Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/409A41328CDA11EEB5C2BE594AD9E6FC.roa
File: 409A41328CDA11EEB5C2BE594AD9E6FC.roa (raw, json)
Hash identifier: A5LuNG/FSfUGQMJwgnJbsp28wp2uqc22SwUkiOAIb20=
Subject key identifier: ED:1B:6D:7B:3A:30:CE:2E:63:15:2F:6D:33:28:BB:5D:95:8A:70:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/409A41328CDA11EEB5C2BE594AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:05:51 +0000
ROA not before: Mon 27 Nov 2023 04:05:48 +0000
ROA not after: Tue 26 Dec 2023 04:05:48 +0000
asID: 62240
IP address blocks: 154.195.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21668 (0x54a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:05:48 2023 GMT
Not After : Dec 26 04:05:48 2023 GMT
Subject: CN=6564159f-bba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:6b:f4:ea:80:40:7c:df:cb:66:56:cd:de:
55:f1:1f:75:97:d4:5b:ef:07:2d:7c:ae:53:f9:e0:
b0:46:df:4d:48:c1:87:ed:04:b1:81:df:a0:d0:f6:
93:15:8c:af:6b:78:f3:af:20:b5:cc:45:ad:22:8b:
4c:35:95:c8:84:6e:82:c1:3a:13:8f:81:7c:04:6d:
4f:8b:db:77:ed:b7:5d:44:1d:ca:46:a4:8e:8d:e6:
92:f4:73:cc:3b:25:86:18:65:95:ec:9f:21:0c:a6:
3d:88:b6:07:d3:9f:c7:89:2f:3b:ac:09:67:e9:f6:
3a:ab:20:55:e0:31:0c:9d:c2:ed:40:2b:e3:fa:b7:
ce:f0:bd:56:77:00:8a:16:36:60:d9:be:8d:47:0b:
11:9a:b1:a3:73:22:2e:9f:50:85:ab:42:53:5c:81:
5b:d1:de:9f:a8:56:2c:4a:06:40:de:0d:6e:79:fe:
3f:57:93:2e:b5:c8:65:1a:41:18:a9:c8:cc:ef:5e:
2f:0b:83:23:c8:16:2d:67:6b:76:25:50:0c:05:7a:
70:bc:da:e9:3f:a4:ca:a6:2d:c7:33:24:73:38:00:
a3:b2:06:87:1b:c5:ed:4f:9e:22:87:75:65:79:35:
e2:8d:3c:17:c1:74:2e:38:3b:08:d4:50:49:39:39:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:6D:7B:3A:30:CE:2E:63:15:2F:6D:33:28:BB:5D:95:8A:70:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/409A41328CDA11EEB5C2BE594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ea:a7:29:68:d6:76:f6:5a:f5:85:55:b9:83:90:8d:85:06:
61:54:c1:c9:ed:59:14:20:51:da:f6:41:50:3d:39:a5:6e:2f:
16:85:b7:a0:5d:aa:7e:8e:33:5a:7f:10:0c:8c:27:e4:7d:6c:
f0:e1:af:fe:bb:7a:91:03:2d:d6:27:2a:c5:f7:17:7a:f8:ff:
d8:35:c0:10:f6:62:5e:ec:21:8d:4f:a4:0c:e0:14:3e:e3:9b:
18:44:e9:7a:ea:5f:50:83:77:bd:34:db:71:e2:d8:ed:b7:9b:
de:7d:36:b9:6a:6c:34:c8:64:07:f5:60:60:e3:5f:7c:60:5d:
bc:af:35:ed:66:23:96:74:69:26:01:94:12:96:e7:b4:5d:48:
3a:9f:52:bc:ff:06:90:54:ab:b2:60:98:df:d4:c3:e5:6a:72:
2c:62:7e:75:a4:7b:95:f6:b5:20:35:c7:1f:1e:04:bd:62:3f:
f0:b2:1a:3a:8f:2f:5d:5b:e8:e9:70:19:c5:d9:96:55:af:8a:
5c:99:59:ef:7b:13:8e:b0:a5:47:41:e9:52:65:59:8a:95:4e:
db:5d:e5:d2:cc:7a:23:b2:c3:7a:c4:23:b5:19:56:ad:c2:59:
a8:e6:4a:53:ba:92:67:74:05:c4:2f:f1:39:e5:15:98:b6:da:
06:82:6a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:51:31 2025 by rpki-client