Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6567ECB08A9D11EE886B18374AD9E6FC.roa
File: 6567ECB08A9D11EE886B18374AD9E6FC.roa (raw, json)
Hash identifier: nhqAKHgp3GajfYxPzIhoCnRsQpyjYkc2dhubjwfO/CY=
Subject key identifier: E8:93:1D:4D:1D:9B:F7:F6:51:5F:8F:4B:3B:38:36:E4:BF:F9:20:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5491
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6567ECB08A9D11EE886B18374AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:45:11 +0000
ROA not before: Fri 24 Nov 2023 07:45:08 +0000
ROA not after: Tue 26 Dec 2023 07:45:08 +0000
asID: 62240
IP address blocks: 154.195.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21649 (0x5491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:45:08 2023 GMT
Not After : Dec 26 07:45:08 2023 GMT
Subject: CN=65605487-fc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:20:30:8c:c3:7d:9a:e4:0a:d1:d7:a8:32:
c9:a4:d6:78:87:4d:3b:bf:35:55:d0:a5:33:0c:fa:
d9:48:f6:d9:08:93:0d:71:b8:d9:f0:c8:8a:7e:d0:
94:66:70:3c:b1:f5:49:e8:ce:64:9b:2c:86:12:cb:
d7:11:70:79:25:dd:8e:3a:dc:f8:2a:ac:c1:46:01:
15:03:7c:9b:d2:d0:31:63:ec:d0:f6:e2:97:cd:bd:
cc:8d:20:e7:6a:a7:27:dd:00:a6:db:6c:ee:ea:92:
b3:df:d9:b1:07:39:a8:65:ea:68:60:3c:57:d4:65:
e9:10:8b:87:06:88:6e:73:52:39:12:c6:b9:40:0d:
87:ac:56:98:e7:69:a4:b6:9f:7c:a8:1c:8a:55:68:
a4:16:69:63:14:32:c9:d5:4f:9c:07:bf:b9:b2:ba:
22:09:60:f7:3b:17:4a:2a:65:02:b9:78:32:1e:4f:
b3:2f:86:94:4a:4b:47:f4:87:a0:a1:91:d3:4f:83:
01:a9:f2:e1:1e:44:b6:48:3f:b3:c7:48:c2:56:b5:
3f:05:89:ff:c9:15:93:6f:03:56:e4:30:6b:4c:02:
59:a2:b1:6e:2a:e0:52:48:62:f0:9f:f7:4f:a8:2c:
3e:af:8e:29:d2:a3:1a:6d:2d:5d:c4:2f:50:44:91:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:93:1D:4D:1D:9B:F7:F6:51:5F:8F:4B:3B:38:36:E4:BF:F9:20:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6567ECB08A9D11EE886B18374AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.131.0/24
Signature Algorithm: sha256WithRSAEncryption
36:28:f3:f1:43:71:cf:ff:b7:1c:11:cc:5f:9a:8c:f5:76:c7:
79:44:e2:40:5c:7e:3e:59:c3:48:97:93:f9:59:62:2c:25:6d:
c9:ab:4e:a3:d8:46:ae:85:76:b2:0d:5f:19:f6:07:51:12:5c:
ea:47:64:54:63:ca:5c:2f:13:46:13:6b:94:21:54:2d:0f:10:
83:bb:a1:be:dd:cc:00:45:ea:27:b1:a0:9c:d2:57:8f:9c:6c:
f1:32:97:4f:d3:29:3b:87:19:cb:d5:85:3a:a7:28:e3:9a:8a:
e1:cb:c6:59:5f:71:c9:2f:cc:c4:5e:33:47:97:1c:64:0d:68:
25:1a:e7:4a:72:8b:34:21:db:80:4d:93:8e:34:4d:59:f2:62:
97:32:84:8d:21:33:c1:38:40:c5:e9:30:23:13:14:27:d7:d5:
99:70:ab:64:23:7c:a1:75:4e:70:6a:f4:5e:f2:68:01:24:7e:
ad:f8:e8:c1:b0:72:5c:1f:6e:8a:13:cb:4b:11:09:5a:7a:e6:
48:cf:b5:05:42:e4:45:b3:a0:46:08:51:dd:4f:fb:e2:79:4b:
ae:85:ca:ff:d4:ac:9b:25:68:54:3f:c4:b5:06:0f:7d:20:cb:
d6:ef:20:e2:41:34:72:49:a6:a7:58:67:f7:b8:24:65:d2:89:
3b:8a:05:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:00:17 2025 by rpki-client