Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47E5F27C8A8411EE83C480634AD9E6FC.roa
File: 47E5F27C8A8411EE83C480634AD9E6FC.roa (raw, json)
Hash identifier: giXZvq/phFO/3nWTp/i1cufI1xodYTldGylWb1BE0KQ=
Subject key identifier: 9E:7E:73:CF:E6:BF:79:C8:34:49:EC:81:AD:23:56:50:7D:96:4D:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47E5F27C8A8411EE83C480634AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:45:24 +0000
ROA not before: Fri 24 Nov 2023 04:45:21 +0000
ROA not after: Tue 26 Dec 2023 04:45:21 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21230 (0x52ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:45:21 2023 GMT
Not After : Dec 26 04:45:21 2023 GMT
Subject: CN=65602a64-776d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:fb:d2:d0:d3:bc:7c:d4:21:b5:07:67:05:
76:f3:4c:c0:10:38:1a:6d:2b:ae:ad:1f:b7:8b:97:
46:40:d0:9a:f9:1e:1d:03:3b:f2:3b:af:7c:56:ac:
ca:b8:ba:87:f9:34:f4:53:7f:17:66:e5:9a:62:85:
e4:ca:08:cf:fb:ac:6f:4b:43:3f:5e:6a:a5:46:15:
48:6d:46:5d:97:cb:ab:de:2d:e7:db:d9:f7:48:30:
e5:59:81:38:a0:6f:ab:8d:45:ca:c3:5c:2a:e7:bf:
8d:e1:66:78:d2:00:5f:0b:3b:85:2b:0f:01:95:39:
8a:10:50:2b:4e:bd:67:78:28:00:89:92:47:e0:17:
ac:72:97:4c:04:d9:66:d8:06:e2:c5:13:60:d9:a2:
84:68:c8:2f:d9:be:65:c0:4d:ec:df:2d:8b:f9:be:
52:30:ad:e4:d5:de:47:8f:90:33:c7:22:fa:46:8d:
b4:77:f5:2a:e7:40:46:32:3d:4f:51:f1:78:5e:1d:
3e:64:8e:3e:4b:e6:96:a7:37:44:31:f1:2c:83:09:
c0:3d:f2:15:a4:bd:b8:9d:5b:a4:d4:83:fb:b0:f6:
f7:ef:d1:fe:f9:68:fd:53:21:64:e7:8d:39:5b:41:
b1:44:df:53:85:74:1b:9f:3e:a6:42:95:cf:58:88:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7E:73:CF:E6:BF:79:C8:34:49:EC:81:AD:23:56:50:7D:96:4D:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47E5F27C8A8411EE83C480634AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:93:49:2b:92:e9:56:6b:9f:11:38:bc:a3:14:c4:2e:31:76:
c3:b8:a6:27:84:b0:0e:90:0a:3a:96:45:ef:e8:82:3f:39:68:
74:8d:02:ca:d2:61:4a:c6:72:2b:bb:38:5d:c9:b7:37:9e:61:
7d:ee:fa:51:a5:46:a0:f3:55:1b:63:f5:ef:db:25:cf:73:ff:
68:13:2d:ef:52:d2:a7:7e:8c:c3:97:4e:6f:6a:5e:76:42:02:
27:cb:e9:6d:72:20:5e:b6:19:2f:f0:ff:02:33:f7:13:7f:b1:
23:77:60:b0:97:df:86:21:ba:00:a6:18:04:d8:01:95:d2:9f:
f0:ab:00:36:06:40:82:c2:cc:9f:fe:7d:71:70:c1:02:a0:00:
98:57:67:aa:ac:a8:28:4c:d5:0d:db:10:b8:1e:96:01:5a:6a:
8c:03:c2:be:1b:7e:c7:79:2d:d6:9d:73:33:f7:84:1d:3f:16:
5a:23:d2:a9:9c:07:d4:b3:83:14:2e:0a:b3:f8:43:ae:40:4e:
be:42:4e:94:89:8b:6d:34:b1:4a:f6:73:f0:f0:c8:5f:da:2b:
01:f2:7d:c3:31:77:9b:35:ca:e8:42:49:9c:d5:18:23:3e:9f:
d3:42:54:be:54:9b:e6:4e:2a:93:d8:fe:56:d7:40:8a:7a:c9:
4c:2e:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:43:17 2025 by rpki-client