Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D6A300C2CFA11ED93A655B4F1222468.roa
File: 4D6A300C2CFA11ED93A655B4F1222468.roa (raw, json)
Hash identifier: WTUJek6aJYnfg+4IakM1pxBnmFbSGS06EribrUSbnUI=
Subject key identifier: 86:69:39:E3:55:EA:35:27:85:6D:2A:C5:0B:74:D0:14:BD:34:7F:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 188B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D6A300C2CFA11ED93A655B4F1222468.roa
Signing time: Mon 05 Sep 2022 09:08:27 +0000
ROA not before: Mon 05 Sep 2022 09:08:23 +0000
ROA not after: Wed 05 Jul 2023 09:08:23 +0000
asID: 22773
IP address blocks: 154.219.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6283 (0x188b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 09:08:23 2022 GMT
Not After : Jul 5 09:08:23 2023 GMT
Subject: CN=6315bc8b-6889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:da:59:be:51:2a:5c:ad:a4:71:cd:c3:55:
d8:e3:12:53:33:69:70:08:ee:f2:8b:4d:ef:c9:80:
68:de:91:fc:b7:3b:ef:e6:2f:59:e9:3d:69:5a:54:
7d:58:3f:ce:04:64:04:2b:46:5e:be:82:4b:eb:a8:
a5:93:4d:5e:ba:34:7e:1d:66:ba:de:0a:d9:dd:51:
dc:1b:e2:e4:cb:97:35:64:10:e9:22:d9:65:8e:d7:
8d:09:16:f8:13:07:e1:fd:e4:9f:9d:3d:a3:73:85:
ba:7c:e7:cc:4d:f9:4e:0a:54:a6:d0:04:4e:d0:47:
53:76:00:06:06:61:19:b0:20:ba:49:ff:8b:d7:1b:
86:3c:bc:dc:43:82:86:00:4a:73:5a:cc:ff:c5:98:
20:b6:f7:b9:a3:de:1a:09:0e:96:22:64:9d:eb:9b:
a5:c6:cd:38:93:28:39:88:ad:dc:33:34:a2:66:50:
b8:fa:63:f2:d5:b9:1f:93:c3:6c:1a:d3:67:a3:9e:
b2:57:f7:22:4d:12:37:d0:29:67:ae:6b:a7:5b:fb:
8c:84:60:8c:37:18:cf:1a:4d:18:a5:84:b3:7b:c3:
63:5d:80:8b:7b:9c:2c:db:5e:b0:94:3f:5f:92:a6:
d8:6d:36:a1:d4:0b:c2:03:a6:63:81:7b:28:91:40:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:69:39:E3:55:EA:35:27:85:6D:2A:C5:0B:74:D0:14:BD:34:7F:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D6A300C2CFA11ED93A655B4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.6.0/23
Signature Algorithm: sha256WithRSAEncryption
35:39:06:f3:17:46:7c:71:19:cf:90:a3:1c:4e:99:c8:c3:18:
61:20:a5:0c:90:6c:47:95:aa:28:d9:b5:87:17:1c:9f:c5:88:
b4:aa:3e:d7:8c:3b:a4:3c:90:39:2d:e7:0e:68:22:10:ae:7b:
c1:0e:21:5a:f3:e0:4e:f0:f8:f6:ac:c0:38:aa:4a:e7:9f:55:
1b:fc:c6:30:22:1a:8d:3e:03:6a:b7:cf:22:f4:57:ed:2c:d8:
d2:47:a6:80:c6:38:48:89:ce:d0:ea:d0:49:e7:f0:4d:89:6c:
c7:5b:4b:03:30:25:8d:f4:76:01:a4:18:cf:5d:ce:87:a8:77:
48:dc:2d:b0:ba:a9:f9:66:ca:44:fe:1c:81:41:d0:a6:96:f2:
07:6b:e0:12:26:7e:65:39:9a:28:16:3e:c9:b1:7d:7a:24:dd:
d7:8a:35:7c:36:81:d1:e0:34:48:61:f7:23:4b:e2:e2:27:68:
87:a9:e0:03:d9:84:8e:4c:f3:2a:a3:59:bc:59:f8:94:8c:1c:
5c:af:ed:29:ba:7d:29:e8:fa:f7:b8:32:24:64:a2:3e:0a:18:
83:78:6d:b3:62:72:f1:bf:ba:c3:af:ff:73:bd:6b:51:f1:7e:
93:77:db:4e:9c:9a:c5:1d:6c:26:57:76:94:9c:ad:ba:9a:ff:
e8:99:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:42:50 2025 by rpki-client