Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689C820A8A8F11EE8E0614884AD9E6FC.roa
File: 689C820A8A8F11EE8E0614884AD9E6FC.roa (raw, json)
Hash identifier: LsNetDsby714hAkaGx7O/JBvLTMeRMwqgRluHwFBdFI=
Subject key identifier: 8E:77:DF:C1:1E:69:C0:E6:49:75:9F:44:8F:2F:EF:1A:5D:01:94:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5385
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689C820A8A8F11EE8E0614884AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:05:04 +0000
ROA not before: Fri 24 Nov 2023 06:05:00 +0000
ROA not after: Tue 26 Dec 2023 06:05:00 +0000
asID: 62240
IP address blocks: 154.195.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21381 (0x5385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:05:00 2023 GMT
Not After : Dec 26 06:05:00 2023 GMT
Subject: CN=65603d0f-7598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:4a:9f:8a:89:04:77:de:fa:c4:3d:6a:fe:
80:03:24:5c:9e:79:c6:11:5e:a1:4a:69:63:c7:c2:
55:2e:8d:d1:54:d5:71:28:d5:cf:2b:df:56:c9:e5:
2b:01:98:b9:3c:1f:90:92:4b:22:a2:2e:e8:15:93:
bb:29:f3:48:99:3c:2f:63:46:bb:fd:99:10:89:b5:
7f:c0:37:54:65:a3:96:a9:90:e8:32:fe:a0:fb:34:
07:d7:94:52:d3:76:15:80:bd:d2:65:e9:30:fb:cf:
45:4f:5c:0f:cf:28:b0:b7:51:44:b7:74:a1:4e:03:
c3:3a:e7:20:c1:af:77:a4:01:10:5f:ad:46:4e:ee:
2c:19:fd:26:87:00:2d:a3:56:2e:ec:f3:10:10:80:
86:75:76:38:22:b2:33:f2:64:d0:4f:9e:50:2d:57:
7a:45:ea:ca:48:f4:92:f3:e0:d5:62:3c:ec:1a:79:
2b:90:32:99:c2:8c:76:f3:b5:8b:fc:21:9f:59:09:
0d:3d:bf:d5:a1:76:5d:12:73:2b:90:24:0c:76:21:
c4:38:1d:fb:1e:51:73:39:74:72:2b:11:de:6e:e7:
25:af:be:7e:d6:24:c2:78:9e:cc:57:d1:1b:cc:30:
e1:b4:dc:d1:23:3e:b5:60:34:3a:73:ee:2f:4c:40:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:77:DF:C1:1E:69:C0:E6:49:75:9F:44:8F:2F:EF:1A:5D:01:94:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689C820A8A8F11EE8E0614884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.127.0/24
Signature Algorithm: sha256WithRSAEncryption
10:41:41:ad:af:ef:1c:92:2a:28:63:88:88:39:49:d7:63:2f:
a8:47:e0:57:0e:93:61:4b:c9:62:9c:e4:b2:fe:5f:ce:e3:09:
ec:3d:0b:93:a8:81:2a:3f:7c:96:34:39:8c:11:83:ae:8d:90:
95:5f:bd:c6:55:66:2f:a0:fb:0c:6d:b8:39:7e:a4:fe:d7:09:
5e:94:03:3f:d8:63:ca:cd:f3:b7:df:19:f2:7b:25:1a:fa:ae:
d0:5f:43:01:fe:2d:c1:90:65:07:1a:05:63:dc:90:08:8b:34:
54:47:66:93:43:6d:3e:f1:71:43:5b:93:92:44:b1:0b:c1:03:
be:f7:fd:28:bc:e7:f0:4e:e9:7c:77:bc:49:e6:5c:e2:21:b4:
03:cd:85:84:4d:3c:e4:cf:59:fd:ec:0b:28:97:07:20:ab:e2:
c7:98:a1:e2:07:89:d7:78:e6:43:bf:d3:1c:20:ce:be:c6:33:
3b:86:00:dc:ef:56:aa:d4:be:bb:55:45:a1:5a:b7:9c:20:97:
48:4d:ba:5d:3f:4b:34:e2:0e:68:59:1c:7f:b7:74:ed:fb:b3:
f6:ab:ea:f6:62:65:59:60:3b:01:aa:a6:7b:68:2f:2c:70:f3:
56:ca:4d:90:6c:be:1c:50:78:21:3b:51:89:94:f8:76:81:6d:
4b:dd:c4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:53:42 2025 by rpki-client