Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ACB1EFC8CDC11EE9509C2604AD9E6FC.roa
File: 6ACB1EFC8CDC11EE9509C2604AD9E6FC.roa (raw, json)
Hash identifier: JiiHye4diNrvtP9oJ33BYiaR2vSJNqWUwH+RQzmAwOU=
Subject key identifier: 2F:72:F2:44:45:63:DB:27:00:50:44:9D:0B:B9:C9:20:E7:36:CB:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ACB1EFC8CDC11EE9509C2604AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:21:21 +0000
ROA not before: Mon 27 Nov 2023 04:21:17 +0000
ROA not after: Tue 26 Dec 2023 04:21:17 +0000
asID: 62240
IP address blocks: 154.196.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21723 (0x54db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:21:17 2023 GMT
Not After : Dec 26 04:21:17 2023 GMT
Subject: CN=65641941-905b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:02:4a:8a:df:76:87:b4:d4:d8:19:92:45:
3c:05:ca:8b:60:86:fe:8e:75:a6:ca:6b:ad:6e:09:
f6:b0:74:a2:8f:b8:c0:85:67:b0:c3:c0:94:8a:94:
e9:4e:5e:81:62:27:b8:64:22:90:e5:a7:b3:8b:17:
7c:d6:d6:57:da:bb:fb:2d:1b:95:8a:9c:bb:36:fe:
f2:d5:5a:89:5f:aa:ab:79:f2:2b:47:81:8c:e5:8c:
ba:2f:3a:89:fb:1f:8d:77:1c:1b:5b:1b:d7:f6:2c:
3f:d3:94:95:c3:be:f1:d1:50:62:d2:e7:6e:94:bf:
c8:6e:78:d0:c1:37:fa:5e:a7:d6:00:88:b0:8e:15:
7a:3d:86:4d:65:c6:80:be:a5:41:f5:31:6b:f8:12:
cc:33:5e:bd:8b:38:30:30:16:e1:0b:ef:88:7c:f5:
c4:cc:59:8c:53:63:96:f3:cb:a0:fd:e4:64:e1:33:
ab:2a:81:1c:73:5d:db:63:9a:d0:c2:75:a5:5a:dc:
9b:7b:fa:e6:6f:89:08:bb:92:7c:38:ac:96:1f:e9:
20:06:88:5e:aa:d9:b5:41:03:fb:51:6a:c5:e2:81:
6b:61:11:9c:c0:48:21:d7:cd:3c:ab:5f:7d:cc:90:
a6:cd:24:00:7e:22:53:7a:b0:4b:47:3e:af:f5:02:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:72:F2:44:45:63:DB:27:00:50:44:9D:0B:B9:C9:20:E7:36:CB:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ACB1EFC8CDC11EE9509C2604AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.81.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b0:1b:08:38:25:5c:88:fa:b9:8a:b1:56:64:5f:8d:30:5e:
29:01:65:1a:b5:ab:3b:62:48:60:d0:df:51:16:03:c2:ac:26:
a3:e1:fa:34:f1:2a:37:50:43:8f:f6:04:04:bc:28:05:05:8b:
52:a4:ac:81:fc:2a:c0:df:d2:7d:4f:40:c5:25:34:ac:1c:60:
28:8c:de:76:4c:86:62:0f:6d:c9:6f:bd:19:16:de:16:7a:f4:
ee:59:74:19:52:72:40:a8:a7:b7:20:7b:cd:0a:60:0b:4b:c0:
58:d0:0c:c6:27:9b:7c:c8:03:00:bf:ec:15:3b:f7:09:2e:7a:
10:2b:66:c4:bc:89:73:bc:8b:50:7b:2d:67:ae:3c:86:80:9a:
90:77:20:0b:6a:2c:91:95:44:cc:14:6f:d9:31:4d:34:39:20:
b9:b5:bf:a0:56:05:ca:ac:db:25:a7:b0:e4:d4:1c:c3:4b:97:
73:49:51:bf:ee:6f:88:f3:0e:49:c9:d1:21:06:c5:a0:45:b1:
bf:c3:bf:f8:d7:93:da:2e:e5:9f:86:56:50:62:24:e0:81:15:
0a:44:88:13:4e:c8:a1:ce:b2:c0:28:3d:f9:87:16:45:ec:1d:
87:a4:e8:0a:b3:56:68:68:4a:2f:1a:f3:91:c2:1f:8e:15:38:
24:d8:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:24:21 2025 by rpki-client