Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55933FC08A7E11EEB6EAEF4E4AD9E6FC.roa
File: 55933FC08A7E11EEB6EAEF4E4AD9E6FC.roa (raw, json)
Hash identifier: XMWm4tQm12v/oVNO7X9vPLfxRioyTMzxJ6EZDq0yIvY=
Subject key identifier: D3:FA:DB:6B:5E:C2:0C:75:FB:E3:C3:58:1D:B6:74:EE:3D:60:A7:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5296
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55933FC08A7E11EEB6EAEF4E4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:02:50 +0000
ROA not before: Fri 24 Nov 2023 04:02:47 +0000
ROA not after: Tue 26 Dec 2023 04:02:47 +0000
asID: 62240
IP address blocks: 154.195.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21142 (0x5296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:02:47 2023 GMT
Not After : Dec 26 04:02:47 2023 GMT
Subject: CN=6560206a-94a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:55:70:55:d2:54:ca:66:0f:57:d3:c3:6f:
49:31:5e:ad:b5:df:61:e8:7b:16:da:96:92:78:6b:
95:e8:8b:22:8c:e2:ef:b2:9a:ce:1e:6b:71:30:68:
e0:1d:ad:85:0c:93:2c:90:8c:3a:fc:63:eb:d9:dd:
2c:4d:45:29:65:69:38:cf:43:36:72:6a:74:e7:f6:
d7:39:de:97:03:3e:81:53:a1:84:0f:c8:b3:1e:84:
20:72:73:3f:c7:75:37:8e:69:8a:dc:ec:be:97:bb:
65:89:a8:2a:39:76:cd:6b:ee:f2:11:47:ee:f6:24:
ad:2d:ce:51:46:93:23:6b:9d:4c:23:39:21:6a:62:
99:ab:75:05:6a:25:53:64:ec:ae:41:93:a2:11:45:
a9:8e:b2:f9:94:03:e7:a9:ac:3f:61:6e:e5:47:96:
51:35:82:4e:c0:b6:68:88:f5:6a:9b:9b:54:c0:19:
0a:c4:75:f3:72:1e:83:91:86:56:75:5e:72:4b:77:
00:54:1b:55:84:e1:3e:6b:f2:f9:56:61:c6:aa:1c:
6a:30:ce:48:f6:5f:07:ec:ae:90:04:66:a9:51:91:
0a:63:52:2a:fd:ad:67:58:9d:69:78:70:5e:b5:6f:
c0:cf:09:df:ca:45:56:f9:bf:ae:fe:64:03:e0:36:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FA:DB:6B:5E:C2:0C:75:FB:E3:C3:58:1D:B6:74:EE:3D:60:A7:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55933FC08A7E11EEB6EAEF4E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.106.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:f8:7a:3b:2f:db:f5:73:7e:b4:bf:5d:52:41:ba:91:d2:82:
82:39:00:b4:08:43:50:cd:7c:b6:c2:0e:19:7f:39:b3:76:69:
95:9a:e9:9b:95:91:0e:c2:9e:d2:2d:7b:3d:64:40:30:ab:27:
f3:bd:f5:73:f4:e9:d2:52:2c:3d:ec:6c:88:4f:5a:a9:d0:e6:
b0:e5:ce:9e:4e:b8:c9:f9:93:cc:af:e7:04:c0:c3:22:2d:95:
ca:98:3d:ab:67:91:75:d9:8b:6e:f1:e1:b1:e1:9f:09:11:d4:
1f:ac:0f:2c:0f:99:96:1d:ff:9e:b6:a1:30:b6:a9:cb:d1:39:
ae:f7:38:e1:5f:58:57:e8:89:16:ca:db:fd:62:93:2f:50:5d:
8e:0c:c5:fd:fb:f3:2a:e2:9f:1b:df:e5:a3:12:f4:27:29:11:
72:5d:78:14:ee:b8:9f:f5:45:3e:4f:bd:ba:af:78:46:52:d3:
80:f4:bb:5b:6d:c2:10:12:84:2f:a1:b3:eb:b9:6d:9f:27:de:
23:4f:f2:d2:43:ac:1a:24:8f:7f:81:5c:5c:50:62:31:98:10:
29:c6:a1:e1:66:93:3d:ec:91:cb:bd:a8:ae:06:c0:19:d9:82:
5a:99:94:85:11:af:0f:e2:5c:df:3f:f6:d6:a1:30:b9:aa:e6:
40:4c:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:38:58 2025 by rpki-client