Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519A58268A8E11EE81953C844AD9E6FC.roa
File: 519A58268A8E11EE81953C844AD9E6FC.roa (raw, json)
Hash identifier: K9x6yf6KkhP7Eg/OetyDVzljRhPRMvF1+bfU4kyd30Q=
Subject key identifier: 34:4F:45:FF:06:34:07:33:43:EF:01:EB:3C:F8:D7:03:F0:76:0E:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5372
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519A58268A8E11EE81953C844AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:57:15 +0000
ROA not before: Fri 24 Nov 2023 05:57:12 +0000
ROA not after: Tue 26 Dec 2023 05:57:12 +0000
asID: 62240
IP address blocks: 154.195.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21362 (0x5372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:57:12 2023 GMT
Not After : Dec 26 05:57:12 2023 GMT
Subject: CN=65603b3b-8aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:e6:cf:31:6d:be:82:2d:b4:c0:1f:13:6d:
d6:62:e7:ec:08:4d:3b:86:b9:9b:d1:ce:f4:68:be:
31:f2:0f:a2:95:14:db:77:16:2c:26:a0:a2:fd:12:
65:6c:a2:20:0d:41:45:83:ef:9a:14:e8:14:c6:41:
66:1a:bb:df:3a:45:3d:3b:b6:a1:bd:99:6a:eb:49:
e6:5c:b9:82:d8:e0:c4:96:7b:f6:1a:0b:9c:1e:e4:
6a:7e:f0:ae:57:c9:00:8b:89:8d:42:ae:de:51:0f:
fe:b9:e3:91:03:50:04:e5:d5:7f:74:af:b1:45:22:
e9:a6:51:e2:11:18:68:24:51:38:f2:0d:bc:f9:1c:
07:de:09:31:9f:a5:ec:af:63:89:db:e4:e9:91:85:
c8:ed:5e:dc:b4:dc:9e:af:90:0c:66:a6:1a:86:f8:
8c:cb:58:96:87:91:b7:cd:f6:3f:1d:81:e2:ca:a3:
85:69:be:f0:a5:eb:29:c0:29:d1:3e:77:f8:2a:c3:
c8:50:84:bb:0f:9f:6c:6d:27:d5:b4:2f:09:5a:8f:
06:27:e9:ca:3e:79:de:f1:a4:6b:1a:ae:59:94:68:
b4:d6:af:40:68:87:38:e5:c8:21:6c:67:af:b5:ad:
ef:32:0c:b2:b2:7b:ed:fb:d3:ec:8f:af:34:c3:8e:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:45:FF:06:34:07:33:43:EF:01:EB:3C:F8:D7:03:F0:76:0E:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519A58268A8E11EE81953C844AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:95:de:67:dc:a0:30:b2:e6:20:02:77:cc:ff:d3:5b:9d:c9:
fc:09:d2:9f:9d:44:12:1d:4e:9f:74:79:1a:15:2b:8d:3a:7e:
39:a9:f8:a0:b0:78:de:53:96:5f:ed:2c:32:8d:83:ad:53:19:
92:bb:26:82:df:32:0e:0a:80:fa:65:5d:c6:0a:13:70:01:1d:
29:f6:0e:c4:ba:a1:f6:8e:53:f5:17:aa:f7:56:4d:72:4e:b9:
d6:f2:0c:d7:7d:7c:bb:c6:4a:32:38:27:09:d8:5c:67:dd:48:
94:3f:34:e2:db:96:fd:38:68:9a:98:16:b7:bf:fd:9d:db:55:
02:07:80:e6:55:3a:35:24:33:54:eb:a4:77:8f:78:68:cd:8c:
5a:4e:3b:8b:6e:14:38:7d:1e:ae:6c:f9:22:be:c6:27:6d:b9:
87:b8:92:d9:c9:16:d1:66:ec:99:04:5b:1d:58:47:e1:67:22:
9f:ad:c0:fa:f9:2a:4b:24:f2:7c:0c:6b:f7:af:66:6a:ce:9e:
f0:60:99:5e:e6:26:c8:bc:33:46:40:61:4c:34:1f:e7:e0:4b:
60:57:0e:a9:6e:7c:b2:74:0a:c8:3c:a4:02:1c:97:6e:6e:75:
a2:98:51:c1:ae:82:81:0d:aa:c6:b6:ab:48:17:24:2d:db:03:
c7:04:27:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:45:18 2025 by rpki-client