Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/995560128A8311EEBC0740614AD9E6FC.roa
File: 995560128A8311EEBC0740614AD9E6FC.roa (raw, json)
Hash identifier: zhccrBjQ54YqYopyiTQTP+NC2iQBLk2418Rz8eaKFmg=
Subject key identifier: C5:9C:8D:DF:63:3D:F6:14:A7:28:3C:36:EF:3A:21:D1:F2:FC:41:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/995560128A8311EEBC0740614AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:40:31 +0000
ROA not before: Fri 24 Nov 2023 04:40:28 +0000
ROA not after: Tue 26 Dec 2023 04:40:28 +0000
asID: 62240
IP address blocks: 154.195.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21222 (0x52e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:40:28 2023 GMT
Not After : Dec 26 04:40:28 2023 GMT
Subject: CN=6560293f-2c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:e1:13:3b:50:40:9e:b7:56:45:1e:5c:5d:
37:38:4a:10:31:c0:b8:b0:78:b2:b2:d5:a7:eb:da:
3e:15:5d:29:97:1c:62:4c:68:61:4f:82:31:41:17:
9d:6c:0f:b2:c5:6e:4d:46:da:ad:ff:48:d9:b8:dd:
e4:0e:e1:4e:a4:62:46:75:50:d8:71:52:8a:9b:d9:
0b:00:56:6e:fa:88:8a:47:97:d4:d4:70:51:60:d2:
b9:1a:03:30:5e:79:f3:3f:e0:86:aa:f5:ae:18:08:
bc:38:19:25:31:6b:53:0e:0f:99:e2:31:c7:54:c9:
d9:4f:27:5a:15:b4:91:e0:85:aa:35:69:13:18:2f:
92:73:87:26:6b:91:4d:04:8a:2c:51:72:6a:42:e1:
b8:c9:63:1f:5e:1d:5c:c9:24:b2:0e:c0:78:a8:3f:
56:f7:9f:f4:e1:82:54:37:e2:a7:39:1e:93:c5:b1:
c4:39:ef:64:86:be:0e:81:84:52:5d:b2:b4:95:cc:
2b:60:29:26:41:21:a2:0e:21:5b:62:9f:d7:5c:2b:
06:89:a1:e8:b4:19:b3:6f:a9:94:34:1b:5e:f0:c7:
b8:77:c7:09:b8:17:0f:fd:78:27:92:9a:cb:93:5c:
ca:7b:fe:bd:fa:6d:1e:e3:d4:ba:0b:e4:e9:42:92:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9C:8D:DF:63:3D:F6:14:A7:28:3C:36:EF:3A:21:D1:F2:FC:41:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/995560128A8311EEBC0740614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:61:ce:d4:7c:fd:8e:0b:38:cc:27:ce:d4:22:f4:65:dc:5c:
b9:8a:17:ed:4e:c4:48:21:df:20:8c:0e:c5:4a:84:c7:5c:d1:
84:d9:6d:ef:d0:8c:81:19:19:fb:04:69:49:62:e0:0e:f8:6e:
c6:91:17:b1:25:ec:c0:49:c6:3a:63:97:96:b9:e3:3d:a5:65:
bf:61:c1:93:a0:6f:45:5a:02:b4:0f:c4:99:c4:79:80:78:a2:
2f:23:a4:f7:83:6f:c7:15:1c:c7:d0:5b:3e:9d:f0:ba:3a:60:
94:05:bd:da:7a:28:04:d5:3f:1f:e6:48:e2:f8:10:0d:10:c7:
1f:80:1c:78:21:90:18:89:b6:30:71:b6:f3:4c:cd:e3:73:68:
ca:14:ee:b6:df:7b:dd:19:2a:8a:2a:e8:9f:50:ac:84:f7:bd:
bc:ec:76:65:aa:9a:38:0e:c9:46:d3:61:d7:ee:8c:5d:72:f4:
62:bc:07:02:02:80:c0:4a:79:48:af:e6:7d:07:d3:8c:f6:99:
36:98:71:0e:5f:8f:5f:50:c8:dc:68:c5:eb:44:c4:81:fa:54:
06:54:7f:47:a5:2f:67:e2:65:d4:4a:d1:d2:a1:58:28:50:3b:
be:a7:7c:e3:3c:e4:e6:02:93:3f:30:c3:5f:54:6d:c2:a6:3e:
16:ff:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:31:57 2025 by rpki-client