Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72E93ED68A8C11EE88404D7E4AD9E6FC.roa
File: 72E93ED68A8C11EE88404D7E4AD9E6FC.roa (raw, json)
Hash identifier: 1h5eHm4wD3JU2W59Y+vLNKhAscsyvT772YQIQb0Cb5U=
Subject key identifier: 09:FE:E8:CD:31:DB:A4:79:FB:9C:94:14:5F:09:5D:78:49:E0:26:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5350
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72E93ED68A8C11EE88404D7E4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:43:52 +0000
ROA not before: Fri 24 Nov 2023 05:43:49 +0000
ROA not after: Tue 26 Dec 2023 05:43:49 +0000
asID: 62240
IP address blocks: 154.195.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21328 (0x5350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:43:49 2023 GMT
Not After : Dec 26 05:43:49 2023 GMT
Subject: CN=65603818-3158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:e0:85:6c:99:ae:cc:0e:19:7b:a9:16:2d:
53:d4:8d:2e:3a:da:9d:6b:36:e6:21:5b:b2:35:66:
9b:d4:9b:65:79:e0:29:ed:0c:85:7b:e1:83:9e:ad:
83:bf:2e:54:65:3e:0c:15:98:a2:e0:d0:fd:90:19:
0c:2f:d1:56:6a:32:6a:20:3b:7e:0b:dc:92:44:fa:
5d:26:54:13:29:3f:52:7c:6e:a6:29:e8:7c:2d:a8:
a6:a8:1a:3c:0e:87:2c:d4:d1:ce:72:22:ea:41:af:
f7:38:40:8d:1e:20:4d:f7:a6:07:8e:f5:53:6f:16:
1f:3d:df:40:8f:81:db:1f:2f:c5:6b:16:d3:73:72:
8d:39:eb:2a:4a:3a:04:33:c0:7e:62:0e:3a:55:f1:
bc:71:fc:aa:50:12:39:8b:cc:00:ec:0b:2a:41:a4:
67:6b:d5:de:b0:d1:e9:92:b0:74:c8:01:cb:42:42:
e7:1f:89:b5:81:ba:be:82:75:77:bd:68:4d:5f:02:
af:8a:4b:a1:5c:11:b6:73:2b:1c:46:86:39:f9:2d:
97:b5:4a:f6:f2:35:cf:29:82:58:7f:ca:ef:e7:5d:
2d:c3:9d:bd:4f:ce:3a:d9:3f:ed:20:6e:53:3a:08:
c8:7a:79:27:a4:0f:2e:ee:48:10:3c:a6:d9:38:2a:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:E8:CD:31:DB:A4:79:FB:9C:94:14:5F:09:5D:78:49:E0:26:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72E93ED68A8C11EE88404D7E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.170.0/24
Signature Algorithm: sha256WithRSAEncryption
af:cf:52:d7:2e:04:82:ba:9a:71:ac:e2:8f:1e:21:03:16:5e:
98:46:fb:b1:94:30:89:d0:da:a5:fa:a1:24:85:d4:72:7d:51:
ca:e9:ef:2b:b6:c8:31:d9:4c:7e:10:93:fb:7d:0c:67:83:ee:
a4:48:9c:ba:eb:a5:5c:7b:55:3d:c6:c2:4b:47:a9:26:a8:22:
7b:a4:03:e5:c7:db:fe:ab:08:e3:7f:83:11:3a:57:6d:19:e6:
c3:ea:cf:cc:22:3f:d7:a8:dd:34:10:df:12:29:2e:6c:16:72:
2f:ae:57:9a:ac:a8:24:b4:0a:d7:0c:a7:a3:a3:2f:e8:34:6e:
c4:1d:ed:6d:3c:15:a8:58:40:d5:ae:9d:98:81:b6:a5:f7:bf:
c8:16:b5:ea:26:10:8f:89:05:4a:8d:7c:86:fc:1b:6b:ba:4f:
22:c8:df:05:ad:98:be:91:fd:eb:c0:34:ae:92:f3:bd:81:eb:
df:a5:f7:3f:a9:9b:61:2c:b8:97:f7:3a:64:ac:4e:7f:21:31:
e0:a0:fe:ca:5d:6f:18:e3:ff:82:04:3a:5b:c4:95:91:1c:50:
1b:22:36:6b:70:ae:57:1a:cb:eb:a9:14:2b:4a:47:25:b3:b0:
bc:b1:49:45:ea:63:4e:f9:15:47:96:bf:82:85:3d:af:75:7d:
6a:71:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:37:06 2025 by rpki-client