Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BA11CD68A8611EE88655B6A4AD9E6FC.roa
File: 5BA11CD68A8611EE88655B6A4AD9E6FC.roa (raw, json)
Hash identifier: ILokvDVI1E2kRjOnGCW8OlfxyJyVZjeOj+RjjVf5jho=
Subject key identifier: 29:35:E3:0A:BA:9A:28:A4:19:62:7E:A1:29:5A:FA:02:DC:65:5A:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5306
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BA11CD68A8611EE88655B6A4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:00:16 +0000
ROA not before: Fri 24 Nov 2023 05:00:13 +0000
ROA not after: Tue 26 Dec 2023 05:00:13 +0000
asID: 62240
IP address blocks: 154.194.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21254 (0x5306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:00:13 2023 GMT
Not After : Dec 26 05:00:13 2023 GMT
Subject: CN=65602de0-f2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:8f:b0:5a:b3:34:f6:d6:d1:cb:b7:3e:83:
b4:a2:02:96:96:da:78:22:54:c9:f3:2a:38:25:9c:
8b:49:64:ca:ad:ea:21:77:d1:68:b7:e8:d3:04:22:
6b:0d:23:f3:16:0b:7f:48:fe:1a:3b:01:21:de:74:
65:1f:fa:4c:96:bf:cb:68:95:f5:2f:68:65:58:29:
18:db:2d:cc:1e:96:48:f7:95:83:a1:ea:e0:67:3e:
ee:34:4c:ef:40:b5:6a:a1:4a:62:41:9d:24:b8:dd:
3e:64:03:46:b1:b4:01:d9:a3:a9:01:a9:fc:40:c8:
5c:82:cc:f8:42:c8:fa:65:ac:0a:1c:75:7b:08:32:
8e:27:c0:4e:cd:b6:a5:6a:d8:9c:59:cf:41:5a:b1:
eb:cf:9a:4f:ca:76:8a:48:81:03:62:12:6f:ad:8d:
f9:0b:4a:46:84:29:c8:a1:70:af:9c:4f:8c:f4:8b:
f6:95:6d:3a:e0:61:1a:44:6c:78:f1:2f:52:be:7f:
d0:ea:26:e4:54:8c:36:3c:8b:05:9a:5f:c7:d7:d5:
bc:12:73:c0:59:ba:14:45:7e:9f:a0:af:5d:7b:82:
88:54:77:db:59:93:9f:a0:43:b1:de:c2:bb:57:84:
15:b6:f3:b4:9e:5e:c2:39:06:a9:68:45:b6:e6:b5:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:35:E3:0A:BA:9A:28:A4:19:62:7E:A1:29:5A:FA:02:DC:65:5A:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BA11CD68A8611EE88655B6A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.117.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2c:80:32:fd:95:6c:14:0a:fa:55:d5:2c:f1:8a:0a:95:52:
77:a2:2b:ae:fe:47:f2:8e:64:c2:1f:34:84:56:e7:0a:b5:1c:
f5:c1:62:7c:67:0c:6d:30:cd:87:ac:ce:29:bd:10:46:f0:7e:
37:d9:4f:20:c9:74:af:a2:fc:16:c0:07:d0:e1:18:8d:aa:27:
a7:2a:2c:db:85:c1:9d:3d:1c:da:b5:2b:94:5b:b9:96:b3:44:
51:41:cd:34:cf:cd:7d:12:6b:d9:f5:43:57:c0:fa:c4:af:c2:
e9:c3:c9:0c:2c:40:9a:16:8e:a8:b1:9c:a9:5c:c9:ec:7d:b7:
34:c0:3c:9b:99:40:9f:df:7a:86:c5:31:a7:c7:2b:cb:39:8a:
0f:41:18:db:44:a7:17:59:08:70:d8:62:cc:50:bf:57:55:51:
5d:4e:12:86:c7:05:99:02:73:8e:88:1f:3e:e9:e1:35:b1:22:
e0:43:cb:6a:6a:1a:fc:51:a0:8f:98:cd:e6:e3:e5:ed:81:2a:
f8:aa:eb:6c:44:a5:64:d0:d1:4f:ec:0b:60:b4:fb:54:38:c8:
c4:ad:05:0a:9e:40:6d:5c:ab:ad:92:e9:b9:8c:e8:2c:82:88:
67:ee:75:e5:87:3a:2d:10:e6:e0:a1:09:20:e8:f4:3c:c7:e3:
63:42:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:22:01 2025 by rpki-client