Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67974C90D18C11EC8AF16998F1222468.roa
File: 67974C90D18C11EC8AF16998F1222468.roa (raw, json)
Hash identifier: qVYksRwAoVJYIIFAjDwImOGQsRhyYUL7Ibq0gY8zC1Q=
Subject key identifier: FB:6E:10:A2:CE:5C:C7:89:9C:3E:23:56:87:2D:0C:7B:89:46:A5:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1641
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67974C90D18C11EC8AF16998F1222468.roa
Signing time: Thu 12 May 2022 00:42:31 +0000
ROA not before: Thu 12 May 2022 00:00:25 +0000
ROA not after: Wed 31 May 2023 00:00:25 +0000
asID: 141677
IP address blocks: 154.91.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5697 (0x1641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 00:00:25 2022 GMT
Not After : May 31 00:00:25 2023 GMT
Subject: CN=627c57f7-cbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:7a:37:d2:52:a2:79:5a:ce:63:45:a0:7d:
f4:5e:a3:45:43:11:aa:ec:e8:95:2b:47:f5:98:a1:
40:88:7a:f6:ac:4f:1e:2d:5f:99:3f:e6:1d:22:e4:
66:a0:a2:e3:32:83:4c:34:5e:8d:5c:5d:aa:5a:06:
73:a6:33:94:a5:0d:51:fa:b1:d0:ca:64:40:f4:15:
d3:d1:75:67:02:95:72:c7:05:9f:e7:af:a9:5a:60:
fd:07:45:62:2a:fd:93:4e:ce:a9:c3:5a:ab:48:3c:
98:8a:52:98:0f:7c:87:9e:2e:83:08:b7:c0:c7:5a:
00:d4:28:a5:79:05:2d:74:a4:7e:90:02:14:c7:de:
49:e9:aa:b5:80:6a:00:bd:80:fb:ff:45:fb:0a:06:
95:a1:bd:c6:8c:ce:97:f7:d9:4e:e1:59:47:75:0e:
19:a1:2b:ce:04:8c:23:cb:17:f7:d6:25:7a:b1:4a:
7f:5e:05:1b:aa:1a:48:56:7c:ee:01:79:60:f5:23:
2f:e1:80:51:c7:1c:cf:2f:ff:9d:a7:a5:0e:27:ca:
01:85:bd:8c:cf:49:0e:b5:09:9e:0a:ee:f6:23:86:
7c:87:d5:a2:b8:08:3b:6b:74:d7:ea:fd:47:86:dc:
03:7c:e4:48:06:b4:e3:ce:84:3a:ec:06:18:01:6a:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6E:10:A2:CE:5C:C7:89:9C:3E:23:56:87:2D:0C:7B:89:46:A5:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67974C90D18C11EC8AF16998F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.1.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:13:ee:8e:d2:55:0e:c3:70:f7:95:56:7c:24:54:d0:26:7b:
11:95:f8:e5:d0:66:e3:5b:77:87:68:62:94:cf:7c:fe:18:1c:
32:21:66:bd:a7:1c:9a:ba:ee:fd:df:4e:f4:08:d5:ed:33:48:
69:a0:c9:53:a2:ad:f9:b0:4d:b0:70:83:38:29:80:86:76:4b:
88:6b:62:e2:80:ed:ee:fa:7f:8a:b3:ca:dc:82:97:53:c5:37:
b5:e5:49:c4:12:96:53:87:10:ae:e6:61:07:b8:46:9b:6c:4b:
12:81:6e:b5:5a:db:5a:c2:2a:28:55:b4:4b:b0:ae:a2:81:c2:
39:44:85:63:35:42:dc:1a:0d:05:df:1c:d7:f0:96:dd:b0:90:
07:d3:5b:f6:88:04:da:3b:3b:d6:b9:b1:46:dd:33:e9:7e:b5:
d4:4d:24:6f:f1:b4:0c:3f:7a:da:7e:8d:94:84:b6:2c:ba:f4:
62:ab:bd:a4:52:2a:94:e9:6f:38:19:34:5a:82:16:a8:55:ef:
ae:30:9d:13:ed:b2:83:59:4c:7e:78:d4:02:be:59:3f:27:79:
e3:49:26:05:b0:26:72:23:61:f2:29:be:6d:3e:4b:06:59:e1:
be:ba:a8:39:29:af:05:3e:53:6c:c9:5d:9a:b3:e6:fd:b8:08:
72:09:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:40:52 2025 by rpki-client