Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43DCEC248A8B11EE88915D7A4AD9E6FC.roa
File: 43DCEC248A8B11EE88915D7A4AD9E6FC.roa (raw, json)
Hash identifier: YkfpWrXBURtIz7IXEdNd6bUY8JIxzTDOBNZjaYIXgeI=
Subject key identifier: 4C:0E:79:04:96:D6:87:1F:B0:7E:87:06:07:21:1F:35:76:98:88:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5340
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43DCEC248A8B11EE88915D7A4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:35:24 +0000
ROA not before: Fri 24 Nov 2023 05:35:21 +0000
ROA not after: Tue 26 Dec 2023 05:35:21 +0000
asID: 62240
IP address blocks: 154.194.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21312 (0x5340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:35:21 2023 GMT
Not After : Dec 26 05:35:21 2023 GMT
Subject: CN=6560361c-8f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:38:ab:be:eb:7b:e1:4f:12:1b:19:1d:ec:
1c:df:3d:34:fc:d2:4a:3c:72:b2:66:7e:ca:79:56:
3f:5c:94:bd:19:53:69:0f:b8:69:b2:2b:af:d9:9f:
00:3c:de:c1:4b:b3:53:62:a7:0f:9f:06:07:65:51:
89:07:dd:16:58:d1:2d:68:d9:c1:84:b4:28:b7:4f:
a9:66:63:7d:f8:59:ed:a7:a0:04:12:9f:ec:31:c2:
d4:2f:b9:a1:05:87:b4:af:b6:02:0e:b8:bc:c0:88:
56:bc:47:26:b0:be:fd:59:5d:c8:c3:9f:92:6c:78:
1a:b8:c3:c2:1a:75:90:4e:ec:cb:26:cb:7b:7a:25:
21:ef:b5:0c:85:6f:57:6d:12:cc:38:20:d4:f5:2f:
d3:8f:3c:be:75:48:b1:50:2f:ee:79:f9:05:1b:f3:
66:30:d3:5b:33:f4:18:94:39:57:f8:56:9c:e0:13:
e7:10:7c:50:47:c8:81:cd:83:ca:bf:a0:2b:3b:d3:
45:b4:70:a8:fb:83:30:6c:44:e5:b8:95:bd:06:0d:
38:70:12:5f:ea:f8:27:11:56:ab:5e:6f:22:23:c5:
19:c1:48:ed:97:40:d8:19:15:4c:59:e8:44:5c:6c:
f7:1d:d0:a3:2f:df:6e:11:ac:11:23:97:b8:1a:52:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:79:04:96:D6:87:1F:B0:7E:87:06:07:21:1F:35:76:98:88:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43DCEC248A8B11EE88915D7A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.116.0/24
Signature Algorithm: sha256WithRSAEncryption
96:31:6e:11:ef:8c:b3:d0:58:de:f6:d8:1c:90:6c:3a:20:a4:
56:13:0a:be:fb:d9:bd:ad:e4:3b:f3:1b:53:4e:9f:a2:51:a4:
69:2a:2b:eb:42:d8:05:6d:5c:44:28:b3:e6:5e:52:9f:1b:2c:
98:41:0f:fc:25:22:c6:20:7c:54:9e:16:8c:50:e8:e4:06:22:
24:25:b5:13:32:02:10:9d:63:9f:c1:a7:a0:a0:90:b9:e0:94:
67:38:d9:16:bd:78:3a:fa:e3:c9:fa:22:b4:fb:29:6b:08:43:
33:92:72:65:0f:fa:ed:86:ab:75:d1:93:27:22:8f:3d:07:ec:
48:76:a4:9a:6e:94:2e:bd:11:4a:74:67:c4:99:a4:f9:e4:15:
08:49:f7:80:25:1b:e8:2c:e6:cd:e3:47:54:0e:07:cb:65:75:
ad:93:43:b5:ef:e2:44:d4:47:40:71:8f:08:ff:ea:b5:50:68:
e1:5f:8b:0a:18:50:cb:aa:4b:18:b9:97:5d:7e:ab:f3:66:7f:
a8:4d:76:48:6b:7d:4c:5f:02:9d:08:cc:69:f6:0b:55:6f:9f:
55:0b:1c:78:ab:10:89:bf:a1:27:d6:8c:50:cd:54:1b:be:ca:
0b:6f:3b:13:f9:de:61:1f:af:a4:88:08:36:25:19:88:38:ee:
d5:7c:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:04:06 2025 by rpki-client