Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A94357C8A7E11EEB976884E4AD9E6FC.roa
File: 2A94357C8A7E11EEB976884E4AD9E6FC.roa (raw, json)
Hash identifier: A3YKX1HquaCtWp+uUvXdfewuy+f8hsmE53ER/AOx8E8=
Subject key identifier: BD:C1:45:9D:02:2D:9D:69:B8:98:65:80:77:3D:F7:A5:21:86:DF:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5292
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A94357C8A7E11EEB976884E4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:01:38 +0000
ROA not before: Fri 24 Nov 2023 04:01:35 +0000
ROA not after: Tue 26 Dec 2023 04:01:35 +0000
asID: 62240
IP address blocks: 154.195.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21138 (0x5292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:01:35 2023 GMT
Not After : Dec 26 04:01:35 2023 GMT
Subject: CN=65602022-47e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:bd:ba:c5:57:97:04:33:84:c7:5b:72:c1:
4b:73:4b:e2:93:35:47:60:66:81:21:02:a6:ef:06:
36:86:5f:70:4d:be:93:bc:24:93:9e:f9:dd:20:66:
5a:22:33:e6:a6:f4:e7:5b:33:54:9b:10:0c:2b:7b:
0f:f6:94:a9:30:2c:13:a7:95:6b:7d:eb:c4:66:a3:
b4:4a:76:fc:ac:fe:41:b3:0f:54:a8:42:7a:0b:c3:
44:25:36:72:8e:6b:98:82:e2:a5:4c:9d:98:3f:ca:
1e:47:35:82:c3:57:e8:34:d1:a1:9e:cf:e4:eb:23:
68:40:74:45:62:c3:71:71:cf:f1:2f:f7:e1:43:28:
92:ad:0f:33:3a:d6:ea:54:30:5b:00:3d:b0:50:a5:
38:9a:11:06:7f:fa:2d:15:5f:f7:84:23:47:c2:a4:
cc:ee:23:6c:26:03:ec:02:fd:b7:54:7b:cc:fc:c4:
f2:d4:0f:66:ff:11:75:ce:13:0c:5c:39:dd:bc:ae:
32:11:45:10:d3:a5:bf:3a:75:c7:ed:53:b1:cf:a0:
3a:3e:8f:a7:b4:7e:f7:03:a4:f1:eb:8c:9b:9c:5e:
3b:04:70:10:a2:5e:74:ee:0f:b5:c9:4f:14:47:46:
d3:28:f3:da:1c:e1:e4:68:84:df:df:2f:21:96:83:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:45:9D:02:2D:9D:69:B8:98:65:80:77:3D:F7:A5:21:86:DF:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A94357C8A7E11EEB976884E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1e:74:f6:f6:4a:25:3a:b3:fa:c4:e8:f5:11:84:e5:0e:57:
95:22:fb:0e:f3:72:81:3b:7f:e0:f8:f6:9e:cb:f2:bf:fe:d1:
99:9c:99:01:b0:34:01:12:91:b5:51:04:c4:87:a8:37:05:11:
cd:14:f3:06:79:f2:0c:c8:d9:25:f6:bc:e1:71:d2:ed:58:d9:
05:ca:b7:93:d1:cc:b7:2a:d2:a5:ea:27:a6:33:39:8e:a4:02:
9c:98:a4:73:df:b9:ff:5c:b0:d1:23:6e:78:bf:0d:05:d8:f3:
93:e6:29:04:68:1d:aa:1f:77:a1:76:7a:1f:cc:60:b8:87:ec:
d9:34:cf:a6:b5:e5:1b:12:da:db:ee:7a:a8:34:7a:b6:dc:5d:
cd:97:cb:84:40:5f:4c:3c:b4:7a:1d:d0:a3:33:77:df:9d:88:
41:4e:41:f8:95:2b:f8:d2:31:0a:d3:f5:19:66:ad:1e:41:a1:
fa:f9:59:0b:0e:49:07:46:79:f8:7e:f9:45:b6:e4:52:79:a2:
f5:a3:27:24:d5:d6:9c:23:02:10:1a:47:21:7d:56:31:16:c1:
c1:55:5a:06:2b:aa:5b:cf:f9:d3:bc:60:d3:ab:16:f9:9c:6f:
2d:ed:99:ae:3e:f9:58:5f:4e:a2:26:97:97:0e:6b:90:8e:0a:
8b:a9:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:40:08 2025 by rpki-client