Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E2C5288CDE11EEB468A6674AD9E6FC.roa
File: 92E2C5288CDE11EEB468A6674AD9E6FC.roa (raw, json)
Hash identifier: O/khSPvnxrFY0JSCjL8yWP61ljOgQMc79nF8lLFRhGc=
Subject key identifier: 83:20:56:50:B9:EB:E2:B8:E1:1D:1F:97:A1:C4:7D:01:DD:0F:1D:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5510
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E2C5288CDE11EEB468A6674AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:36:47 +0000
ROA not before: Mon 27 Nov 2023 04:36:44 +0000
ROA not after: Tue 26 Dec 2023 04:36:44 +0000
asID: 62240
IP address blocks: 154.195.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21776 (0x5510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:36:44 2023 GMT
Not After : Dec 26 04:36:44 2023 GMT
Subject: CN=65641cdf-705f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:e6:4e:d7:dc:eb:02:f2:a4:52:f0:e4:84:
83:6a:9f:dd:eb:2b:22:02:01:7a:de:e5:41:24:0a:
1e:89:7c:c0:49:b4:ee:5b:46:d5:d1:f4:22:11:4f:
79:2b:eb:24:a0:fc:2a:6e:b3:cf:44:ec:83:69:9b:
13:92:32:ba:cc:1a:5b:06:8c:da:f6:7a:c8:7b:2c:
65:59:c7:dd:67:1b:c6:95:07:3f:a4:81:6a:0c:68:
6d:1f:02:5e:9c:3c:25:29:5f:fe:78:66:ba:5c:5e:
79:10:0b:95:ef:10:f4:35:23:74:f2:93:0d:6f:14:
ba:e3:dc:43:2e:29:b8:84:01:f9:2c:0f:0a:bf:60:
33:8b:71:65:0c:45:ea:01:d9:d0:70:24:55:10:3c:
3b:7e:1a:c3:fc:ef:4b:c5:cc:ac:71:f2:95:b8:c0:
23:a5:cd:dc:cf:26:00:26:51:d4:d2:33:2f:ac:02:
ef:4f:aa:f2:68:af:12:28:0c:5c:36:05:ed:94:49:
c8:98:3d:ac:07:68:89:0f:00:7b:8d:67:cf:e4:b2:
15:fe:44:5e:f9:be:70:43:ec:f5:e3:7a:b8:ad:6e:
e7:22:c9:a4:52:4d:f3:97:4a:45:be:a0:c6:f7:f5:
e9:38:dd:ba:b3:6b:b9:14:72:a5:4d:77:ab:c2:79:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:56:50:B9:EB:E2:B8:E1:1D:1F:97:A1:C4:7D:01:DD:0F:1D:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E2C5288CDE11EEB468A6674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.124.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:4f:2d:a8:82:5f:93:2a:29:f4:f4:6f:6c:e4:97:76:70:16:
4e:12:31:58:b2:3f:9f:e0:f9:6d:c0:f9:80:42:78:b9:c4:71:
b9:b6:60:1a:5b:58:e6:23:19:e3:d4:08:90:05:b2:ce:b8:ba:
f9:3a:fd:6a:12:a3:c2:80:12:e4:f5:c7:6f:cf:58:47:57:12:
71:eb:58:fc:18:b6:d4:e7:ea:8d:26:2f:4c:93:9d:d2:57:30:
ca:1c:76:a6:3e:d5:c8:58:95:b9:bc:e1:29:1a:06:3c:af:60:
61:c0:eb:16:c2:50:bf:2d:c6:c9:61:eb:67:14:7e:b7:3c:b7:
34:d5:42:37:d0:78:2a:ad:50:ca:c6:fc:40:d0:6e:a2:57:59:
44:3d:c1:ac:51:08:f7:1c:47:5d:b8:9f:ec:90:14:10:79:f7:
75:f3:17:16:0d:d8:12:5a:e4:6c:ae:91:be:e4:e1:4e:a5:b7:
d1:37:fc:29:93:25:c1:60:4f:3d:ce:32:b3:26:91:f7:7d:d4:
95:0e:8c:0f:a0:dd:27:2f:76:e1:5b:d3:cb:50:73:4e:f1:52:
af:50:46:7e:65:40:36:02:8b:ff:40:75:b2:d3:7f:82:fa:0e:
ae:fb:46:71:22:ae:80:43:bd:74:25:d1:11:ba:91:9a:46:2c:
15:2e:78:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:53:18 2025 by rpki-client