Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9303071E8A8811EEBC0F8F714AD9E6FC.roa
File: 9303071E8A8811EEBC0F8F714AD9E6FC.roa (raw, json)
Hash identifier: Oy9whCWi8pzWhTB1H88Q0082NQui+GwStfqWFiSz0Ow=
Subject key identifier: 92:82:94:D9:7E:47:84:86:A5:F1:1E:4B:BB:1B:3D:AD:EE:9F:93:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5320
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9303071E8A8811EEBC0F8F714AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:16:08 +0000
ROA not before: Fri 24 Nov 2023 05:16:05 +0000
ROA not after: Tue 26 Dec 2023 05:16:05 +0000
asID: 62240
IP address blocks: 154.195.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21280 (0x5320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:16:05 2023 GMT
Not After : Dec 26 05:16:05 2023 GMT
Subject: CN=65603198-c93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:c7:0f:7f:be:61:2a:1b:5d:ec:f4:f8:71:
c5:7c:d9:fb:32:8b:8a:c6:d4:b8:66:4d:85:ad:7c:
13:55:0a:11:11:eb:d3:37:2c:e4:2f:01:1f:5d:f9:
51:b2:8f:95:b8:f6:fd:a0:c6:75:63:c9:cf:49:b5:
1a:96:0a:d8:c2:ac:13:9c:8f:33:5c:ee:36:a7:5c:
39:c8:b6:8a:f7:c0:78:87:a3:8d:a4:b4:f6:ff:d5:
d6:4c:44:34:c0:85:9f:a4:99:4d:e6:92:f4:a3:d4:
66:ba:27:c8:04:10:9e:39:84:83:8a:c6:da:d7:26:
db:45:11:64:20:ac:a5:87:ac:db:2c:4c:bf:f4:5f:
1c:20:c4:2d:f7:5e:5e:ef:68:22:86:c8:13:49:fd:
50:1d:9d:83:52:c6:7d:32:5c:a2:dc:03:2a:8a:6f:
f4:f7:49:e5:e7:c5:10:f9:ca:eb:72:5f:9e:c2:49:
e6:79:33:05:27:b4:b7:5a:47:12:22:39:78:55:ac:
20:ac:04:a3:38:7c:be:ec:77:69:5f:00:71:99:7f:
b2:81:0b:b0:e7:c9:b1:fc:c9:5a:9a:ec:67:b4:0f:
bc:5e:91:c7:b2:f7:96:71:18:c7:a4:20:52:6a:1e:
fa:3f:f6:ad:75:e1:87:b9:fd:8f:44:f7:25:9e:f5:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:82:94:D9:7E:47:84:86:A5:F1:1E:4B:BB:1B:3D:AD:EE:9F:93:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9303071E8A8811EEBC0F8F714AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.101.0/24
Signature Algorithm: sha256WithRSAEncryption
46:94:2b:77:d3:fd:00:32:a8:89:a8:db:90:5a:86:b8:1a:50:
81:0a:c7:ba:1f:ac:7c:e2:80:83:d5:58:54:c6:28:03:fe:0a:
f8:ba:66:82:71:78:5d:84:d2:79:92:b2:63:b0:a1:38:7a:a6:
b2:5e:7b:08:e6:f3:0f:e0:ee:45:0c:a5:6d:d2:64:de:b2:0c:
a1:73:45:58:ea:a4:4f:0b:23:31:a8:ef:3c:fb:bd:93:59:2f:
08:92:f1:cf:6c:08:d0:1d:b5:08:8b:7b:79:a0:9d:be:99:38:
ac:2e:db:90:08:36:57:c9:cb:2f:5a:34:25:51:7f:09:c9:1f:
90:d0:7f:21:1e:4c:93:2a:13:ae:96:9c:8d:fa:1c:cf:43:14:
da:01:4c:87:0e:b4:7c:45:61:3a:0c:8c:31:b0:e4:08:05:b4:
dd:b1:5e:ab:67:2a:4d:cd:bd:31:c1:81:d1:89:15:71:68:e1:
c6:52:87:7b:2c:01:39:f9:94:bf:6b:89:8b:f4:80:bf:61:a0:
f9:3b:00:48:99:97:ad:17:d1:39:87:80:93:7f:98:74:7c:24:
ec:a7:cb:c5:71:9c:30:c3:75:97:c3:26:29:29:5d:f1:4a:bf:
08:0a:80:b9:d3:5e:40:f9:b0:eb:bb:0f:c2:ce:13:9a:6c:7e:
de:de:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:16:11 2025 by rpki-client