Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EEB300AE56B11EB9D95D611F8AEA228.roa
File: 6EEB300AE56B11EB9D95D611F8AEA228.roa (raw, json)
Hash identifier: E5wgowNbnxiEaeGbN2f2G3bSU1MYLfjBTpZi2dEKFbo=
Subject key identifier: 42:47:98:6F:45:09:31:D4:B6:7B:5B:DE:5F:26:74:3F:86:7D:62:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0798
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EEB300AE56B11EB9D95D611F8AEA228.roa
Signing time: Thu 15 Jul 2021 12:51:55 +0000
ROA not before: Thu 15 Jul 2021 12:51:49 +0000
ROA not after: Fri 15 Jul 2022 12:51:49 +0000
asID: 397630
IP address blocks: 154.201.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944 (0x798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 12:51:49 2021 GMT
Not After : Jul 15 12:51:49 2022 GMT
Subject: CN=60f02f6b-ccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:49:f4:f0:ba:45:d4:5b:15:8f:ae:94:03:
16:eb:2f:1e:5d:e9:7c:1f:bf:ae:70:e0:bb:15:ad:
38:8b:8d:d0:d3:36:ba:3d:d9:75:e4:c7:50:d1:69:
1a:98:9c:06:32:a4:2d:a1:08:87:39:b1:de:4d:1b:
83:8d:57:70:f2:4b:d9:4b:f6:be:51:e1:f0:dd:08:
62:ad:c7:9b:26:76:49:43:4b:e1:49:5d:86:50:af:
bb:02:3a:bb:39:41:e7:d0:4d:f0:d0:54:8e:c8:50:
fe:14:be:0c:99:b8:a1:5e:6f:f6:72:31:ab:f7:0d:
39:74:cd:e0:51:72:b8:87:aa:53:96:7b:79:6a:98:
78:c2:ea:ba:c0:20:c7:18:47:14:ec:45:af:31:35:
1a:4e:6f:db:dd:09:c0:c8:9b:ce:5e:7a:0a:82:99:
35:0d:37:98:d5:32:2e:d0:7f:53:20:d4:9c:59:d6:
2e:13:cc:d2:19:f2:35:f9:ef:8b:42:bf:fb:08:50:
a0:e3:2d:1a:90:21:44:bf:2a:54:af:d4:08:f9:bb:
ca:82:33:ba:a9:43:a0:ca:ac:72:0b:15:be:b9:88:
92:fb:1d:aa:42:ca:7d:5e:c9:13:5a:1e:cf:1b:31:
cd:7a:89:7d:e9:d2:ab:f8:fb:f0:a8:4c:e2:6e:61:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:98:6F:45:09:31:D4:B6:7B:5B:DE:5F:26:74:3F:86:7D:62:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EEB300AE56B11EB9D95D611F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.32.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cf:ef:ca:c5:8a:12:8f:90:dd:2e:6e:04:13:06:86:3d:35:
ff:c7:f2:6d:25:31:aa:04:af:27:53:77:15:fb:3c:ed:3a:f7:
46:ce:67:d1:6c:30:00:57:99:e7:1c:a4:91:90:d1:16:f2:f9:
93:39:36:9e:1a:97:71:67:6f:47:4c:6f:8b:78:27:17:f5:81:
db:85:d1:f9:65:f4:c2:4c:92:4f:a8:00:44:5c:a3:de:1d:2e:
14:dd:1e:40:5e:6f:68:c0:e8:b2:d1:72:fa:95:ad:bd:2c:09:
fe:ec:84:01:6e:97:3d:14:26:8f:99:48:b9:5e:c7:be:5a:6c:
f0:87:f4:e7:78:be:a5:6d:e7:d1:8e:9d:a0:f3:7b:23:30:89:
4a:5e:18:c8:d9:e7:f4:10:19:9f:ad:c9:ea:2a:95:e7:ff:66:
d3:37:da:53:60:1c:fe:04:f4:f9:0f:50:5b:f0:a6:ac:eb:07:
3b:31:47:dc:3b:c9:05:61:74:98:1c:d5:3f:b0:66:1b:8f:f6:
05:5e:31:01:e5:1b:7b:0a:42:69:51:77:66:d5:fc:69:21:d9:
55:18:b8:f9:91:20:13:d2:7b:80:94:dd:fa:cd:f3:ac:e1:cf:
2f:9b:cd:7a:b6:3f:ae:34:d1:aa:77:74:92:6d:33:e1:f7:1f:
68:02:f2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:00:29 2025 by rpki-client