Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73A99122405F11ED98C3C47CF1222468.roa
File: 73A99122405F11ED98C3C47CF1222468.roa (raw, json)
Hash identifier: NZYanuBv/la8gxrPXWJPH4ZV2wrNeyr3/bN1Pc3AVZw=
Subject key identifier: 4E:77:65:FB:34:6A:72:D6:83:05:4B:4C:19:31:D1:68:CD:FB:0D:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 193E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73A99122405F11ED98C3C47CF1222468.roa
Signing time: Fri 30 Sep 2022 01:30:22 +0000
ROA not before: Fri 30 Sep 2022 01:30:19 +0000
ROA not after: Thu 05 Oct 2023 01:30:19 +0000
asID: 22773
IP address blocks: 154.194.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6462 (0x193e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 01:30:19 2022 GMT
Not After : Oct 5 01:30:19 2023 GMT
Subject: CN=633646ae-3347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:f9:1d:05:6c:be:0c:83:29:f7:df:54:dd:
82:28:f5:e0:86:10:db:7b:5f:33:43:77:8f:cc:4f:
69:48:73:5c:38:a7:37:7d:c3:d2:47:42:36:fb:bb:
cd:e5:89:47:0c:59:51:98:19:b3:0b:5e:94:dc:fd:
2d:b8:95:d9:14:8c:c2:14:f8:6b:38:a4:58:ab:1c:
c0:f2:42:27:9f:2d:2b:1c:7e:b0:98:fc:da:37:1c:
cf:eb:7a:6a:75:50:b7:2b:cb:37:dd:b7:1c:b2:52:
d7:b3:8f:72:19:7c:75:40:66:26:44:f0:3c:5a:c3:
77:49:a5:e7:92:97:09:5c:c2:db:85:d5:85:b3:99:
b0:3b:3a:71:a7:98:6b:44:12:a2:dd:3c:44:2e:34:
2f:eb:16:a7:57:55:76:d4:6f:42:36:37:f6:6b:f3:
8a:0a:83:1f:4d:e8:9d:0f:5e:5b:69:4f:5f:50:74:
ff:a7:e4:9f:bd:a4:8c:77:9f:17:a1:81:57:88:2f:
87:86:62:91:0f:31:35:22:de:1b:88:95:73:c8:f9:
88:6b:e9:1e:a1:6b:f1:57:4e:09:36:32:1c:10:23:
73:38:83:db:4c:7b:3f:01:4b:7d:02:e2:a8:ce:3f:
3d:17:d0:1d:90:cf:ff:02:e3:49:a9:a2:c9:46:d9:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:77:65:FB:34:6A:72:D6:83:05:4B:4C:19:31:D1:68:CD:FB:0D:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73A99122405F11ED98C3C47CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:97:b3:a5:60:a8:7c:48:29:26:90:c7:0c:34:27:60:47:b7:
8a:47:08:4c:4f:35:88:8f:dd:72:fb:1f:ae:7e:3d:94:0c:00:
05:c4:08:6a:2e:e2:4b:0d:b3:cf:1f:f5:23:92:ae:14:40:38:
79:21:4e:d8:71:c0:f4:f2:88:a0:75:fa:fc:26:68:b9:c8:ef:
e3:7b:75:61:08:df:f6:45:48:5a:b4:1f:a9:60:bf:e5:66:44:
8f:87:cb:74:2a:ca:d5:a5:ad:16:26:bb:3a:33:17:86:0a:16:
68:da:8e:b4:22:8f:31:04:73:8d:07:70:d9:49:2e:44:c7:54:
65:b8:f3:a3:f8:ce:57:a5:78:12:28:91:dc:df:1c:a3:ea:a9:
54:6f:a1:b8:4f:41:b9:23:a0:40:74:1f:f8:89:3c:08:56:7c:
40:dc:81:58:76:32:a2:b8:3b:d2:27:78:a2:bc:39:ff:c6:07:
30:d4:b8:a1:5d:58:84:43:87:94:22:ad:23:4e:9f:8a:c8:94:
3e:cf:6f:0d:1c:ae:04:62:2e:57:c9:87:6e:69:f0:4c:fa:34:
c9:12:52:ed:21:8e:a2:9d:e9:92:49:2b:c0:14:8d:86:2e:3c:
83:8e:8a:a2:67:26:6f:c7:eb:cb:5a:b6:a4:67:18:d9:35:13:
70:1f:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:21:00 2025 by rpki-client