Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BFCDE068A9911EEA6C0D7294AD9E6FC.roa
File: 4BFCDE068A9911EEA6C0D7294AD9E6FC.roa (raw, json)
Hash identifier: coHGHXGAatPBhHN73aPg6gCXLJ2b1lPTXCNn0R+93XI=
Subject key identifier: B0:FC:87:BD:D7:94:CE:D4:55:D6:38:FD:66:BB:AB:CC:19:A4:4F:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5448
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BFCDE068A9911EEA6C0D7294AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:15:51 +0000
ROA not before: Fri 24 Nov 2023 07:15:47 +0000
ROA not after: Tue 26 Dec 2023 07:15:47 +0000
asID: 62240
IP address blocks: 154.195.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21576 (0x5448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:15:47 2023 GMT
Not After : Dec 26 07:15:47 2023 GMT
Subject: CN=65604da6-a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:f3:9d:c4:3c:af:49:94:5e:8e:ea:76:a4:
99:d8:22:3f:69:58:ab:4e:81:f5:6b:7b:8b:71:bc:
bc:56:b3:a7:41:47:a2:bc:70:55:0a:44:24:54:45:
8d:b9:bb:06:f0:69:e7:08:28:f7:ea:d3:9d:e7:03:
7d:98:e6:fb:0b:9e:7d:fb:7b:3f:a9:b9:10:60:72:
5c:4a:63:91:79:78:8e:b7:ed:2f:35:fb:fd:ef:76:
2b:25:d5:7e:fd:0f:41:14:8b:b1:ea:2c:b2:74:24:
fe:99:9f:33:3d:3a:89:e2:cf:d7:1d:cf:3e:1c:05:
05:fb:8b:1b:6d:83:af:c1:3f:67:e0:93:9b:05:1f:
58:bb:b9:47:b8:f5:97:3e:88:8e:a3:92:94:8e:ee:
a9:c8:a3:16:d0:c3:97:7a:3b:0e:e4:26:70:3e:73:
3f:30:d4:f6:10:32:36:4e:ba:3a:4d:bd:1d:ec:55:
cb:76:d0:3a:59:d9:5b:5c:bb:5f:0d:d0:7f:8d:83:
90:78:54:7f:a8:5d:67:18:d7:8d:8e:a1:cd:55:89:
66:f8:c0:c0:a4:f5:e3:ac:42:4c:64:82:bd:7a:05:
92:14:5b:7c:31:82:9f:b5:fe:63:33:9f:15:4a:24:
e2:a8:48:8c:de:5e:dd:3a:ce:9b:08:a1:74:ed:0f:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FC:87:BD:D7:94:CE:D4:55:D6:38:FD:66:BB:AB:CC:19:A4:4F:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BFCDE068A9911EEA6C0D7294AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.135.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a6:01:d3:0c:03:85:9a:58:0c:e5:09:58:db:a3:05:a3:36:
8e:b9:26:a0:3f:3e:1d:10:51:af:12:24:79:34:d3:cf:55:ec:
af:1b:2a:d2:e1:86:99:71:eb:86:1e:70:8f:be:f1:23:91:8d:
30:d8:ef:b4:56:01:5c:41:80:06:30:7c:f3:80:71:3c:44:3f:
a6:71:56:4e:bb:f0:b6:fe:e7:a1:72:06:9b:71:7f:cf:ba:b3:
95:7b:97:b9:92:21:a6:d3:d1:f5:b5:b0:9c:f7:17:e5:28:8a:
76:a1:05:54:9b:ea:2b:d4:70:8a:5b:b5:93:fe:bb:b7:e2:fb:
cf:ee:8c:5e:61:74:bd:63:6d:e5:2a:b8:4a:85:5c:34:3a:15:
f9:ea:44:fd:b6:22:cd:d7:83:d7:57:71:d1:a9:0f:7f:e8:2f:
00:fe:df:b4:6d:fc:ec:de:1d:fa:ca:e0:56:3b:c3:58:78:78:
06:21:ae:9d:be:ec:72:a8:34:fe:35:de:3d:2e:ee:89:00:1a:
af:7c:aa:67:ef:65:6c:22:0c:54:05:b8:47:c3:3a:6e:4d:2b:
89:eb:6d:25:7c:7e:b0:18:3c:cf:b4:11:38:3d:a5:5b:3c:ce:
08:c8:15:5f:70:0f:ad:d4:6c:c9:77:f0:8f:60:cd:6b:9c:1a:
b7:86:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:35:26 2025 by rpki-client