Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50B810928A7F11EEA1C143524AD9E6FC.roa
File: 50B810928A7F11EEA1C143524AD9E6FC.roa (raw, json)
Hash identifier: 0bfMYCJhI/xNM2l7z5MWDNguVcDpsfVNfig7KkJ/a4Y=
Subject key identifier: 90:80:AE:FA:99:E2:E0:43:AF:AB:A2:AB:B1:EA:11:AA:B5:1A:4E:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50B810928A7F11EEA1C143524AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:09:51 +0000
ROA not before: Fri 24 Nov 2023 04:09:48 +0000
ROA not after: Tue 26 Dec 2023 04:09:48 +0000
asID: 62240
IP address blocks: 154.195.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21162 (0x52aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:09:48 2023 GMT
Not After : Dec 26 04:09:48 2023 GMT
Subject: CN=6560220f-ebdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:95:a9:d8:00:4e:12:b4:3a:23:e6:a3:9c:
2e:32:7d:e0:63:f3:65:b4:22:31:8f:e9:0e:70:b5:
cf:b6:12:7d:61:7c:a9:bb:fa:1c:56:ef:2a:e8:44:
8b:ed:3a:2f:dd:12:ed:96:66:ad:c3:b6:a5:47:e4:
e4:95:e3:d7:42:0e:2d:df:13:76:d0:02:1d:ff:40:
52:2e:76:39:50:2c:9c:88:d5:b1:6e:41:ae:1d:c1:
c5:6b:4b:c8:49:6f:f6:00:c4:4b:3a:4e:79:47:79:
cd:a0:52:91:e2:34:33:9e:8e:f4:49:44:52:1d:c9:
b4:92:91:44:1b:7a:c0:e0:b1:e1:4f:a2:f9:18:5b:
97:98:40:26:b4:96:af:27:67:66:64:82:46:56:5f:
d1:73:97:6e:28:f3:29:f9:3c:9a:45:b1:84:62:1f:
cb:8a:21:ac:09:1b:83:61:ed:83:e7:69:49:c9:1e:
21:b9:f9:7d:d0:9f:cb:5b:b1:65:11:5c:90:ca:25:
2e:c7:a7:fd:34:e8:9d:f1:31:d9:c3:b2:f3:bc:5d:
60:4d:05:9a:79:b9:d6:34:3a:d2:43:f8:2c:46:1d:
77:6f:85:cf:13:65:d2:6b:ed:90:f9:f8:a6:ea:c9:
95:80:f5:43:29:a4:9d:0a:fc:ad:b9:c9:9d:aa:c8:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:AE:FA:99:E2:E0:43:AF:AB:A2:AB:B1:EA:11:AA:B5:1A:4E:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50B810928A7F11EEA1C143524AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:81:f4:fd:30:f8:2b:6e:2d:2e:2f:3f:8d:66:ab:7d:b6:7d:
35:05:9f:18:6e:20:e4:35:06:64:93:90:45:d5:35:4d:c9:af:
1e:ed:a3:30:9b:ad:27:f4:ce:f6:f4:17:fe:81:91:57:5e:45:
8e:ed:02:69:78:5f:a5:aa:00:32:c3:1b:e7:2c:c9:f2:93:60:
07:87:55:ba:8e:66:c1:f0:1a:19:7c:66:f4:27:74:e6:ec:84:
76:cc:00:64:5b:0b:ed:77:26:a6:47:cf:4d:88:55:17:16:1d:
bb:bf:15:13:9f:5b:89:e5:11:de:e4:92:f3:b6:8f:d0:13:fc:
e8:54:62:39:4b:08:3a:e4:0c:2e:6a:6b:74:63:c0:7b:03:4f:
a9:30:fb:3c:46:fe:bd:06:9f:57:a0:a6:f6:24:4b:2a:af:95:
56:bd:db:01:c2:68:8c:24:ac:d8:b4:aa:16:dd:dc:fc:6c:f0:
86:cf:8e:d2:53:4c:3e:1d:4a:5a:25:ee:14:f3:0f:4a:8a:68:
51:35:86:f3:76:bc:5c:41:57:1d:22:2c:dc:df:87:91:dd:3e:
cc:1a:6a:9f:5c:e6:d5:87:b6:5d:88:66:b0:71:83:f4:df:ed:
11:ab:8f:84:5b:86:0b:a1:02:20:fd:ff:13:cd:eb:19:76:01:
1a:8e:20:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:54:23 2025 by rpki-client