Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F8CC4A48A9711EEACED07234AD9E6FC.roa
File: 2F8CC4A48A9711EEACED07234AD9E6FC.roa (raw, json)
Hash identifier: bW8OI80Tg3J3AZbiLRhy/+VvCxVnR/QhJpBElHM4acM=
Subject key identifier: 32:74:7B:89:50:D5:EE:98:EA:CE:50:FF:5E:DD:F4:12:E0:B8:12:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5418
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F8CC4A48A9711EEACED07234AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:00:44 +0000
ROA not before: Fri 24 Nov 2023 07:00:40 +0000
ROA not after: Tue 26 Dec 2023 07:00:40 +0000
asID: 62240
IP address blocks: 154.195.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21528 (0x5418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:00:40 2023 GMT
Not After : Dec 26 07:00:40 2023 GMT
Subject: CN=65604a1c-ca76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:bf:73:85:83:34:46:87:bf:b7:70:93:44:
d8:89:e2:0e:dd:ba:bc:a4:0b:b0:7f:ba:78:40:93:
b3:50:6d:97:32:ef:42:55:a6:f5:b3:ae:a8:cd:45:
9d:60:ba:65:39:54:f7:71:d1:9f:31:4a:2a:54:64:
1a:c3:11:ff:a0:bd:b4:8d:72:81:a5:e8:d9:ee:63:
ea:49:6f:ca:21:ae:66:79:0e:70:be:4d:15:04:f7:
44:15:1a:2c:9e:31:64:61:32:7e:dc:02:7e:af:e7:
05:7b:fd:97:60:7f:f8:c1:71:65:05:a2:fc:77:78:
b9:15:d7:03:9b:62:c8:ea:d6:2f:b4:34:f3:cb:2b:
18:05:67:85:dd:21:31:8e:18:51:eb:86:bd:80:d4:
ad:4d:3c:af:cf:a2:8c:01:34:02:41:4b:99:1e:cb:
5b:96:29:00:f0:93:fd:78:69:94:7c:48:1f:3c:b4:
6f:76:e2:9b:10:a6:1b:2f:04:a5:fc:0b:9c:f9:90:
57:51:3d:28:b0:2d:fb:d0:48:17:31:ae:20:86:d3:
73:47:04:49:d8:26:7e:ce:5f:1a:8e:9c:c5:6a:0d:
9b:e5:cc:30:13:1b:1f:d1:55:8b:50:85:b1:7b:a5:
87:49:38:60:50:a8:81:fc:b9:01:ff:28:f3:02:45:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:7B:89:50:D5:EE:98:EA:CE:50:FF:5E:DD:F4:12:E0:B8:12:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F8CC4A48A9711EEACED07234AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.138.0/24
Signature Algorithm: sha256WithRSAEncryption
20:fa:bb:07:5d:ae:f7:d4:1c:77:93:03:f1:74:7d:57:b2:cd:
b3:29:f6:e4:a0:80:15:14:cd:70:50:90:25:6f:a6:ec:2a:9e:
33:cd:bf:8a:07:c5:6e:fb:3f:af:54:04:b2:62:37:34:ea:2c:
44:b0:cb:af:cd:90:fd:ae:3f:74:c3:db:34:b6:60:de:9a:7c:
b9:02:a0:52:ab:da:56:7a:9c:b4:b5:fd:8f:c9:fc:06:77:54:
78:5e:d3:1b:1d:22:43:1e:b6:95:90:88:cc:9b:cf:65:ca:83:
64:8c:b4:1d:c8:00:e2:0c:14:58:d7:fb:12:65:59:fc:bf:19:
4a:4c:19:1e:a8:4f:63:73:8f:d8:52:44:01:dd:33:ae:3d:cb:
30:50:12:02:9e:a0:58:a6:dc:20:d0:93:db:b5:2b:de:ac:8a:
05:4a:6d:12:84:b6:49:47:d7:3d:29:5a:9f:5e:ed:92:84:13:
0a:55:29:75:5c:43:93:e3:94:fb:67:67:bd:c8:60:0b:dc:0e:
e1:af:c7:42:95:6d:49:f0:a8:b3:28:a2:9d:4a:9a:40:2f:e4:
69:b8:22:b7:c2:42:3b:a2:da:64:c7:97:8b:58:ff:f3:38:98:
ef:61:62:fa:07:91:9a:fe:53:12:cf:84:0e:1d:5f:0b:2e:1a:
e0:b3:be:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:49:09 2025 by rpki-client