject key identifier: 77:C6:0B:A9:1B:D7:B1:90:78:56:CE:69:BD:48:2A:3B:D9:5E:EA:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 551B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A89D0FC8CDF11EEA53369694AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:40:35 +0000
ROA not before: Mon 27 Nov 2023 04:40:31 +0000
ROA not after: Tue 26 Dec 2023 04:40:31 +0000
asID: 62240
IP address blocks: 154.195.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21787 (0x551b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:40:31 2023 GMT
Not After : Dec 26 04:40:31 2023 GMT
Subject: CN=65641dc2-466f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:88:18:d7:ee:3b:53:e0:42:33:4f:f9:3a:
c5:2a:5c:6b:18:f8:ca:8f:ef:c8:fe:04:b7:7c:cd:
30:c3:8c:da:b1:12:ae:0b:9f:34:6f:f6:50:bb:3b:
f8:6f:47:64:fa:ab:c0:02:a6:75:df:70:ad:7a:52:
d9:66:c1:c5:0e:4f:c1:a4:48:d8:23:2b:3e:79:36:
13:dd:5c:73:93:f5:a4:b1:1a:40:78:12:ef:b5:ff:
7d:07:41:e1:b2:0f:76:5a:6b:c1:da:74:40:d1:8c:
b7:d0:d1:41:0e:c7:ae:5e:28:90:31:38:f1:b5:1f:
13:c8:f5:19:59:21:17:3e:7c:d5:e3:68:2f:5b:06:
d6:b4:a2:7f:6f:45:4d:1f:74:e8:b9:08:65:5f:ff:
a1:ea:f3:59:6e:ae:65:07:0e:88:3b:60:df:b5:cb:
95:85:96:f5:1c:76:68:00:f8:57:63:ee:5c:7f:e6:
41:15:fc:ac:5a:68:22:ce:38:40:bf:7d:30:a9:72:
da:8c:d0:f5:45:67:16:7e:ec:81:b4:a0:df:5d:66:
82:e9:60:d7:0d:94:94:06:f6:92:8e:2b:45:94:e6:
f3:a6:d3:e7:58:db:71:fd:d9:71:87:67:a5:09:ab:
52:50:bf:12:ff:6e:d1:c5:87:f1:78:b4:1a:eb:1f:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C6:0B:A9:1B:D7:B1:90:78:56:CE:69:BD:48:2A:3B:D9:5E:EA:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A89D0FC8CDF11EEA53369694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.109.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:94:5c:a8:f3:73:19:4a:ff:ea:37:69:e0:32:a3:bd:71:7b:
12:f8:9b:db:99:17:64:b8:5e:36:70:6e:45:2b:be:85:f2:3b:
bf:ab:5a:13:3f:11:26:c5:01:54:2e:77:f3:e9:f0:58:5a:4b:
64:ba:f9:5c:48:30:c9:81:7a:fa:5a:b0:43:fb:35:dd:da:cf:
f4:13:6a:d1:af:82:49:86:93:b1:84:75:48:61:e0:05:a8:a3:
0d:78:79:04:42:75:39:db:ac:4f:b7:98:8b:95:b7:ce:ff:32:
60:a8:de:fc:f8:f1:12:db:14:e1:98:4d:d7:30:36:84:fa:02:
66:73:6b:e8:b8:a5:22:26:96:00:a3:a3:9f:7d:1b:34:01:d7:
13:fb:e2:8d:bd:03:07:67:25:97:83:0f:80:f4:a3:45:c7:b4:
3f:eb:26:a2:9f:83:a9:6c:98:2c:13:8f:bb:be:a5:67:c5:f7:
c7:1b:08:9c:d6:3b:55:27:38:70:b1:94:50:4c:fb:b0:6d:d2:
ef:0a:2d:c5:d3:63:45:c5:8d:e7:40:33:2c:15:2e:19:e7:18:
0b:e0:dc:7d:4c:3c:a9:ea:b0:f4:5b:a3:b9:1b:5b:97:02:b8:
ce:3e:72:04:fe:0f:c6:0f:d4:3b:79:c0:8a:01:d4:ca:f3:0b:
b9:8c:ee:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:59 2025 by rpki-client