Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3634E72C893511EEAD9CD02D4AD9E6FC.roa
File: 3634E72C893511EEAD9CD02D4AD9E6FC.roa (raw, json)
Hash identifier: Ftis0iBCkPAEGoYr051BdhwhleZoNuubJUyehAVgwM8=
Subject key identifier: B4:5F:4A:36:41:C1:BD:78:38:D8:75:51:51:77:1E:23:C9:8A:F6:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 521B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3634E72C893511EEAD9CD02D4AD9E6FC.roa
Signing time: Wed 22 Nov 2023 12:46:53 +0000
ROA not before: Wed 22 Nov 2023 12:46:50 +0000
ROA not after: Sun 24 Dec 2023 12:46:50 +0000
asID: 399045
IP address blocks: 154.197.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21019 (0x521b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:46:50 2023 GMT
Not After : Dec 24 12:46:50 2023 GMT
Subject: CN=655df83d-0b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:8c:eb:d8:9b:2f:d7:72:b6:a3:d4:24:18:
21:47:d8:15:05:68:90:b5:d5:05:db:ac:25:a4:a4:
fb:7b:56:8a:a4:56:61:15:30:ea:e3:c7:6e:25:d0:
03:3a:1f:04:2f:e4:4f:87:f0:65:c6:c6:a4:46:6d:
f5:ee:b7:92:94:6e:5b:f9:1d:0e:dd:11:68:5c:f8:
d1:2b:f6:6f:84:a1:68:6c:52:30:ea:77:ca:d6:71:
5b:f3:0d:65:1c:c5:80:02:f8:d6:9b:18:6f:a6:8b:
56:0e:bb:ba:c9:58:b2:7c:3e:81:82:fc:78:30:92:
f5:30:4d:35:b0:7f:2d:38:ca:95:f3:30:90:8d:af:
ee:51:a3:5d:41:f6:9d:92:84:f7:bd:3a:b0:7d:df:
d4:d8:c6:75:56:39:0f:11:63:90:f8:a5:8f:6c:53:
17:39:62:ae:2f:2b:32:a6:21:45:fc:c0:58:dd:ee:
94:bb:49:0b:78:e6:09:1e:38:fe:b5:14:78:52:ae:
85:bf:2b:24:ec:55:8a:b3:33:db:34:bd:0d:ac:50:
3a:37:37:14:5d:da:e1:1e:e5:cb:c9:36:b3:7c:8d:
0d:e6:a7:a6:c6:46:43:e1:07:62:4e:30:c5:c6:2b:
64:2c:15:12:7d:c0:50:8a:7e:25:72:39:1b:bc:1e:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5F:4A:36:41:C1:BD:78:38:D8:75:51:51:77:1E:23:C9:8A:F6:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3634E72C893511EEAD9CD02D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:27:dc:f0:0e:d7:43:77:ce:ee:a0:0b:a8:1c:87:b5:07:b0:
07:23:65:58:37:b4:d5:bd:9d:9c:1d:2f:fa:4f:99:0c:47:fd:
92:3b:d6:4f:08:de:ae:f0:fa:13:a0:69:96:4a:33:58:8c:30:
5b:f4:70:32:d2:6b:6f:6f:1b:0f:80:b8:b8:62:b9:22:59:49:
0b:1b:37:12:15:41:d2:2c:05:b1:54:e4:3b:90:70:cb:bf:0d:
a4:be:d9:f5:d8:da:a0:2b:0b:35:c6:83:d9:eb:86:d2:3b:5c:
2a:8f:21:ff:3d:95:9f:5b:f1:6f:fb:c3:51:bc:c0:15:49:52:
b4:90:4c:96:00:11:6b:58:8b:03:91:61:7c:85:f3:91:99:2c:
3e:0c:ef:1a:a1:bc:ea:f0:10:f1:66:ba:54:f3:86:f4:25:2a:
88:ae:e5:e7:17:42:71:6f:88:a7:4d:6a:ec:f2:0a:c3:82:72:
e8:e0:a6:1c:d0:5e:37:79:ca:cb:7f:fe:1f:36:d5:20:8d:ef:
44:50:8e:a8:2f:83:af:c2:9b:68:7f:b3:d1:34:d9:5b:62:1a:
86:e2:31:e2:9e:e6:96:c4:78:0d:41:7b:d2:80:11:26:17:ce:
60:c1:a2:9a:45:52:24:ea:b8:54:1c:59:81:ad:86:9e:a1:85:
7e:c8:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:39:34 2025 by rpki-client