Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86D8898E8A8611EE92B2E46A4AD9E6FC.roa
File: 86D8898E8A8611EE92B2E46A4AD9E6FC.roa (raw, json)
Hash identifier: u+otb/XPeuEM5ZbY5+a6Cazufv2l5ENDCXBrhs1IVMs=
Subject key identifier: 89:19:3D:0F:5A:AA:B6:BD:EA:60:DB:F6:2E:99:7F:4B:6F:BF:FA:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5308
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86D8898E8A8611EE92B2E46A4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:01:29 +0000
ROA not before: Fri 24 Nov 2023 05:01:25 +0000
ROA not after: Tue 26 Dec 2023 05:01:25 +0000
asID: 62240
IP address blocks: 154.195.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21256 (0x5308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:01:25 2023 GMT
Not After : Dec 26 05:01:25 2023 GMT
Subject: CN=65602e29-1beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b2:ff:64:18:30:4b:1d:14:99:15:fe:df:b4:
02:7a:6c:dc:54:60:b2:33:11:26:27:41:47:9b:38:
bc:31:2d:92:cf:30:4e:2e:20:30:f9:cd:e3:2a:16:
2f:1f:81:4b:12:2d:19:4f:5b:9b:f4:a0:01:73:98:
55:33:6c:e8:15:13:ab:ee:98:98:03:32:7c:65:6a:
e0:69:1b:a5:9f:52:e7:e5:ae:8b:a3:59:52:ec:29:
48:4f:ed:41:8d:25:ee:37:45:4c:7e:34:75:9f:92:
ef:9f:0d:cd:56:cc:80:6d:66:a4:a8:d8:1a:6e:38:
a6:aa:ce:47:78:da:a1:2a:79:70:32:d3:9d:7c:bd:
09:30:a9:21:ea:0a:26:6e:ab:ea:ac:93:06:6a:12:
a8:63:a0:10:27:8b:0f:5c:53:ee:bf:2f:3a:07:94:
c7:09:7f:5a:05:f0:53:65:32:c7:84:a1:7b:e5:41:
b9:10:43:bc:90:ea:51:67:3d:4e:80:4a:56:5f:93:
42:12:74:e9:2a:50:4c:19:33:c2:9b:86:0b:0c:33:
d0:7d:ad:3f:43:9b:cd:f6:d3:03:28:e2:b9:a9:05:
62:45:7b:2a:c5:c5:82:4a:54:3b:c4:16:02:ce:8c:
fa:3d:a4:30:29:82:1d:38:9e:b4:f3:a5:4a:a0:54:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:19:3D:0F:5A:AA:B6:BD:EA:60:DB:F6:2E:99:7F:4B:6F:BF:FA:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86D8898E8A8611EE92B2E46A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.156.0/24
Signature Algorithm: sha256WithRSAEncryption
85:13:2f:d1:33:bf:88:80:dc:dd:62:ec:96:f9:ad:70:36:4b:
b0:13:b9:23:e2:c2:4c:a9:02:0a:35:21:c1:3f:40:7d:b2:1f:
f1:06:41:75:e4:01:5f:47:76:92:1e:d5:8c:cb:b8:9e:2c:01:
a4:6a:a9:80:52:3f:42:da:15:48:41:8e:53:b7:45:6c:ff:40:
e4:f6:9d:f0:d0:81:c5:7b:cd:ec:d7:6c:be:1b:52:5f:ca:4e:
1e:cf:d1:01:12:94:55:2b:8c:a5:cf:98:57:41:c4:c6:ea:28:
69:9c:bc:14:3f:32:1e:66:18:7b:db:c9:41:7d:45:a8:d9:92:
aa:f4:a2:a5:c6:65:74:52:ea:06:42:9a:74:0e:d8:57:3d:52:
62:c5:f6:c7:ee:2e:00:e8:c9:29:17:96:b2:ff:7a:49:f6:b4:
1b:a7:f6:bb:cf:2f:94:67:8f:e9:77:5e:a2:f1:a6:44:86:29:
82:1a:57:ff:25:f0:82:53:9f:48:04:b5:88:e8:73:46:2c:66:
f8:1f:27:37:8a:f8:76:5f:a1:15:72:86:0f:b5:19:74:56:06:
1a:14:ed:7c:1e:04:9c:10:ff:0b:14:f7:e6:cc:7f:8e:85:96:
4b:c3:de:3d:d6:cb:a5:1a:b0:97:f1:5d:d9:0e:c7:47:8b:06:
f9:8e:7c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:00:16 2025 by rpki-client