Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99D131FC8CDF11EE80EE226B4AD9E6FC.roa
File: 99D131FC8CDF11EE80EE226B4AD9E6FC.roa (raw, json)
Hash identifier: K1VLx+7lDCgmOtS/yjYNUEZ7z845kOQvKvw/rr5Qhhc=
Subject key identifier: 30:D8:D3:AE:FA:58:99:A4:F8:D2:C9:6D:3E:66:A9:C9:D1:7E:0C:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5527
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99D131FC8CDF11EE80EE226B4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:44:08 +0000
ROA not before: Mon 27 Nov 2023 04:44:05 +0000
ROA not after: Thu 28 Dec 2023 04:44:05 +0000
asID: 211826
IP address blocks: 154.197.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21799 (0x5527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:44:05 2023 GMT
Not After : Dec 28 04:44:05 2023 GMT
Subject: CN=65641e98-e173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9c:25:40:80:b0:b2:d9:5e:b3:b6:de:bd:05:
3c:73:31:09:03:1a:64:21:fd:ec:73:17:4d:07:be:
63:4e:46:8d:7c:40:28:41:77:ae:9c:69:b5:be:6e:
ee:70:d9:3c:db:f3:fa:21:47:bc:e0:bf:f2:c7:3f:
9c:dd:72:20:1e:69:d4:0d:27:c9:46:55:37:6a:ce:
09:1a:73:71:34:90:b0:bd:38:f0:ed:04:20:3e:ac:
e0:3e:6f:a2:2e:a6:12:ac:f5:41:1b:0a:c8:5c:de:
09:d6:84:0c:09:39:34:38:41:d7:09:75:3d:5e:12:
51:59:fb:7b:96:2b:d7:b8:ad:b9:76:ad:ce:46:ec:
11:93:c3:be:c2:cd:53:96:1f:4a:3a:06:fa:6c:f7:
c8:94:26:6b:9d:93:fd:0f:61:c6:5b:2d:31:a6:bf:
57:89:10:7b:46:01:14:25:dd:85:b5:6b:02:52:ba:
25:a8:05:d3:d9:ca:25:56:9b:f0:d6:eb:d9:78:2d:
61:61:cc:87:cc:c0:98:56:35:84:b6:e4:7e:8d:37:
20:2e:91:e4:93:66:04:25:10:86:83:0e:40:57:7b:
a7:b0:bf:2c:66:d8:82:6d:5e:74:34:4f:d9:81:64:
ad:b6:e9:82:f2:37:3c:1d:4f:c4:76:86:3f:ed:d0:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D8:D3:AE:FA:58:99:A4:F8:D2:C9:6D:3E:66:A9:C9:D1:7E:0C:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99D131FC8CDF11EE80EE226B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3e:4b:09:11:3b:3f:71:6b:13:a4:fd:bf:a8:67:49:ba:5e:
93:a6:15:d5:98:77:88:f8:a8:35:21:c5:d2:c4:a2:43:7b:61:
dd:70:5f:c3:48:64:3c:be:9e:84:5d:b5:7a:a1:db:f2:7a:31:
e3:19:2d:43:01:88:03:bc:90:48:96:a1:62:11:95:0c:40:30:
7c:f4:3e:d1:eb:de:29:92:bf:d5:e9:2a:e6:c2:6c:d5:89:b5:
6b:4b:96:bf:eb:7a:b8:37:44:bc:c0:da:ce:8e:d8:00:62:86:
6b:d7:20:57:f5:fc:75:87:ef:c7:87:34:7e:b1:51:c8:93:64:
95:30:d5:c2:c0:3e:33:47:df:cf:4f:50:6c:16:a5:f9:1b:86:
8e:ef:cd:ad:80:cd:fd:06:68:96:3e:03:53:69:4c:23:6a:73:
f5:83:07:53:64:dd:3e:7e:e2:0e:38:16:53:e2:16:3f:12:66:
20:11:f6:57:96:4b:df:18:b7:73:e7:3f:f5:89:58:70:6f:96:
8d:32:b8:0d:85:b3:2b:41:92:9a:fe:f9:37:fb:22:42:af:39:
22:89:da:8b:8a:25:db:1e:93:f3:e5:b7:16:f7:86:a7:06:f4:
c5:e2:46:71:57:a8:ba:8f:d4:4d:7a:5d:54:91:cc:bd:7b:c3:
17:cf:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:59 2025 by rpki-client