Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F8782F48CDC11EE8A8E05604AD9E6FC.roa
File: 2F8782F48CDC11EE8A8E05604AD9E6FC.roa (raw, json)
Hash identifier: vWfg6Bo8er6utaWGKOG17ySX9yzkeq3SZHLHvdWt8vA=
Subject key identifier: 01:E4:6B:EC:0A:E1:AB:E9:6F:5E:58:48:E9:B0:B3:4D:20:6C:A4:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F8782F48CDC11EE8A8E05604AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:19:41 +0000
ROA not before: Mon 27 Nov 2023 04:19:38 +0000
ROA not after: Tue 26 Dec 2023 04:19:38 +0000
asID: 62240
IP address blocks: 154.195.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21717 (0x54d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:19:38 2023 GMT
Not After : Dec 26 04:19:38 2023 GMT
Subject: CN=656418dd-5510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:1c:11:49:34:39:dd:2a:0e:10:66:6a:29:
71:71:ae:11:50:69:66:0c:8b:d4:af:2a:f3:e4:8f:
2a:9a:3e:70:ca:7e:41:d3:01:b8:97:04:c9:22:34:
29:b0:11:ea:6f:95:0a:44:37:40:ca:dc:d2:1d:5f:
58:ae:68:ef:5d:1e:c0:e7:38:bf:a1:85:dc:13:65:
b9:78:9f:77:d4:82:4b:97:27:6d:34:cb:80:bf:8d:
49:59:53:4c:d2:ec:bc:c4:3e:76:96:af:24:e2:c9:
6c:e6:21:2b:c1:37:b5:9d:f9:a4:e1:51:c3:ef:2d:
1e:01:6c:39:47:e6:bc:21:ea:4d:79:b7:f3:14:f3:
2d:3c:63:c8:76:94:e1:ee:e6:b2:06:8d:20:22:d0:
4f:cc:e5:b2:2a:c1:ec:b2:dd:52:08:3e:32:71:a4:
06:ec:17:78:f3:5b:ab:67:b2:c1:71:99:6d:34:f3:
73:3c:02:d4:2f:54:8e:bd:cd:38:eb:d2:40:36:eb:
d3:05:f8:24:42:3b:58:76:a4:28:f2:e4:b3:4e:0c:
c5:d9:5d:eb:f8:a1:aa:d4:43:a1:e5:38:de:3f:fc:
dd:f6:2b:ff:9d:42:80:1b:e8:c4:90:ae:0d:22:2a:
14:1e:5e:10:5c:fb:47:b8:14:9c:d5:20:34:b0:5a:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:6B:EC:0A:E1:AB:E9:6F:5E:58:48:E9:B0:B3:4D:20:6C:A4:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F8782F48CDC11EE8A8E05604AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:86:9a:38:0b:1a:86:f7:0e:e2:5a:96:45:ec:cc:ef:5c:b9:
f6:38:93:42:d3:5a:fe:55:f2:57:bf:af:55:59:96:23:f5:9c:
67:e3:e5:7e:cd:75:bf:1e:96:46:20:a1:66:99:b5:3b:a4:68:
03:48:91:a0:69:d7:e9:25:7a:2e:2d:3b:80:7b:d3:ce:58:f6:
7a:ce:b7:89:00:4b:35:49:43:21:57:7a:1c:45:2f:14:0c:58:
6f:7d:06:fb:81:9a:4b:f7:08:8e:31:26:79:1e:73:28:c4:33:
a0:05:56:b0:4e:cf:44:b9:5b:7a:05:78:3a:ea:c0:1d:65:75:
0c:c5:bb:98:8d:ae:40:78:6f:85:61:fd:7f:12:de:e6:6f:9a:
9a:79:be:57:f6:a4:b9:66:8c:f2:4a:e6:6c:23:a2:48:c6:47:
17:31:21:fa:d8:dc:00:74:3b:e2:fd:83:57:cc:6d:a5:60:88:
77:3a:b7:f2:00:68:36:c9:07:3c:85:29:cb:20:12:7d:86:02:
55:2c:9f:8f:59:4b:8b:8d:f4:c9:fc:53:7c:74:31:3c:f5:d6:
68:2c:59:13:56:3b:e4:2f:4f:c4:fb:06:1e:92:11:f4:00:fa:
fd:e6:8a:6f:3c:29:37:0f:44:32:75:4c:7d:5a:f2:b1:5f:d3:
e4:c1:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:09:59 2025 by rpki-client