Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C5DE62A8CDE11EEB6D983674AD9E6FC.roa
File: 7C5DE62A8CDE11EEB6D983674AD9E6FC.roa (raw, json)
Hash identifier: lLDGrbQzzl7xgghsyT3V1A0c2v0mcRGHUA19WD1NRuI=
Subject key identifier: 8B:6E:14:58:FA:7D:C8:0B:0F:AF:20:53:29:61:22:99:4D:11:E2:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 550E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C5DE62A8CDE11EEB6D983674AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:36:09 +0000
ROA not before: Mon 27 Nov 2023 04:36:06 +0000
ROA not after: Tue 26 Dec 2023 04:36:06 +0000
asID: 62240
IP address blocks: 154.196.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21774 (0x550e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:36:06 2023 GMT
Not After : Dec 26 04:36:06 2023 GMT
Subject: CN=65641cb9-136a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:b2:63:db:76:a7:6d:bf:1a:8c:4d:9c:58:
da:21:5c:03:1a:1a:ca:f7:b5:36:c7:be:db:da:f3:
0e:e0:00:54:c6:3a:e8:5c:5a:90:c2:ca:7c:c2:33:
87:5d:a1:54:98:89:dc:50:c6:b9:dc:37:3e:d6:62:
ff:e7:8a:e5:74:c1:1e:fa:c3:d2:f0:72:21:88:ce:
d2:7a:c3:21:54:01:d7:f6:6d:48:1f:9f:a0:b8:96:
7a:ce:71:c3:4c:ce:de:4a:c8:89:25:18:1e:82:6b:
d3:c5:ab:af:0d:30:d7:c8:8a:72:72:5a:85:ce:f3:
5d:08:37:40:4c:00:50:8d:ed:15:57:c6:31:df:fa:
5c:8e:e0:d8:5a:90:b4:07:a9:a7:a1:91:50:d1:01:
f1:d8:79:3e:65:5f:75:67:de:16:3e:ce:0b:55:6b:
59:9c:36:44:dd:4f:cb:c5:58:9e:04:74:c1:f8:b8:
b1:e4:74:41:9d:0f:fc:a7:9b:3a:6c:b7:c3:f7:38:
59:70:81:4e:e0:95:77:e0:16:ac:4c:28:ad:18:f9:
54:69:30:f4:65:1e:ab:ff:09:72:56:b9:8a:2b:71:
9d:9c:0c:1f:55:2f:63:e1:c8:8b:38:e7:72:fd:8e:
88:f0:ec:51:a6:62:04:06:21:9d:35:73:a1:43:4f:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6E:14:58:FA:7D:C8:0B:0F:AF:20:53:29:61:22:99:4D:11:E2:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C5DE62A8CDE11EEB6D983674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.74.0/24
Signature Algorithm: sha256WithRSAEncryption
94:36:34:00:d8:3c:4d:cd:cd:69:51:c5:5f:77:b5:56:16:cf:
75:10:ff:0a:44:b2:8f:3d:2d:26:f0:9f:e4:b3:4c:e7:92:b7:
cb:63:5e:af:78:74:36:58:96:f8:b0:31:4b:30:ca:d6:8f:03:
cb:31:72:a3:f6:1d:ad:bb:92:35:c0:e3:35:50:32:9f:97:75:
43:b7:dd:26:0f:67:bb:c7:4a:fd:ee:16:9a:e5:5a:07:98:1d:
43:b8:98:c3:fa:d9:f9:46:0e:cd:51:30:00:9e:cc:0c:19:68:
0e:be:c8:8f:e5:78:7b:af:6c:33:65:0b:99:a2:85:87:ac:df:
57:13:2b:96:25:05:e0:fa:ca:a8:61:21:69:5a:e5:24:a4:59:
17:20:66:2e:46:ab:90:e8:4c:8c:ce:fa:7c:b3:f8:49:64:cd:
5f:ee:4e:79:f6:d1:33:25:0a:b0:f3:41:f2:a9:df:fa:07:e1:
12:ad:7e:8d:fe:ae:bd:7f:07:5d:35:7b:4a:22:c0:dd:00:6c:
71:ec:ca:c6:d9:95:cf:63:7c:77:02:b9:22:d3:50:cd:ef:8e:
1c:e3:69:b1:46:68:68:d0:33:aa:5a:f2:40:f6:41:b1:74:9d:
10:f0:e0:af:b6:e9:d1:9d:ab:0a:e8:ed:b4:e0:87:aa:33:6e:
0c:83:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:57:03 2025 by rpki-client