Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CAF76228A9311EE99A2DB154AD9E6FC.roa
File: 2CAF76228A9311EE99A2DB154AD9E6FC.roa (raw, json)
Hash identifier: BOaqbBdwaw0fk4IY1rx9oRVA6ySn6zp6dvoSpXlxw3U=
Subject key identifier: 98:36:4B:EE:22:82:CD:CD:56:DA:60:BA:D1:5A:49:B6:95:82:79:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 53C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CAF76228A9311EE99A2DB154AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:32:01 +0000
ROA not before: Fri 24 Nov 2023 06:31:57 +0000
ROA not after: Tue 26 Dec 2023 06:31:57 +0000
asID: 62240
IP address blocks: 154.196.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21447 (0x53c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:31:57 2023 GMT
Not After : Dec 26 06:31:57 2023 GMT
Subject: CN=65604361-5c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:9c:83:2f:f3:64:0b:2b:e3:1f:cb:52:2e:
85:3e:03:5c:f1:87:45:bf:e8:f6:5c:0e:e5:54:a5:
dd:18:e1:75:da:c9:1a:50:f1:87:a9:26:0f:82:c0:
70:ce:cd:d3:2e:44:ac:4a:36:fa:83:b1:cc:0d:3c:
cf:99:40:2f:af:dd:7f:c1:d5:08:de:4c:0a:e7:0f:
91:dd:b5:b5:4d:ed:00:52:cd:90:41:6e:45:ca:61:
dd:8f:d1:f7:ef:cc:31:12:84:fc:bb:b0:e4:13:df:
3c:66:11:57:3d:78:8d:e7:62:a5:ab:19:50:07:04:
d4:79:3b:e6:01:16:d9:35:2e:64:1a:65:d1:96:6f:
d0:30:cb:ad:77:07:89:e8:07:6e:16:2d:21:6b:7d:
c4:43:f1:8b:f7:85:43:f8:d3:d3:e3:86:f6:aa:4e:
b2:56:46:ad:e9:27:29:44:91:75:10:7a:72:2b:0b:
f6:27:cb:fc:76:a9:c5:c2:da:a5:94:74:61:92:8c:
8e:e8:eb:33:c4:04:69:46:b1:6b:14:d4:84:7c:94:
6d:77:bf:b7:bc:ce:08:74:d8:92:01:2e:09:28:63:
ec:91:d5:83:6d:35:80:f6:56:f4:4c:5d:fb:91:0d:
29:cb:6b:6f:06:83:8d:20:e4:90:16:70:e9:b6:cf:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:4B:EE:22:82:CD:CD:56:DA:60:BA:D1:5A:49:B6:95:82:79:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CAF76228A9311EE99A2DB154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.31.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:0f:67:78:ee:23:43:55:3d:35:74:1b:b1:55:37:ec:96:e3:
f8:18:14:f9:95:61:e8:86:30:ed:57:61:30:2b:ad:dc:34:75:
20:9a:8e:e6:63:97:39:05:4e:a7:4d:82:cc:42:a7:b5:1d:4b:
a0:a2:ef:d0:40:e0:ab:e3:e0:be:29:38:57:fe:7c:53:65:48:
29:f6:66:fa:0f:52:6a:6e:4e:b4:f3:36:dc:fc:f3:4f:79:9e:
52:33:65:fe:ea:57:c8:b3:2f:74:bb:1b:8b:72:d3:f7:fe:fc:
c7:90:46:75:08:0f:65:d6:3b:c6:34:d8:b1:f9:e8:58:ae:5f:
3d:7a:92:0c:9f:35:7e:3c:a3:84:cb:42:49:18:3d:3a:37:36:
cd:c7:c8:6b:58:96:c1:ef:15:fc:6b:66:23:63:68:31:ef:9a:
53:d2:b7:77:7a:81:45:b4:bb:35:6d:83:ae:96:21:1f:ef:04:
bb:4b:d5:d5:6b:7f:12:3d:60:54:94:65:33:69:55:a6:9b:96:
c0:68:4e:88:52:8d:52:ae:c7:db:f3:f2:3a:d0:ee:71:c7:c6:
01:9e:d2:00:09:7b:53:59:27:58:c2:db:fc:b4:7c:bd:fc:df:
c1:6f:54:45:d6:39:aa:f3:5d:f7:af:7a:03:a7:fb:48:3f:9a:
54:58:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:48:11 2025 by rpki-client