Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F425F428CDB11EE941B635D4AD9E6FC.roa
File: 5F425F428CDB11EE941B635D4AD9E6FC.roa (raw, json)
Hash identifier: N/8baDT+G97xuGMuPxjHufAiipLMIWN1atEVxN2EYAY=
Subject key identifier: 05:61:4F:2E:8F:6D:74:35:2B:B7:92:0A:A1:62:10:6E:40:19:19:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F425F428CDB11EE941B635D4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:13:52 +0000
ROA not before: Mon 27 Nov 2023 04:13:49 +0000
ROA not after: Tue 26 Dec 2023 04:13:49 +0000
asID: 62240
IP address blocks: 154.195.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21698 (0x54c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:13:49 2023 GMT
Not After : Dec 26 04:13:49 2023 GMT
Subject: CN=65641780-c5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:f1:40:c7:cd:51:7b:7e:c6:9a:65:58:46:
8a:28:4b:b3:16:0d:b0:e1:85:e7:a4:98:30:93:8b:
5e:e4:02:be:1a:ae:a6:27:6f:5c:00:9c:da:aa:bb:
58:f9:b6:46:eb:bb:d5:58:a9:f1:22:3a:b9:69:64:
d4:31:89:ed:48:b0:5a:7e:e3:02:23:29:75:97:a7:
48:27:be:4f:ec:89:00:dd:4c:49:d1:96:3c:5c:2f:
16:83:13:39:d5:53:49:41:42:87:84:7d:2f:f7:38:
2f:24:b1:f5:4b:84:0f:67:62:8e:13:40:f2:6c:f2:
a5:09:81:13:05:48:b1:c6:a8:9a:79:86:ff:47:b2:
d1:ba:ae:29:e8:16:c1:50:bb:f7:c8:80:20:cb:2f:
4d:ba:09:7e:e9:0e:a8:6e:48:a0:ee:c1:6f:1d:5c:
df:94:c2:5d:d9:3e:83:4c:7d:d8:ab:64:2d:70:04:
a8:96:a3:f1:e0:aa:40:16:ae:58:a0:77:c8:24:1c:
5e:28:0d:42:3f:23:34:ff:38:c1:8e:3c:53:19:6a:
8d:84:0c:89:9f:5d:ad:83:67:6a:b1:47:3d:77:a5:
66:e7:5b:f2:41:b1:6f:53:6b:39:9e:52:ec:29:cc:
1e:6e:a8:77:4c:9c:c9:40:f0:d7:60:f9:13:a2:1d:
0e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:61:4F:2E:8F:6D:74:35:2B:B7:92:0A:A1:62:10:6E:40:19:19:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F425F428CDB11EE941B635D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.155.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3d:02:35:fb:1f:7a:71:4d:95:47:b7:b7:c6:c1:4a:b9:20:
9b:e0:ed:1b:86:54:66:15:2d:f8:dc:54:95:f1:5e:ae:fc:8f:
b3:12:1f:7b:7b:1f:e2:54:24:45:a1:2c:24:09:ce:03:72:3a:
53:1c:43:0e:e2:a1:25:ca:4e:4d:e7:18:7b:15:62:13:ba:aa:
eb:a4:0b:c7:c9:9e:77:f2:9a:5b:44:10:38:92:09:42:7d:3f:
fc:82:44:ff:8d:49:64:f5:3d:a2:1a:a7:85:89:4e:28:ac:df:
1e:ae:b0:2a:0e:e6:67:04:00:57:3c:d2:4c:d2:44:9f:8c:fe:
31:ee:51:11:88:fc:69:99:f5:41:db:b4:ab:3e:75:31:0a:76:
25:65:35:64:17:19:2f:b0:b1:25:be:d1:f0:f7:08:c0:f7:b2:
de:88:4d:fa:88:2d:cf:27:e5:54:8c:62:7c:81:69:b8:dc:92:
94:97:47:0e:0c:17:2a:ba:d5:ca:3a:e5:5c:be:d0:78:a7:cb:
d0:e8:06:66:db:e8:6b:ef:a5:ba:6b:39:f5:d0:8e:08:fc:7d:
7c:71:f2:07:00:4e:e6:25:02:07:14:66:6a:21:6a:9b:25:4c:
1e:34:97:ef:e9:51:2c:df:5a:85:6f:5a:1d:3d:f2:40:18:ae:
d4:1f:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:05:57 2025 by rpki-client