Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F727E88CDA11EE99F1245A4AD9E6FC.roa
File: 69F727E88CDA11EE99F1245A4AD9E6FC.roa (raw, json)
Hash identifier: s+v356L0f/6SGbrWAXjHKV/AHxzhPZnkcEGLJ/ubMok=
Subject key identifier: 92:A9:A8:A8:BE:30:E7:49:F8:5F:E3:48:C3:6B:51:D3:CA:EF:D3:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F727E88CDA11EE99F1245A4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:07:01 +0000
ROA not before: Mon 27 Nov 2023 04:06:57 +0000
ROA not after: Tue 26 Dec 2023 04:06:57 +0000
asID: 62240
IP address blocks: 154.194.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21672 (0x54a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:06:57 2023 GMT
Not After : Dec 26 04:06:57 2023 GMT
Subject: CN=656415e4-3ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:cd:3b:84:92:eb:99:3b:b5:2c:35:e8:aa:
3c:a7:2c:2a:01:7a:f1:89:3d:94:64:e3:57:86:de:
c2:09:e5:bb:9a:51:0d:7e:f0:bd:76:29:e9:d0:85:
6e:98:ce:86:a3:f1:80:c8:10:aa:99:50:46:2e:ff:
94:77:08:f3:f4:eb:28:7e:81:4c:31:d5:08:72:d9:
45:75:ca:25:a1:0b:1f:99:9d:2d:62:a3:a4:bb:38:
c4:c8:74:54:00:b7:95:53:43:ff:bf:92:35:25:9b:
16:22:af:3d:20:01:ab:67:34:a2:fe:65:77:46:81:
41:b6:0a:ba:bd:8f:2c:ea:82:b4:e1:b9:bb:5e:ad:
b7:94:00:65:47:27:8e:a9:a6:4c:91:2b:10:5b:c0:
a0:fd:a1:ab:bd:86:e0:08:a0:d0:1f:80:08:f2:bb:
b0:cf:54:ad:8d:8c:5b:b8:59:cd:7d:8b:84:d5:b5:
62:3c:72:78:3c:ce:3d:3b:3d:e8:a1:50:7d:9e:69:
cd:f6:bc:9c:d8:1d:06:50:d3:ee:ef:c9:ab:ea:19:
b2:b4:16:4a:b3:71:9a:cd:83:f0:29:b8:cd:bd:7b:
68:48:bf:33:e1:bb:e8:37:1c:6e:7e:4c:3d:6a:ca:
81:1b:a1:bd:9f:7a:11:0b:2a:c3:37:85:82:0a:b7:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:A8:A8:BE:30:E7:49:F8:5F:E3:48:C3:6B:51:D3:CA:EF:D3:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F727E88CDA11EE99F1245A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f2:09:80:71:5d:da:d5:ec:d3:69:15:d0:82:01:0d:94:df:
eb:3f:fd:40:a5:a7:9e:fe:87:03:2e:93:ae:a3:43:bb:35:af:
02:a6:db:51:8b:a5:57:3f:af:ec:13:51:bd:4c:c4:8d:a1:cd:
2a:0b:70:73:64:d6:19:99:12:3d:b8:84:b5:9a:a5:9f:8f:a0:
b6:5b:3a:1e:8d:05:31:51:da:61:21:ed:74:8f:2b:61:04:25:
35:47:10:cd:d4:f0:9f:46:e7:a0:b2:4c:83:9b:57:bc:7a:d0:
f1:ae:4d:0b:50:e3:04:c5:ed:eb:08:7b:3f:1e:65:c5:a4:84:
f4:05:d2:8a:da:88:b6:b0:c1:7a:0d:0c:d7:89:2e:44:8e:b5:
4d:ff:ff:89:85:d2:7e:5a:bf:c6:ef:45:cb:93:40:9e:15:d8:
bf:95:be:3b:2f:4a:67:5e:6a:6e:41:48:9e:af:97:51:3d:2d:
a6:40:ca:4b:dd:74:b5:dd:4f:02:ae:e8:7f:1e:35:78:38:94:
41:20:68:e7:1e:7b:ee:a0:9a:1a:f1:2d:f1:6b:d2:1d:d8:2f:
58:28:5d:49:f2:85:b4:a0:b0:7b:a7:c8:83:b8:7f:de:d4:9b:
6d:3f:9c:ce:f5:89:5c:30:88:09:53:a8:b9:dd:88:64:b6:0b:
a8:c0:3f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:19:58 2025 by rpki-client