Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42B4A6668A9011EEBB6EC28A4AD9E6FC.roa
File: 42B4A6668A9011EEBB6EC28A4AD9E6FC.roa (raw, json)
Hash identifier: ty3wKhdF/DteMx/T2pMslC2qKKYLUjdkVEnpHGrlyQ0=
Subject key identifier: FD:A1:79:48:17:E8:62:0B:66:27:5C:E4:26:04:4A:90:FF:44:DD:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5395
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42B4A6668A9011EEBB6EC28A4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:11:09 +0000
ROA not before: Fri 24 Nov 2023 06:11:06 +0000
ROA not after: Tue 26 Dec 2023 06:11:06 +0000
asID: 62240
IP address blocks: 154.195.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21397 (0x5395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:11:06 2023 GMT
Not After : Dec 26 06:11:06 2023 GMT
Subject: CN=65603e7d-98d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:0c:1b:62:1d:2d:f8:0f:f0:f1:8e:50:01:
dc:cd:b8:5a:b5:39:fb:f0:bd:13:15:db:18:28:cf:
81:f5:38:ff:1c:60:c5:cb:10:98:63:66:36:36:b8:
c7:b2:31:9d:f8:e8:b0:e0:af:45:43:36:84:61:86:
a8:b7:bd:68:d3:cc:0b:16:2d:4b:92:d3:7f:52:c2:
a6:da:ba:bc:38:d9:a5:8f:2f:33:8e:a2:54:3a:a7:
4a:6b:f0:64:7f:d8:cd:38:22:20:5a:25:8a:4f:19:
74:bb:4a:b4:fc:24:d7:62:47:c9:e1:d0:3e:21:2e:
61:10:07:91:fa:a0:fd:fe:13:34:0e:96:ab:c4:34:
84:ab:a2:b5:a0:42:28:1e:3a:77:53:55:66:20:af:
52:7e:c4:04:d2:5c:cd:8a:de:fd:29:44:e9:3a:44:
e4:d5:71:c5:80:d1:55:79:13:7c:e6:03:9e:a7:50:
2d:52:53:d3:e1:29:c8:a4:cd:2a:33:0f:7c:a4:b7:
1e:cf:48:93:2f:b6:bf:52:69:06:af:4d:dc:f7:a7:
c8:c3:f4:68:27:d3:29:08:05:d8:7e:6f:87:15:d8:
6b:53:1f:99:8d:97:4e:09:a6:83:ac:b2:27:8e:c4:
8c:3f:84:e0:74:59:55:08:ca:b6:0a:23:de:a2:76:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:79:48:17:E8:62:0B:66:27:5C:E4:26:04:4A:90:FF:44:DD:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42B4A6668A9011EEBB6EC28A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e9:e6:11:38:14:63:6f:3e:9b:42:2c:fd:1a:99:b2:d1:02:
cd:ff:99:4c:db:13:4f:fb:f1:2e:9a:f5:f0:97:0e:86:d4:56:
77:12:8c:e3:d2:e1:f3:94:42:ba:f8:96:67:34:9f:e4:73:60:
c3:13:94:84:1d:85:a3:67:2a:d5:b0:5b:0d:7e:d1:43:07:48:
7f:4a:f5:00:af:9f:43:b6:2c:84:fc:6f:b7:a1:0c:5f:2e:1b:
99:0f:10:bd:d0:da:1c:83:9c:f6:87:a2:90:f0:66:8c:86:ef:
5e:ac:ab:0b:16:4a:3b:37:d3:96:fb:c9:71:f6:47:14:7b:67:
27:cc:f4:29:8c:34:f3:2a:51:61:95:7e:9d:81:13:b5:f9:56:
d9:1c:02:0c:6d:a4:cb:c9:55:09:1e:50:69:4e:4e:ee:c4:3e:
da:cf:26:69:02:ab:a5:d3:70:d6:f9:18:bf:55:fc:73:cc:67:
60:27:59:98:9a:8d:63:9e:bd:c2:32:72:39:56:d0:3f:e6:0e:
6b:42:c7:8b:51:b8:72:df:02:81:be:ad:10:09:09:9b:92:9c:
60:78:97:1b:a8:b2:45:1a:a5:de:83:91:1a:96:13:84:84:02:
b9:55:08:e5:31:df:2e:11:2c:75:ff:b7:64:7a:1b:48:7c:30:
20:22:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:56:21 2025 by rpki-client