Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93BF1FF68A8F11EEA58883884AD9E6FC.roa
File: 93BF1FF68A8F11EEA58883884AD9E6FC.roa (raw, json)
Hash identifier: 8CrWkWUowhnyAXeeE+pxgYcKCN5gVYhI3HN9kPwEco0=
Subject key identifier: AB:36:D5:BA:1B:EF:19:43:CB:1D:7C:41:5B:F6:5F:D3:E7:FE:D8:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5389
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93BF1FF68A8F11EEA58883884AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:06:16 +0000
ROA not before: Fri 24 Nov 2023 06:06:13 +0000
ROA not after: Tue 26 Dec 2023 06:06:13 +0000
asID: 62240
IP address blocks: 154.195.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21385 (0x5389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:06:13 2023 GMT
Not After : Dec 26 06:06:13 2023 GMT
Subject: CN=65603d58-7452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:d1:c5:99:16:f4:57:33:2d:ee:f8:d2:f6:
ea:ca:e9:3c:50:da:e1:b1:da:30:d1:45:0a:46:20:
76:c8:7f:77:1c:87:4f:f8:62:fe:00:ed:e1:06:ac:
5a:00:b8:a9:b4:4c:20:2c:52:64:6e:5a:53:4e:af:
3e:94:f0:1a:32:93:5b:98:5b:d1:2a:38:05:bb:42:
86:85:28:37:bb:62:f2:ab:a5:5b:50:9f:f3:50:2c:
1a:6b:b1:a4:55:de:20:bd:c4:a9:af:d8:ec:00:5f:
84:e2:91:87:0b:25:fb:5c:13:17:ba:69:7c:3f:5d:
49:14:50:47:74:95:4f:b3:d8:a6:02:55:81:4b:45:
5b:e0:cd:a0:09:20:0a:4a:b3:25:61:91:c7:ab:d6:
71:9f:8f:f0:f2:11:c5:fd:3f:89:32:a3:09:12:1a:
e3:78:e2:2e:31:e0:9b:50:c4:97:c7:d5:6e:34:bd:
a2:7a:04:60:cd:93:e8:1f:06:b3:31:00:53:27:66:
c1:3e:cb:5b:b9:97:4d:1b:3c:89:4b:8e:99:57:cb:
0a:50:fc:d0:08:0c:80:31:65:b7:67:8e:81:65:05:
23:bb:ce:01:fb:ae:c7:5b:3d:83:6b:06:81:89:1e:
dc:e7:50:e3:dc:5f:8b:26:c2:06:5c:41:81:12:80:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:D5:BA:1B:EF:19:43:CB:1D:7C:41:5B:F6:5F:D3:E7:FE:D8:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93BF1FF68A8F11EEA58883884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.29.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1c:d4:e7:81:68:2f:8c:fb:af:8f:38:fc:46:1c:f0:f0:13:
ca:f2:77:55:bf:89:df:48:42:b5:a1:90:70:d9:fa:92:5d:86:
d7:48:1b:94:8d:aa:c8:16:f2:6a:bf:b2:6d:a4:63:cb:12:67:
54:32:aa:da:03:f5:45:b2:8c:ad:80:eb:2e:a9:bd:ac:4f:3b:
23:fd:bc:44:13:c4:c4:b5:f2:b9:fe:c5:38:fa:52:28:ed:63:
ae:c1:1b:87:5a:e6:1b:43:95:ce:15:21:ee:93:5f:26:02:11:
17:36:17:ab:e1:5e:72:59:57:df:f2:51:1b:ff:6d:21:88:ca:
0d:10:df:42:23:f5:43:cc:b9:84:43:f5:42:54:5d:b8:67:10:
5a:93:b1:11:89:1b:f8:5a:47:a2:ce:dd:25:11:23:d2:12:27:
cb:21:87:8d:1f:dc:24:1c:64:15:5f:0d:9b:39:c0:eb:1a:07:
75:cc:24:85:45:f8:0c:64:ca:f2:a9:34:2a:5d:a5:28:d3:98:
98:f8:3a:5f:7a:b4:e4:68:20:25:01:30:9d:46:8e:2b:a1:96:
58:2e:70:a6:85:d9:b6:8c:75:3c:23:02:ec:3a:88:c8:8b:69:
2a:ac:b6:66:00:f0:13:66:de:06:a8:3a:d5:3a:ad:71:05:a9:
a7:d7:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:59 2025 by rpki-client