Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/480072FC8A8C11EE8667977D4AD9E6FC.roa
File: 480072FC8A8C11EE8667977D4AD9E6FC.roa (raw, json)
Hash identifier: zxsaB7dbsZAPiHhRVpytZv9xBu3zdz5T3L96CqTZW6g=
Subject key identifier: E2:6B:91:E9:82:6E:62:AC:99:5F:25:F2:B5:EB:89:8E:B2:E3:FC:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 534E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/480072FC8A8C11EE8667977D4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:42:40 +0000
ROA not before: Fri 24 Nov 2023 05:42:37 +0000
ROA not after: Tue 26 Dec 2023 05:42:37 +0000
asID: 62240
IP address blocks: 154.195.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21326 (0x534e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:42:37 2023 GMT
Not After : Dec 26 05:42:37 2023 GMT
Subject: CN=656037d0-f02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:eb:37:44:a0:98:1a:f5:51:2f:02:63:b4:
a1:5c:ae:b4:6e:da:2d:f4:b5:b1:68:b7:ac:ed:df:
04:82:cc:71:20:02:61:3f:5c:cb:5f:e8:c6:47:8e:
e2:13:c5:07:08:2d:65:5d:19:36:16:48:0f:24:57:
18:38:d6:99:b5:86:23:72:7b:6a:09:02:72:a3:f0:
70:07:e5:40:c3:87:bf:4d:0a:25:c0:0b:14:63:21:
18:3d:6b:8e:87:db:7d:60:c4:19:19:2c:b6:27:d6:
31:d2:2f:ab:9d:8c:15:85:b6:57:06:0c:11:41:10:
26:1a:72:f7:39:f8:fc:9f:83:b2:8a:29:80:ae:a1:
c1:da:4d:86:e7:3a:7f:0e:ef:e0:4e:9b:d7:fa:f6:
c6:fb:b3:77:21:76:bf:5f:07:95:91:80:a6:bd:57:
a9:2f:9f:1c:ec:cc:d8:c4:f5:09:42:bc:b2:98:0f:
d0:e1:29:50:46:5e:cf:43:00:81:83:15:b1:b5:22:
7a:fd:b0:8b:94:74:a2:1e:ae:39:a5:c3:a9:3b:6c:
54:3b:f2:4d:21:44:54:4e:c7:ae:e6:75:31:13:9e:
c4:e0:52:c8:94:a2:6d:bd:5a:49:d9:1d:35:67:ba:
5e:b9:32:a5:b2:05:cd:5a:9c:1e:58:b3:8a:13:3a:
9f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:91:E9:82:6E:62:AC:99:5F:25:F2:B5:EB:89:8E:B2:E3:FC:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/480072FC8A8C11EE8667977D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.96.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:01:97:82:07:51:4d:73:f2:9b:e3:f5:69:db:98:d7:f5:69:
68:ec:9e:e5:c3:75:83:d9:31:80:0f:11:89:40:ef:3a:54:bb:
06:80:ac:e0:c7:59:11:9e:2f:0e:42:26:24:92:aa:ee:52:03:
5f:6a:3e:c7:6a:a7:08:a6:ad:64:7d:63:ab:01:2b:6c:1f:30:
f8:b8:ef:3f:e0:d0:09:39:df:1d:53:c4:68:af:3d:e1:70:76:
4c:b5:33:b7:52:b0:b3:5c:61:be:e4:1d:00:33:35:99:d1:fc:
5c:ad:ed:b0:76:51:46:48:72:f9:ac:7b:b9:47:71:da:bc:35:
34:1d:c1:ca:7d:ba:06:69:4b:0f:19:78:e9:03:5c:41:ee:0d:
91:74:a3:60:b8:72:73:63:d0:bc:38:30:41:b9:b8:6f:cf:cf:
bf:c5:ef:a2:a1:62:b7:8f:2f:26:9b:15:bb:f5:84:70:cc:c1:
31:1f:9b:94:57:c5:93:8e:ac:c0:16:e6:19:b9:c2:54:ba:09:
fd:4d:26:f9:b5:0f:83:7d:cd:f4:8d:dd:b9:6d:45:97:e9:ee:
bc:a7:b6:2c:58:c3:cc:4a:e2:32:65:45:e2:b7:01:d3:a1:a7:
b6:5f:01:80:6c:92:82:65:2d:cb:c4:7e:29:77:aa:51:f2:d8:
da:6e:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:43:15 2025 by rpki-client