Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/376665808A9D11EE82966E364AD9E6FC.roa
File: 376665808A9D11EE82966E364AD9E6FC.roa (raw, json)
Hash identifier: Nk65eJl1j9kQml4bzujr5CPF4aTz8xyOyFC1etrbBMY=
Subject key identifier: 36:7E:C8:59:E5:B6:10:E6:04:2F:2C:A9:D6:58:7C:FB:25:A8:47:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 548F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/376665808A9D11EE82966E364AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:43:54 +0000
ROA not before: Fri 24 Nov 2023 07:43:50 +0000
ROA not after: Tue 26 Dec 2023 07:43:50 +0000
asID: 62240
IP address blocks: 154.195.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21647 (0x548f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:43:50 2023 GMT
Not After : Dec 26 07:43:50 2023 GMT
Subject: CN=6560543a-99bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:bb:4d:3d:0f:cd:fb:9d:33:48:bb:c0:63:
ea:74:21:30:50:44:96:ff:87:07:33:53:d0:a9:af:
96:8b:46:d2:4d:df:3a:b3:30:e7:0b:5a:ac:d2:d3:
62:03:e9:bc:77:35:1c:72:a3:85:a7:48:b3:ea:30:
3f:d0:d6:27:c3:44:cd:14:79:39:22:93:20:fe:5d:
45:f6:06:15:67:7b:19:98:8c:ac:2c:bd:45:e8:ae:
bd:5f:08:bc:06:cf:8d:0b:c6:11:de:c4:4a:56:ad:
d3:e2:b5:8e:5d:51:b6:a2:c3:3a:82:5b:81:6c:e3:
69:dc:c1:b1:75:ae:6a:e1:41:cd:41:42:ee:42:1f:
a1:8b:d0:85:98:40:6b:5d:f5:1b:5b:d5:0f:2b:02:
cc:8e:ce:1d:95:c8:96:ed:4f:3d:6d:06:dc:51:ff:
0e:9c:d1:ad:26:22:c2:5e:83:56:be:b1:19:56:6f:
c0:09:20:8d:87:24:4b:02:01:b3:df:41:d0:f2:16:
26:a0:f3:73:8e:bc:cc:c3:3d:32:88:6c:e9:b7:0b:
9b:68:79:a5:97:f4:60:36:25:ae:fd:60:c7:c9:aa:
fc:b4:41:33:db:2e:87:e2:82:3e:e1:5b:6e:73:be:
31:e0:95:1d:98:de:a6:16:3f:3d:af:1a:84:d9:f2:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7E:C8:59:E5:B6:10:E6:04:2F:2C:A9:D6:58:7C:FB:25:A8:47:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/376665808A9D11EE82966E364AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.120.0/24
Signature Algorithm: sha256WithRSAEncryption
91:86:d1:8c:2f:1c:e7:4d:e7:44:f9:96:b8:f0:15:7a:b1:b4:
91:62:a4:6b:79:47:f5:2b:e2:08:6c:13:ad:b1:b0:d6:be:0d:
72:67:92:b2:26:e0:be:65:74:9f:38:33:c7:d6:36:57:ba:ed:
1e:fa:e8:57:02:7a:e6:e1:ae:7e:82:a3:39:24:d7:f9:2c:48:
81:95:36:5c:85:26:b6:fe:ab:2e:30:6d:a2:57:af:08:cc:e3:
f3:31:63:e5:80:9a:0c:d0:06:86:2b:a8:8f:84:ba:22:9f:b4:
18:34:54:7e:12:af:e8:0d:67:2b:1b:3a:7b:27:a2:ea:bf:29:
7c:e6:a8:55:e2:dd:34:3b:e8:c8:44:28:80:56:12:ca:fe:d1:
af:ef:20:7f:b2:b1:d9:94:27:e7:2b:0c:01:f4:78:c7:73:37:
3e:b7:aa:05:d4:2b:52:a0:c2:5c:e2:8f:a0:5b:5f:8b:8c:7f:
fc:b7:0c:10:b5:f4:d5:a2:2e:ed:4b:81:3d:1a:9b:68:57:97:
1a:11:22:41:b4:85:a2:c6:fe:ea:a4:ca:03:7a:71:cc:9e:2f:
f6:16:ca:de:18:9e:22:68:f9:fc:7a:33:59:2e:89:2b:95:e1:
d1:13:30:48:93:82:d6:ab:92:df:12:9a:ed:c0:cc:59:84:5a:
df:b6:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:14:04 2025 by rpki-client