Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94AC0DD08A9811EEA7A592274AD9E6FC.roa
File: 94AC0DD08A9811EEA7A592274AD9E6FC.roa (raw, json)
Hash identifier: 5oxUi4u4vGLvkS4QgV4UdqV364ke+7S5HgXppeUhO0s=
Subject key identifier: 16:A1:51:E6:26:1F:32:1D:4C:DE:40:41:81:8B:8B:26:09:2D:C0:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5438
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94AC0DD08A9811EEA7A592274AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:10:43 +0000
ROA not before: Fri 24 Nov 2023 07:10:40 +0000
ROA not after: Tue 26 Dec 2023 07:10:40 +0000
asID: 62240
IP address blocks: 154.195.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21560 (0x5438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:10:40 2023 GMT
Not After : Dec 26 07:10:40 2023 GMT
Subject: CN=65604c73-28fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:ac:5a:c2:f9:09:03:85:70:1b:54:24:b0:
84:b1:40:37:62:25:5b:34:6a:36:d3:0d:e0:7d:66:
e7:17:f7:be:01:3d:61:20:da:4a:08:ee:f3:87:3e:
a3:10:66:4e:ba:9c:cd:5e:7a:2a:a2:4d:9e:2f:71:
81:bf:80:5c:bc:d0:3b:7b:12:1d:dd:a3:59:c1:05:
5e:9f:49:48:18:1e:98:26:4b:0f:37:e4:1f:fa:91:
7f:ea:71:82:cd:68:84:0c:71:54:16:08:86:23:eb:
95:34:c0:d2:a0:f3:ed:01:1d:c9:8b:24:e0:1c:4a:
c8:46:41:ae:72:dc:c8:15:fd:b9:2f:a1:ba:42:6e:
c4:43:54:60:76:ff:47:0c:e2:f9:df:df:be:79:c8:
aa:76:b7:85:e5:f6:72:49:64:7d:52:5e:03:69:dc:
31:71:28:a3:94:ba:08:60:98:82:61:e5:19:9b:0b:
83:c4:ac:9c:f8:e7:6f:63:8b:da:6a:80:d9:8b:a2:
71:d0:d1:ea:2a:af:c4:87:ca:05:f7:8b:de:df:ec:
8f:27:52:5f:37:32:42:f5:34:14:11:83:d1:b5:d4:
e1:c0:26:1a:8b:b6:88:dd:ee:55:e0:36:26:be:66:
42:de:26:26:30:59:0f:47:09:3b:17:be:09:51:26:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:51:E6:26:1F:32:1D:4C:DE:40:41:81:8B:8B:26:09:2D:C0:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94AC0DD08A9811EEA7A592274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5b:7a:e5:ac:ac:fe:e5:f2:c0:fb:4d:49:1b:2d:67:58:07:
40:9b:06:ae:c8:cf:d4:aa:b3:1d:c9:c0:fb:63:8a:e1:d8:d5:
08:fe:27:11:f2:21:3a:2e:24:22:1d:2f:9e:c7:2f:b8:1f:06:
fa:b2:9e:08:77:72:db:25:c8:a4:04:62:d6:76:9b:37:92:0d:
00:8d:2e:77:62:aa:75:18:c6:86:52:09:53:c0:09:e8:44:5f:
f5:0d:37:ab:d7:8a:ac:52:4c:70:44:0b:cd:ba:89:95:dd:14:
09:dd:82:80:03:65:db:f2:24:a7:ab:2d:7c:c7:3b:8c:54:c9:
19:c2:1e:3e:2d:5e:0e:d7:25:ff:d8:22:c5:20:46:cb:e5:f7:
61:f1:cc:cf:7a:33:56:f6:02:e3:ae:a8:bc:03:0b:e1:bf:84:
69:2e:27:a5:84:c3:b6:e5:99:c0:64:4c:95:8b:58:7d:2c:12:
7b:e1:70:50:2c:f4:d8:f0:48:67:80:c9:65:32:28:af:67:c1:
9d:5b:da:ff:52:cd:55:3a:2b:61:39:32:0d:99:fb:c7:69:eb:
b2:02:af:7a:23:71:c3:44:cb:be:5c:d1:45:15:41:71:53:11:
79:9d:ad:52:bf:2f:1c:ea:9a:28:14:30:cc:50:98:f3:9e:99:
f2:13:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:01:54 2025 by rpki-client