Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48ED71EA84F811EE91C87D584AD9E6FC.roa
File: 48ED71EA84F811EE91C87D584AD9E6FC.roa (raw, json)
Hash identifier: DZ4IVHklQ3SXZ4FlbX/2p8oRA9F7GGsAmIriw8uBSWI=
Subject key identifier: 7C:56:23:A6:96:42:64:90:1D:9D:FC:F7:1D:F5:45:EF:DD:51:53:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5079
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48ED71EA84F811EE91C87D584AD9E6FC.roa
Signing time: Fri 17 Nov 2023 03:20:41 +0000
ROA not before: Fri 17 Nov 2023 03:20:37 +0000
ROA not after: Tue 12 Nov 2024 03:20:37 +0000
asID: 64267
IP address blocks: 154.84.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20601 (0x5079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 03:20:37 2023 GMT
Not After : Nov 12 03:20:37 2024 GMT
Subject: CN=6556dc08-0efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:c0:a5:35:b3:24:ec:18:92:a3:17:3d:41:
28:e6:bb:9c:15:8b:32:d1:94:2f:c0:46:eb:e9:2f:
75:61:d0:d6:eb:7f:77:82:82:21:02:c5:b0:36:d2:
ed:f9:d4:33:eb:b7:23:26:bc:86:40:89:55:b1:70:
47:7b:5c:1f:8d:e1:2a:34:51:c0:af:df:8d:f1:db:
ae:75:27:37:e4:37:cc:22:43:80:bd:65:63:11:87:
bf:2f:cb:af:f3:89:67:41:16:dd:aa:94:8a:96:f0:
4a:3d:1d:41:a4:a2:6f:d2:ad:8e:11:25:a1:c9:29:
e1:96:fd:47:90:d3:c3:e2:79:5f:6f:1a:ec:27:b8:
f3:41:73:fe:6f:a5:ae:15:c1:42:74:18:70:8b:00:
16:e6:98:d7:ad:29:5a:33:a1:59:f7:ed:58:69:8d:
0e:7f:e3:86:c5:c0:6d:70:98:0a:43:5e:7d:5b:02:
c3:a4:0a:f5:57:1d:bf:18:e0:48:dc:01:b9:51:c2:
e5:a0:2c:51:f6:ac:9a:e6:d3:6a:b5:88:a1:f6:97:
06:49:02:c2:38:c9:53:90:21:7f:14:b1:3a:3e:5c:
9c:57:cf:cf:ab:44:1f:70:d4:7c:1e:dd:67:4e:65:
ac:82:e9:d8:ce:5a:11:42:82:2b:36:8a:46:d7:42:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:56:23:A6:96:42:64:90:1D:9D:FC:F7:1D:F5:45:EF:DD:51:53:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48ED71EA84F811EE91C87D584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.130.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:9c:3c:a9:1e:7d:b9:d4:ac:26:08:93:8e:71:2a:37:1b:77:
01:cf:ba:8a:9e:2d:a3:f8:c0:d4:5e:f0:08:eb:cf:9c:77:83:
71:2d:3c:00:83:19:70:c7:25:58:f2:89:d9:9a:4f:68:72:00:
84:91:5a:bd:2c:14:59:db:9a:32:b7:af:83:2b:64:da:72:08:
36:28:41:c6:8d:2c:29:38:1f:bd:75:8b:86:5d:76:65:fc:70:
e7:db:81:3a:e7:a8:01:bf:56:2b:34:32:7e:34:a0:16:51:24:
02:e4:ee:5a:5e:18:d8:42:0f:18:ed:76:1b:03:2d:e0:bc:cb:
95:f4:4a:00:44:ff:3e:33:4b:e2:84:53:e1:9c:ce:02:5b:66:
7d:f8:66:1c:47:05:7c:1c:74:45:04:c0:e7:1c:38:b2:13:f8:
0a:44:c1:a1:c0:44:00:1b:e3:88:83:f6:46:63:95:aa:91:b4:
6c:bb:2c:2e:9b:e6:21:53:f3:d2:9e:e5:02:26:d3:44:0d:b4:
75:c6:79:f9:40:38:aa:39:c1:94:04:13:62:39:21:d7:5c:f4:
9d:84:7e:ed:f5:99:bb:68:fb:1a:aa:31:fd:d4:70:1e:74:b8:
d9:f2:2c:95:7a:07:cd:49:33:6f:13:8e:77:25:26:8b:26:6b:
07:2b:2b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:47:10 2025 by rpki-client