Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85461A528A9311EEB57930174AD9E6FC.roa
File: 85461A528A9311EEB57930174AD9E6FC.roa (raw, json)
Hash identifier: Po97PEY9sWbu9T/cVOujGaqq7RNm+hJnrtTnyppNHeA=
Subject key identifier: AB:69:86:87:FC:52:66:79:4C:16:9E:F4:13:86:C7:8A:3A:97:3B:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 53CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85461A528A9311EEB57930174AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:34:30 +0000
ROA not before: Fri 24 Nov 2023 06:34:26 +0000
ROA not after: Tue 26 Dec 2023 06:34:26 +0000
asID: 62240
IP address blocks: 154.195.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21453 (0x53cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:34:26 2023 GMT
Not After : Dec 26 06:34:26 2023 GMT
Subject: CN=656043f5-04c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:69:52:0d:a1:b5:cc:1e:80:02:72:99:85:
70:5a:a3:e0:33:52:dd:be:fc:12:df:c6:5a:c7:6c:
d1:76:af:93:6f:5b:60:51:0f:62:9d:05:c2:8c:b6:
40:04:09:7c:94:4d:ff:95:ab:59:0b:60:dd:e4:9c:
f0:a2:30:88:be:5e:d8:3d:b9:79:c0:ea:9e:7d:80:
c2:e3:c1:c7:1f:30:ee:3e:c3:af:5c:b5:cd:c2:ee:
a9:4d:f2:a6:ef:60:0f:3c:e9:be:93:8e:12:51:61:
34:1e:a9:a6:0c:8d:61:c1:66:81:f9:9d:dc:b5:22:
c1:d5:cc:65:28:6f:1b:b6:aa:8b:47:0b:1c:6c:81:
4b:c7:6f:83:84:24:99:3c:52:61:42:34:a4:8f:6f:
4f:c5:71:f9:fe:78:68:de:63:6f:3d:46:bc:c0:e3:
28:70:ea:7b:92:a2:95:22:c8:a4:49:d7:80:b2:f2:
17:95:75:cc:48:04:e6:c1:d1:9f:67:1f:e9:d1:17:
b1:75:f8:2f:51:53:31:8d:54:f1:c0:38:c2:5a:b8:
b5:61:4e:1b:7f:5e:ad:1d:93:f4:17:43:71:30:93:
99:a2:0c:56:4a:d3:14:fd:56:f1:31:1c:87:c4:19:
04:d7:df:0f:39:29:6f:bc:40:f8:ce:d4:8e:d4:44:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:69:86:87:FC:52:66:79:4C:16:9E:F4:13:86:C7:8A:3A:97:3B:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85461A528A9311EEB57930174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:de:11:48:f7:cb:df:71:2c:89:4f:42:8b:31:b5:cd:27:7d:
b6:e3:a8:26:a7:bc:1b:db:66:52:16:db:29:d8:28:4c:f9:76:
86:e2:72:19:47:03:d6:4e:b0:97:fa:45:3b:57:40:f5:15:12:
55:d9:93:95:5e:67:c7:33:47:14:43:49:59:f4:15:28:c8:c9:
30:73:75:8f:31:b4:64:64:51:41:4b:39:41:fe:c8:0c:7f:76:
9d:f8:27:85:f2:ed:62:fc:ed:e7:44:a7:ac:73:59:74:4c:a5:
1b:51:48:56:8f:02:8f:2b:d3:c6:e6:dc:90:c0:b6:06:c2:29:
16:73:82:ec:55:7d:66:0f:93:42:da:ce:80:00:19:11:8e:02:
e1:37:9f:92:4d:fe:6a:2e:9d:2a:85:37:ad:39:f5:07:a0:b5:
3b:d0:31:71:2a:06:7f:aa:fa:cb:9c:d6:0b:bf:bf:79:47:66:
fa:6c:20:a9:72:82:db:51:cb:9c:61:bd:83:d2:cb:0b:64:7f:
e5:fc:07:94:c3:af:0c:4b:ea:84:af:f6:df:bf:7a:4c:27:4b:
c7:10:21:a8:ee:11:0f:25:fb:e9:c3:5d:1c:52:be:a1:e4:fb:
42:08:76:e1:4c:46:50:88:08:52:3c:33:10:7b:a8:9e:89:63:
57:b6:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:23:12 2025 by rpki-client