Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ADF2E728CDD11EE896F35644AD9E6FC.roa
File: 7ADF2E728CDD11EE896F35644AD9E6FC.roa (raw, json)
Hash identifier: d2AANqC+mJC+WdEbNMNeM5G+0L8LB+EnkvI6dIBilW0=
Subject key identifier: 75:F5:6D:58:28:A1:17:32:7E:35:DA:59:56:B3:6B:DC:BD:E5:AE:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ADF2E728CDD11EE896F35644AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:28:57 +0000
ROA not before: Mon 27 Nov 2023 04:28:54 +0000
ROA not after: Tue 26 Dec 2023 04:28:54 +0000
asID: 62240
IP address blocks: 154.196.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21750 (0x54f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:28:54 2023 GMT
Not After : Dec 26 04:28:54 2023 GMT
Subject: CN=65641b09-c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:b5:7b:6b:32:de:c1:7d:80:b1:3e:90:06:
fc:b4:ce:cd:88:80:fe:80:46:ed:f1:ef:ab:dc:d7:
03:17:6e:7d:e3:79:2c:63:27:36:e6:3a:d4:7c:cf:
1a:e3:5b:f8:26:de:ee:7a:fa:ce:88:22:2f:cd:57:
be:53:10:f5:11:c1:73:0d:4a:af:74:37:1c:a7:40:
53:c9:84:6c:82:17:b6:94:98:c0:3b:83:11:60:6f:
72:c0:ee:a5:c6:8d:6b:fd:27:c2:a0:44:6f:a1:66:
c3:84:b1:86:78:24:8d:37:97:ec:fa:df:bd:cd:3f:
ff:ea:f4:b2:4c:50:56:37:10:fa:eb:fb:7c:32:8f:
8f:65:43:6b:92:73:13:25:c0:a1:f6:5b:73:0b:ce:
58:38:ec:49:b8:98:16:6e:5b:fa:58:d8:71:d1:63:
e1:62:5e:d5:3f:74:c3:57:38:1d:48:b3:0e:a7:53:
b7:a5:9d:1d:a5:6c:ef:42:ba:33:a4:13:a9:71:7e:
1d:2f:0f:c3:4e:af:32:f9:ba:b0:e9:76:bf:c4:a5:
df:fc:8b:b1:ee:1b:00:43:24:d9:47:35:d8:1e:c3:
4c:29:c6:09:bf:97:42:75:29:59:a5:5c:92:01:25:
04:12:c2:34:82:a3:c6:c8:28:b5:a4:ba:76:ed:65:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F5:6D:58:28:A1:17:32:7E:35:DA:59:56:B3:6B:DC:BD:E5:AE:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ADF2E728CDD11EE896F35644AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.89.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:3c:da:f4:18:35:4a:ed:3c:76:52:94:85:1c:07:ec:78:1c:
fd:ae:9e:cf:9c:70:1a:bf:9c:e5:a4:a7:2e:53:8d:06:25:88:
9f:82:2d:a8:f0:8e:8d:1f:6a:dd:27:d7:6a:a1:ec:79:21:b7:
3c:7e:12:99:01:01:ab:05:aa:51:ce:cb:11:80:31:24:f8:06:
2c:8c:12:c4:72:50:8b:88:dc:81:05:4f:f6:71:fa:e5:4d:a6:
9a:35:d8:72:d1:14:09:18:3e:62:75:02:79:0c:06:41:86:37:
7e:99:78:0c:1b:36:2c:9a:5c:b5:d4:28:af:97:de:b2:ab:d0:
ea:2e:e9:46:b7:2b:be:5a:a1:c8:11:4e:f8:07:c4:37:58:f2:
89:9b:6f:df:e1:0d:f3:f6:96:c7:b2:0b:0b:81:51:ca:49:5f:
83:9a:19:67:28:f6:86:d9:96:89:42:03:fd:fb:38:e7:58:92:
89:0e:e4:be:cb:29:e6:49:71:9f:f8:ac:74:5e:eb:d1:2e:49:
0c:eb:f7:39:53:99:03:42:ed:7f:14:f4:b0:15:75:f3:1b:f2:
d4:fd:d7:a2:15:50:21:27:c7:bf:94:3e:84:49:07:78:a9:ea:
75:e7:e3:87:51:97:19:11:22:03:6f:36:7f:9c:c5:d5:e6:fa:
39:b6:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:16:10 2025 by rpki-client