Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E04129E8A8C11EEB49DDE7E4AD9E6FC.roa
File: 9E04129E8A8C11EEB49DDE7E4AD9E6FC.roa (raw, json)
Hash identifier: Np8aj6uItEaQeLhw5+XVUEKo8MQ0jfPq7jIYn44NKik=
Subject key identifier: 7C:BF:B5:33:15:49:24:90:C4:51:94:33:3E:73:53:FE:26:3E:25:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5354
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E04129E8A8C11EEB49DDE7E4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:45:05 +0000
ROA not before: Fri 24 Nov 2023 05:45:01 +0000
ROA not after: Tue 26 Dec 2023 05:45:01 +0000
asID: 62240
IP address blocks: 154.195.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21332 (0x5354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:45:01 2023 GMT
Not After : Dec 26 05:45:01 2023 GMT
Subject: CN=65603861-b1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:d3:32:14:60:ce:38:35:f3:ca:eb:01:aa:
a7:f3:44:38:65:39:7b:9f:54:89:23:e9:29:4c:ec:
75:8c:48:ea:71:c4:1a:47:15:22:b2:6e:52:1d:90:
18:48:df:bf:38:34:26:70:76:16:ac:05:b9:13:56:
b3:0f:16:c1:21:b9:5c:46:ad:69:23:e6:07:fb:19:
25:e0:a2:20:3e:53:fc:55:b7:b2:64:97:da:eb:ee:
65:48:67:0e:c9:9b:26:f9:d2:45:17:c1:74:52:ee:
7c:39:49:9d:5a:c6:e0:06:e8:93:d1:6d:cc:76:1f:
75:33:1a:f2:5d:0f:6b:c6:6a:bb:47:b7:bb:a2:dc:
f5:7e:00:6b:ae:37:76:bd:30:fe:50:16:ee:6b:f5:
8e:d8:50:a1:e8:00:36:a7:3e:49:16:cb:98:d4:e1:
1e:b4:72:ba:2a:67:87:53:63:97:1c:d3:54:82:08:
af:e9:dd:7b:99:8c:96:e7:f4:3e:f6:9d:34:a4:65:
58:77:04:ca:fd:45:0b:2a:13:3d:b1:ba:bb:8b:a8:
18:47:2f:89:45:28:7d:16:b2:f3:00:bd:de:d3:c2:
19:99:f4:7a:09:2c:8a:63:c3:87:83:27:7f:69:d7:
db:6a:36:2d:a9:58:fe:69:89:de:8d:e3:2e:cf:e2:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:B5:33:15:49:24:90:C4:51:94:33:3E:73:53:FE:26:3E:25:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E04129E8A8C11EEB49DDE7E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.149.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f0:9d:6f:5a:7a:7c:29:f6:ee:4a:15:6c:5b:15:d4:53:e5:
7e:a1:39:e7:76:8d:dd:a6:22:12:bb:c7:85:a9:cf:38:0b:d3:
56:e9:74:0f:3f:c6:dc:ed:47:08:01:73:a9:db:9e:73:90:b0:
72:dd:bb:98:94:35:81:38:65:0e:3d:45:a6:ba:8c:bf:9d:ae:
36:c8:69:54:2d:bf:11:25:da:2c:29:f5:aa:74:97:09:42:b1:
6d:8b:76:b0:44:37:f5:47:41:de:fc:86:55:9b:89:66:a1:a9:
a2:63:63:b6:ca:7c:62:26:73:26:9c:40:03:90:29:09:93:01:
d4:76:5f:4c:99:ea:0d:c1:6a:38:2c:62:91:ee:2d:b4:f7:6e:
4f:d1:f4:83:cf:40:97:4a:f9:60:ce:88:c0:c6:fb:65:f2:76:
8a:b0:32:d4:bc:76:bf:01:06:88:9c:8b:2c:d1:32:f2:14:e8:
a4:13:10:88:d5:aa:de:21:fa:52:d2:70:f2:36:23:5e:20:ad:
45:29:f8:96:d1:83:a2:a3:1e:a1:43:cb:65:af:66:b6:33:7a:
d4:33:06:72:50:4f:e1:90:1b:ef:d5:ae:95:eb:66:12:ca:28:
09:fa:b7:55:cf:01:35:79:e7:fe:e9:fc:48:14:52:02:65:9d:
ab:67:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:18 2025 by rpki-client