Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C95B5568CDB11EEAA58FD5C4AD9E6FC.roa
File: 4C95B5568CDB11EEAA58FD5C4AD9E6FC.roa (raw, json)
Hash identifier: iSOztAz047JnUTM6gIahv1OEM0YhiUahwPt7ilpvsNw=
Subject key identifier: 4D:94:13:6F:F0:89:C8:53:C6:EB:B6:40:E1:88:37:D5:09:9B:25:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C95B5568CDB11EEAA58FD5C4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:13:21 +0000
ROA not before: Mon 27 Nov 2023 04:13:17 +0000
ROA not after: Tue 26 Dec 2023 04:13:17 +0000
asID: 62240
IP address blocks: 154.195.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21694 (0x54be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:13:17 2023 GMT
Not After : Dec 26 04:13:17 2023 GMT
Subject: CN=65641760-5d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:28:5a:90:7f:c6:03:21:39:60:89:24:93:
dd:72:3c:09:c8:6a:5b:7d:66:17:a7:ec:96:5a:b2:
c6:a9:4f:5d:bf:96:14:75:5b:ac:df:fb:b3:78:b6:
e5:6d:d0:c2:e8:98:73:f1:b0:88:d5:c8:64:41:40:
b0:06:3d:4d:5a:88:5d:dd:fb:a1:fb:99:32:ed:05:
a9:5b:85:07:10:3e:3a:65:f1:af:35:fc:b9:d8:ea:
51:0c:9d:5b:06:45:c8:51:96:e0:ab:2c:c9:d6:35:
87:71:04:28:31:f8:7d:cf:f4:00:ae:93:82:f7:ad:
d4:e9:7d:fe:85:c3:4c:26:6a:0b:0d:dc:c7:51:96:
68:cf:58:f5:d4:9c:b9:11:12:de:db:34:f4:c5:f8:
eb:60:1e:9f:0f:72:3e:ae:54:81:66:91:62:9c:87:
12:d3:c8:33:3d:95:8a:33:c1:b3:52:ba:65:cb:91:
92:1d:a1:ab:8f:2f:da:2b:d0:e6:eb:da:e6:ba:61:
53:2d:a3:4d:84:95:44:e3:de:16:c6:d0:d0:6d:73:
7b:2a:dd:ce:d5:16:d1:2d:61:23:0e:a2:0c:fa:68:
2d:29:41:a7:33:c8:c3:02:9d:49:18:41:64:ee:28:
8f:91:95:f1:d3:76:47:21:c4:aa:95:36:e0:45:97:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:94:13:6F:F0:89:C8:53:C6:EB:B6:40:E1:88:37:D5:09:9B:25:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C95B5568CDB11EEAA58FD5C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.118.0/24
Signature Algorithm: sha256WithRSAEncryption
83:60:32:01:38:08:91:23:6e:36:08:5c:19:e5:3a:87:96:e2:
cf:6e:15:b2:05:10:e0:35:3a:b2:84:c4:dd:00:80:49:82:bf:
d6:f8:9f:a8:ac:6d:6f:a2:ae:6c:a6:70:9f:03:49:82:f4:c4:
8a:52:98:c3:b3:9b:d5:be:ee:17:3e:6e:f9:c5:b3:df:ae:68:
e3:39:ee:f2:b6:66:d0:5d:22:a9:91:76:35:ea:0a:17:29:4b:
23:c1:22:13:29:24:3b:28:b3:8f:a9:4a:b5:4d:27:1c:7b:6a:
6d:bd:0c:37:38:aa:0e:57:d0:3c:cf:d4:d6:04:f0:0f:66:ab:
56:d9:53:d5:4a:40:6f:b8:76:d8:4f:01:60:51:d2:d1:77:ff:
e4:36:25:2b:99:15:b8:f9:1d:9e:37:62:06:fe:be:dd:d7:a0:
1e:0e:f9:06:fc:df:ec:ab:77:42:48:95:97:5e:81:98:c7:35:
de:68:42:49:cb:66:69:34:82:6a:e5:9c:58:6c:0f:79:2c:01:
a2:ff:14:a2:32:7e:c5:df:a3:e1:14:78:c8:ad:a2:ae:92:eb:
d9:df:07:35:8e:a7:f7:06:2e:71:6d:48:2f:88:e3:88:86:8d:
3e:e5:e8:ed:be:67:11:65:90:ff:f5:ff:d9:09:97:e4:a6:d7:
0f:eb:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:57:02 2025 by rpki-client