Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C5761BE53C611EEA3CBAD584AD9E6FC.roa
File: 9C5761BE53C611EEA3CBAD584AD9E6FC.roa (raw, json)
Hash identifier: GJVGFhHVkA9Nu4Rsalx+MmkTf/iTLfd9W5Pz05ep5ig=
Subject key identifier: 1D:07:CC:7C:8B:16:B7:E0:A6:38:3D:60:AA:34:4A:A7:A8:9C:99:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3DCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C5761BE53C611EEA3CBAD584AD9E6FC.roa
Signing time: Fri 15 Sep 2023 12:51:39 +0000
ROA not before: Fri 15 Sep 2023 12:51:36 +0000
ROA not after: Sat 28 Oct 2023 12:51:36 +0000
asID: 9009
IP address blocks: 154.205.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15821 (0x3dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 12:51:36 2023 GMT
Not After : Oct 28 12:51:36 2023 GMT
Subject: CN=6504535b-64e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:bb:37:43:3c:e9:88:e1:1b:6a:6b:88:ca:
c4:90:8a:27:c1:22:cb:a7:2d:41:7d:1e:3c:78:36:
23:f0:5d:b3:96:51:d4:28:14:e3:ea:52:9f:c3:59:
21:a4:05:c2:d6:a3:c0:75:23:91:ea:ff:c1:31:50:
4b:ef:cc:b3:68:b6:82:b9:ef:f2:36:9c:58:fc:5a:
c8:d0:67:ae:ac:ab:13:0b:3e:a2:2f:3c:74:58:fd:
02:23:e8:d6:99:39:7f:d2:cb:07:00:04:f7:6d:f7:
e8:bf:78:d1:19:77:8e:dd:77:f4:4c:46:c2:72:47:
d8:9c:ba:e5:2a:32:88:3d:51:97:f5:d9:e2:eb:8c:
7f:a3:90:cb:de:09:4b:a6:07:7f:db:18:35:17:90:
c5:d6:f0:99:62:40:31:4d:a4:1d:10:c5:aa:39:7d:
35:15:88:27:b9:b6:96:5c:5b:53:c5:3d:99:7c:d2:
27:7a:0c:2f:bf:cf:31:5a:ab:4c:c9:22:6b:55:db:
7e:84:a8:aa:dd:0e:93:14:59:ca:ea:fa:a9:1e:75:
86:36:c1:42:04:dd:04:a4:30:b6:3d:7b:e2:69:81:
6b:7e:3f:cd:aa:c6:33:62:85:32:61:10:80:b8:51:
c4:bb:15:61:f6:f6:75:d8:8a:b3:f9:45:36:fc:03:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:07:CC:7C:8B:16:B7:E0:A6:38:3D:60:AA:34:4A:A7:A8:9C:99:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C5761BE53C611EEA3CBAD584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.169.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a4:67:16:6c:49:d4:3c:d1:3c:97:40:eb:00:e2:9a:41:7c:
77:79:d7:94:28:b2:08:88:7c:d4:55:df:ff:a1:30:11:90:10:
b2:d3:fe:2f:ee:81:d0:9c:29:1c:46:33:57:4f:4e:51:06:16:
ce:02:fe:02:b3:00:29:9f:04:c2:2a:f7:c9:8c:45:17:ff:b6:
f3:ad:69:fa:fe:52:48:c2:98:ee:66:11:33:b8:06:13:0d:4d:
40:b3:25:96:e3:c0:9d:89:de:28:2e:d0:76:1d:41:49:9e:50:
e7:37:73:b9:e6:e1:03:16:bd:34:34:91:74:cc:53:c7:6b:37:
d2:12:f9:af:05:2f:52:60:d6:5f:59:d7:0f:86:82:cd:52:26:
d1:e3:0e:d8:ac:3f:2a:eb:de:a4:53:65:f6:03:f7:35:e4:e9:
76:e1:80:b5:78:84:be:7b:2f:78:79:e5:cd:6a:80:f2:1e:8a:
e4:f5:1b:c5:f0:db:20:28:3d:8c:39:44:ac:62:09:03:b7:08:
53:08:a2:a8:3a:c6:cd:90:2b:c8:79:a3:23:54:5d:85:ae:8e:
76:a0:e8:1c:e6:34:2c:5b:bb:90:f9:fb:1f:ef:a7:3f:5f:b8:
3d:86:83:47:78:6c:05:65:c9:e5:b3:9e:d5:50:05:21:1c:0c:
f2:84:19:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:49:22 2025 by rpki-client