Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/208D0040E58011EB8C06372EF8AEA228.roa
File: 208D0040E58011EB8C06372EF8AEA228.roa (raw, json)
Hash identifier: 29wlK7NoW86NByC7cUDW7PuR3FeFPuu06BUJTLQD1Ok=
Subject key identifier: 8A:25:73:25:37:26:D4:A8:6D:40:59:95:80:61:AD:1C:C6:3E:1F:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/208D0040E58011EB8C06372EF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:20:03 +0000
ROA not before: Thu 15 Jul 2021 15:19:59 +0000
ROA not after: Sat 09 Jul 2022 15:19:59 +0000
asID: 397630
IP address blocks: 154.202.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:19:59 2021 GMT
Not After : Jul 9 15:19:59 2022 GMT
Subject: CN=60f05223-f286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:09:35:39:e3:09:60:b4:b8:bd:9b:12:92:
37:5d:29:00:82:3c:62:b9:bb:0e:e8:29:aa:14:1f:
5b:a4:6f:37:91:7f:ff:99:72:d1:0d:b7:9c:9c:f7:
e9:c9:52:e3:24:7a:f0:6d:23:db:30:26:bf:79:77:
8a:1b:2a:bc:d5:f7:af:e5:c5:72:a2:11:48:01:dc:
d8:5a:68:7f:ca:41:73:4a:8e:2b:b6:c6:e5:95:7f:
08:38:ae:1b:c8:b0:ef:c0:4b:d5:b2:9e:e8:6a:16:
32:8e:2b:d4:48:c3:55:69:e4:78:03:df:80:f5:47:
af:24:f9:09:54:bc:f7:1e:47:f3:89:69:63:3d:f7:
49:c3:b3:68:82:88:58:2b:4e:bf:14:2c:0b:b2:f6:
ef:6a:30:13:f2:3d:b0:56:60:23:5b:2a:4c:13:94:
b4:45:e2:61:e3:6e:f2:41:56:64:6a:1e:4b:44:af:
29:1c:4e:07:0a:fc:5a:06:5c:2a:65:d9:29:49:4a:
05:d3:41:a4:d3:66:f3:a3:dd:ee:43:d5:82:50:cd:
6a:75:92:90:a3:97:4f:ac:8e:7f:9f:94:cc:84:64:
26:de:fc:0d:66:82:ed:87:88:e4:3d:8d:3e:a4:0e:
20:06:c8:34:ea:70:b8:a9:ec:1a:70:14:e9:84:43:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:73:25:37:26:D4:A8:6D:40:59:95:80:61:AD:1C:C6:3E:1F:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/208D0040E58011EB8C06372EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:98:e8:cf:51:04:dc:f9:46:ed:4d:b7:9d:65:c1:ae:8f:3e:
89:81:a0:83:69:6c:7c:ed:de:6a:d3:fe:ad:2d:a9:27:b3:7d:
3d:b7:ff:a4:fd:b2:da:75:8b:72:8e:e3:cc:f4:ae:c9:06:34:
b9:55:2b:da:56:00:29:ac:48:75:d5:29:7c:5c:ca:43:2a:8c:
c7:e6:49:5f:b7:4c:5e:e7:44:ec:e6:cb:e4:dc:59:e8:5f:ef:
45:75:49:41:fc:dc:58:01:2a:b6:14:20:25:20:3b:04:bc:10:
2f:1f:d6:87:82:21:6f:d7:dd:2e:79:3e:77:18:1e:e6:96:51:
71:c2:0b:e3:a1:b2:5c:34:76:22:c9:11:2c:a1:70:22:c4:c1:
ba:06:20:d7:2e:44:ba:c0:bc:ab:f1:63:1c:bc:83:dc:b5:27:
6e:4f:5f:38:28:4e:20:9a:29:3f:e9:9a:d9:e7:40:bf:eb:6a:
16:65:84:3e:ee:66:52:ce:b1:72:23:9f:6e:56:52:a6:73:8c:
cd:c0:fa:e5:10:f0:ab:0e:bb:4f:6b:f3:8c:78:16:3a:10:a0:
fb:12:2d:07:ad:b3:0b:e7:2a:2b:bc:91:e6:68:e1:ad:a1:f0:
bd:14:4c:bf:40:57:d3:c6:3e:ca:ca:38:a2:61:12:1e:79:aa:
57:89:fc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:07:11 2025 by rpki-client