Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DA918F08A7D11EEB091404B4AD9E6FC.roa
File: 2DA918F08A7D11EEB091404B4AD9E6FC.roa (raw, json)
Hash identifier: vNmKr8KLeBRoFAKz+MFyOJ0inUj1TLrZviWKH+z40VI=
Subject key identifier: 6F:ED:02:D3:79:AB:12:CB:5E:5D:02:95:B9:3F:1B:4C:94:60:5B:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 527A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DA918F08A7D11EEB091404B4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 03:54:34 +0000
ROA not before: Fri 24 Nov 2023 03:54:30 +0000
ROA not after: Tue 26 Dec 2023 03:54:30 +0000
asID: 62240
IP address blocks: 154.195.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21114 (0x527a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 03:54:30 2023 GMT
Not After : Dec 26 03:54:30 2023 GMT
Subject: CN=65601e7a-9a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:87:ef:02:d0:8b:55:77:fe:9c:83:cc:41:
0d:7d:af:68:db:69:b7:c4:17:31:db:7a:f5:8d:45:
17:9e:07:e3:cc:80:aa:d8:d4:c2:3a:cc:06:1a:85:
ce:43:3b:a0:0c:4a:43:a6:8e:32:3f:f7:aa:b8:2b:
fd:c7:e0:85:bc:08:68:c3:0d:8d:c8:48:f4:aa:d0:
f3:cc:10:e5:0e:60:3c:91:6d:20:10:69:e2:42:2b:
16:b6:e4:b7:c8:86:33:93:ff:bb:ad:f7:ff:43:dd:
97:0d:cf:12:4d:52:70:76:78:37:9e:69:8e:f3:c1:
9b:5c:12:1a:f1:ed:38:92:f6:bb:d7:50:c3:6e:2a:
30:80:61:9b:00:72:0a:fc:44:07:8b:6a:02:49:54:
6a:74:bb:9c:73:cc:12:9a:63:79:64:7b:f6:b6:9b:
17:05:59:9f:e7:4f:91:66:16:91:f6:f0:a7:f1:63:
0f:cc:21:3f:eb:c8:4f:57:2e:2f:24:82:ab:1b:09:
a4:2f:31:10:64:7b:6b:49:47:59:0e:c8:0f:d1:d5:
a7:d2:71:27:8e:38:3f:de:88:d7:9e:1e:5f:5b:d6:
44:61:d4:27:d7:0a:1f:04:4c:9b:16:9c:fe:09:6a:
d7:78:18:62:06:02:e7:3d:0d:e3:d2:2c:d8:bc:df:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:ED:02:D3:79:AB:12:CB:5E:5D:02:95:B9:3F:1B:4C:94:60:5B:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DA918F08A7D11EEB091404B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.164.0/24
Signature Algorithm: sha256WithRSAEncryption
55:af:d2:1b:3f:f0:a3:b3:ce:b2:96:4f:10:6a:5c:64:0a:d1:
8d:be:79:24:33:37:08:d9:ed:13:49:94:14:93:9b:1e:35:87:
f9:11:75:92:e8:b7:f9:9e:c5:fa:5f:d8:d3:08:7d:a5:34:ca:
4a:b6:60:6e:be:2b:9d:db:14:c4:06:c1:16:d2:46:f6:77:50:
2b:2b:ef:a2:23:d1:cf:cf:d6:08:3f:9e:fb:bf:ad:52:03:a6:
b8:db:cd:bd:55:46:0b:73:17:b3:e3:f8:b7:6a:58:28:91:e4:
85:bd:1c:40:24:c7:65:1e:f8:1b:a3:3a:70:a0:86:fb:81:bb:
53:bf:36:4d:62:8d:e9:0e:a2:15:12:07:83:06:30:da:34:61:
03:5b:76:f8:cd:97:1f:05:71:6c:43:7b:96:e2:59:c1:56:64:
c8:03:31:1a:48:4c:d9:a3:82:b6:d9:c7:59:83:c0:c0:91:c7:
a5:32:2c:25:2c:74:68:52:49:a5:83:10:cc:7e:21:ae:ec:a1:
29:5a:8b:3f:5b:54:00:b6:61:73:b5:45:0b:c1:90:d5:87:08:
44:70:7b:d6:5a:f5:34:2d:8c:4a:69:91:3f:e4:f2:f1:2a:02:
61:00:b6:b0:61:7c:0e:bd:d1:dd:9a:2f:e3:31:9f:f8:f1:07:
c1:67:c9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:19:58 2025 by rpki-client