Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/844F1B288A7D11EE8711454C4AD9E6FC.roa
File: 844F1B288A7D11EE8711454C4AD9E6FC.roa (raw, json)
Hash identifier: eGhy4zOPb8U76kfabFh1p/Zif96uGudHYKHZIjpeEeA=
Subject key identifier: 1D:3E:A1:FE:35:F7:F5:16:06:60:9F:E8:AC:71:DA:D1:CC:5A:44:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5282
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/844F1B288A7D11EE8711454C4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 03:56:59 +0000
ROA not before: Fri 24 Nov 2023 03:56:56 +0000
ROA not after: Tue 26 Dec 2023 03:56:56 +0000
asID: 62240
IP address blocks: 154.194.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21122 (0x5282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 03:56:56 2023 GMT
Not After : Dec 26 03:56:56 2023 GMT
Subject: CN=65601f0b-f1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:91:ff:51:99:dd:69:72:f0:ee:f8:cb:f5:
77:c0:47:07:03:db:7a:72:8c:61:12:63:c2:6b:1b:
73:78:6a:b1:f1:a6:ad:b0:bc:1c:0a:27:26:03:d6:
f4:0f:9d:95:8d:66:ef:62:e4:4b:f0:6f:44:c6:c0:
f8:2f:54:9f:41:13:13:f6:5b:6c:16:b6:a8:67:1b:
20:5b:81:79:69:eb:68:8d:89:a7:fc:50:7a:9d:6e:
55:7b:a1:3d:91:f1:e4:f9:e8:d4:eb:81:67:6c:a3:
ab:15:a5:5d:a8:aa:5c:fb:09:0e:03:d9:9f:fe:cb:
0b:a7:52:b3:7c:ea:0a:44:8e:ef:69:67:0c:84:16:
b4:85:c9:58:ef:90:43:e0:6d:4e:de:bf:40:be:f4:
08:fa:f4:66:e9:1f:2a:d8:5b:22:3a:fc:9e:68:3b:
fc:5b:1b:1e:d8:9c:fa:9c:2a:b2:e1:b7:d0:14:15:
a7:b9:f6:4d:12:ab:ce:a8:93:12:44:97:6b:36:ff:
54:3e:64:34:1a:37:e6:e1:5e:16:8d:df:67:3e:3f:
d6:d0:05:60:c4:91:b7:54:05:69:d3:ec:e1:95:1c:
22:36:c4:d7:41:32:7e:f6:be:d5:d1:4e:8b:b8:74:
f2:c6:43:d1:04:cc:2c:22:8d:80:d5:1c:fc:fd:ef:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3E:A1:FE:35:F7:F5:16:06:60:9F:E8:AC:71:DA:D1:CC:5A:44:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/844F1B288A7D11EE8711454C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.81.0/24
Signature Algorithm: sha256WithRSAEncryption
76:77:b7:40:94:f7:51:3f:84:e3:62:3a:b2:dc:43:f0:00:1f:
a2:9d:89:5b:f1:64:06:61:0d:c3:a1:5d:9d:5f:57:ec:2d:87:
2d:15:e7:c8:e1:f4:17:02:5e:93:82:f7:80:21:42:e3:e6:2d:
b5:d6:17:c9:12:90:00:2c:6c:db:d9:52:53:40:33:a1:b3:73:
86:eb:57:54:9e:3e:38:e6:82:3f:cc:c2:28:4a:9b:9f:98:fa:
9d:b8:01:ef:34:c7:dd:de:d2:a7:0c:b7:24:64:5c:ba:dd:38:
f2:de:bc:83:f0:3b:36:dc:2b:e4:c9:a8:16:e8:b3:37:3a:ff:
be:c9:fb:9a:ce:e8:5f:f5:cb:e2:06:2d:f6:30:39:1f:f9:30:
6d:73:21:e8:40:ad:20:57:ea:98:c0:ea:4d:37:13:ab:17:3f:
f9:bf:aa:65:bf:ea:8c:77:3d:6d:6b:35:81:2d:a6:0c:27:1b:
ba:bf:11:7d:24:b7:31:1c:da:8a:88:80:0f:fc:44:6c:d4:80:
7c:37:d2:47:00:0c:08:31:9d:b9:4d:15:9d:d0:35:4f:f5:cb:
9f:b8:5f:59:02:f8:ed:51:70:87:4c:59:66:4e:80:81:b6:7b:
0e:ac:6d:32:d1:97:df:42:17:ed:56:a0:1b:ed:b6:e4:7b:37:
d4:2b:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:15:13 2025 by rpki-client