Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42D802128A8311EEA1651D604AD9E6FC.roa
File: 42D802128A8311EEA1651D604AD9E6FC.roa (raw, json)
Hash identifier: ISnYgUcua0fv9CYf75RGnntQIe/VNcJ4eU5WPZxP23Q=
Subject key identifier: E5:D0:8B:63:BE:DF:20:B4:79:12:27:07:75:D1:D7:7A:A2:B9:AB:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42D802128A8311EEA1651D604AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:38:06 +0000
ROA not before: Fri 24 Nov 2023 04:38:03 +0000
ROA not after: Tue 26 Dec 2023 04:38:03 +0000
asID: 62240
IP address blocks: 154.195.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21218 (0x52e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:38:03 2023 GMT
Not After : Dec 26 04:38:03 2023 GMT
Subject: CN=656028ae-0e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:38:23:c9:d2:52:66:61:bc:10:aa:99:b3:
a6:bc:1b:ba:f9:7e:48:c1:4e:1b:14:fd:70:be:c0:
ad:e2:f4:60:bd:48:bc:7f:05:57:9b:70:e5:04:ee:
b7:33:37:e4:74:0b:12:f5:b6:6d:fb:79:66:f2:af:
70:d2:07:a0:d7:00:62:9d:00:f2:d0:39:f9:be:f6:
82:e8:b7:c0:1e:cf:7b:52:e2:52:7a:67:12:1b:c9:
96:14:f9:9d:4e:c2:db:b1:40:f3:20:8e:95:65:9d:
f7:43:6e:6c:97:8e:e3:ca:57:44:35:07:ac:5f:87:
85:00:4a:a5:59:0c:34:e0:d4:ec:30:9f:fd:66:f8:
de:8c:c2:dc:e2:77:4e:f5:6c:f8:e1:f2:5c:98:54:
31:0a:9d:25:df:e1:dc:e6:58:69:c9:0b:a4:8f:fc:
4b:ea:57:c5:d8:c4:0c:ab:7d:3a:64:8c:0e:67:8a:
2d:3f:3b:dd:51:0f:20:e1:2a:7d:02:9a:60:77:8f:
8f:af:6e:91:21:06:9a:97:ca:f8:bf:2e:cb:81:a0:
b3:a9:f8:6d:26:aa:4f:c3:5f:6d:29:17:53:d0:6a:
ef:2e:43:5a:43:84:ed:f6:3c:50:4a:0f:ae:1e:b3:
58:41:95:e8:39:33:08:3b:70:17:6a:07:d6:3e:1b:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D0:8B:63:BE:DF:20:B4:79:12:27:07:75:D1:D7:7A:A2:B9:AB:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42D802128A8311EEA1651D604AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.176.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b7:21:91:3e:de:05:bf:d2:65:53:70:2c:42:e3:90:74:9f:
73:83:c2:32:02:02:42:9f:b2:35:4f:a4:15:2c:29:07:24:c8:
df:c3:c2:8e:ac:d4:6e:43:13:5b:b8:17:34:94:17:f7:d3:09:
21:5e:88:fe:70:5a:a7:a8:ce:e7:7e:11:7f:05:7e:97:b6:2e:
68:a3:d2:2d:0a:23:db:81:5c:ee:ac:ae:80:e9:e5:0c:f4:ac:
27:50:40:c8:f9:fd:6f:c6:93:40:56:aa:99:ef:ce:8f:35:f8:
f2:ea:47:a7:26:ee:ef:f7:22:8f:ce:35:8b:5d:97:c9:ce:a5:
87:c7:4e:bc:91:a7:30:78:5e:be:63:d6:db:d1:4b:94:cf:68:
3c:3c:1a:42:f9:44:95:c0:45:a6:51:ff:47:79:3e:84:ba:4a:
9e:c1:75:6d:18:be:20:c1:14:a4:34:30:11:2e:e9:d0:91:8a:
46:7a:25:a2:54:71:53:9d:31:31:0c:99:d4:b7:26:23:50:d7:
8a:8e:e8:35:0e:31:b5:9e:e5:c9:1c:b1:aa:17:6e:62:b1:d7:
cd:63:7b:41:a3:a5:8c:43:80:f1:3f:71:6d:5a:a9:9c:b0:1c:
d3:14:08:5b:9c:13:e4:2f:f3:fa:73:e8:1d:87:70:d3:78:b3:
86:f7:ae:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:15:07 2025 by rpki-client