Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A50BAE53C511EE9BE6BA544AD9E6FC.roa
File: 65A50BAE53C511EE9BE6BA544AD9E6FC.roa (raw, json)
Hash identifier: Du1Y+PwbPBBL3KT+8FvCGUX5eVWh4Z6h1WVchgO2dk4=
Subject key identifier: 58:76:F2:A9:E3:89:C5:67:02:31:BD:34:DB:0C:E6:B6:8E:B3:B8:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3DCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A50BAE53C511EE9BE6BA544AD9E6FC.roa
Signing time: Fri 15 Sep 2023 12:42:57 +0000
ROA not before: Fri 15 Sep 2023 12:42:54 +0000
ROA not after: Sat 28 Oct 2023 12:42:54 +0000
asID: 9009
IP address blocks: 154.205.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15819 (0x3dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 12:42:54 2023 GMT
Not After : Oct 28 12:42:54 2023 GMT
Subject: CN=65045151-cf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:78:83:97:a4:1c:aa:19:46:c7:95:a9:e6:
6d:3f:13:ba:97:30:79:9a:17:bb:5a:fd:bc:bd:df:
09:84:8b:f9:eb:2c:d5:4a:f7:65:81:02:d9:a1:88:
1e:22:0e:81:b0:85:57:62:2d:5f:a5:bd:04:b7:ea:
89:4b:c3:ed:62:fa:0e:03:4f:33:95:cb:fc:8d:b1:
a4:64:67:28:8e:05:39:e0:ee:23:40:ac:9a:5b:b2:
b0:26:64:7a:b8:44:88:b1:8f:96:68:b7:78:d9:42:
5e:9e:50:ca:27:5c:ad:40:57:50:b5:b1:82:d3:ef:
88:f0:cf:14:fa:e7:a8:11:e5:b6:50:2f:70:56:a2:
70:12:ba:d6:36:bb:86:2e:75:8e:d6:c3:46:9f:7c:
7b:87:a3:06:54:ff:fb:5a:26:30:93:1e:0e:12:d2:
ee:85:ad:e6:71:75:b6:a6:be:f6:14:d6:33:c8:f0:
11:63:17:0b:bb:1d:8b:68:ad:bb:ef:24:b7:e6:0e:
71:3e:d9:08:70:67:50:c6:d0:08:02:23:44:e0:5b:
66:42:50:31:b1:55:c6:d7:7d:74:c1:0d:9a:74:87:
63:e7:51:b2:35:12:f0:35:cd:2f:bf:a2:41:02:da:
57:3f:ce:4e:69:62:c1:6d:33:50:f7:b6:a3:7b:89:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:76:F2:A9:E3:89:C5:67:02:31:BD:34:DB:0C:E6:B6:8E:B3:B8:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A50BAE53C511EE9BE6BA544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1b:2a:b2:77:cf:bc:a7:b5:af:9b:e7:b0:e5:dc:cf:4e:be:
90:40:18:63:38:ff:90:3a:99:09:fd:da:e3:43:f9:88:32:94:
24:5c:3d:84:e8:c7:d3:60:2a:f0:42:6e:bc:ad:1c:db:46:a9:
f1:5b:d9:d7:99:5b:5f:f7:63:16:ea:bd:84:cf:3f:93:d3:0a:
4a:96:d3:c1:9a:bd:92:b1:79:c9:10:a3:c7:bb:59:33:ee:d7:
2c:44:bb:94:25:44:c7:6d:6d:ac:c7:04:72:9a:ec:33:21:06:
6e:35:d4:3d:21:ee:be:a8:01:4d:a6:aa:c6:6e:38:2e:e2:df:
78:73:3e:07:8e:63:27:ee:33:3c:06:84:d9:8e:61:e0:99:c2:
3e:ce:20:cd:6c:f2:3a:d6:d7:fd:04:ac:28:81:ac:bf:57:67:
c4:91:1e:4a:47:7c:ae:7c:25:62:73:31:96:71:c9:cd:57:10:
2c:94:77:05:7b:02:e4:f0:50:67:21:ef:ce:94:5e:51:4e:b7:
9c:47:c8:e3:e0:3c:08:b5:fd:ad:07:cf:4f:b5:3d:b6:48:33:
b3:cf:13:f4:78:f5:a6:ff:79:e6:64:57:87:e4:f2:ac:ee:e7:
68:fe:e0:40:1b:40:28:ef:26:87:b4:5f:79:57:80:9d:6f:98:
c3:de:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:58:07 2025 by rpki-client