Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1C8339084F811EEBA56D2594AD9E6FC.roa
File: A1C8339084F811EEBA56D2594AD9E6FC.roa (raw, json)
Hash identifier: Lt4ka0vDYID6b0GACo+tnBikHBvVxxeo9QJT8tAEYsU=
Subject key identifier: 1F:A1:9B:0B:C0:19:4D:0A:AD:25:33:5C:64:2C:E6:88:BB:D6:0C:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 507D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1C8339084F811EEBA56D2594AD9E6FC.roa
Signing time: Fri 17 Nov 2023 03:23:10 +0000
ROA not before: Fri 17 Nov 2023 03:23:06 +0000
ROA not after: Tue 12 Nov 2024 03:23:06 +0000
asID: 64267
IP address blocks: 154.84.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20605 (0x507d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 03:23:06 2023 GMT
Not After : Nov 12 03:23:06 2024 GMT
Subject: CN=6556dc9d-04e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:25:b0:97:51:29:92:44:53:94:79:22:11:
a5:8e:a9:f8:45:a8:3c:39:7a:bd:ee:90:37:63:d0:
bf:2e:5d:1e:cf:82:3f:6b:b6:28:b5:48:29:75:70:
f2:f9:85:08:26:f5:f9:b9:5f:55:fd:79:a6:3e:ef:
b6:4b:08:8f:25:d2:fd:d9:90:02:68:d2:5f:35:e7:
f9:f3:10:81:48:8e:86:0a:79:6a:e3:0c:e2:4e:de:
5c:97:98:31:e7:c8:ab:27:98:71:e2:a0:d1:b9:a1:
91:44:99:9e:44:a1:5f:c9:b3:95:25:1d:0b:20:73:
d5:3e:0e:c3:86:c5:41:b2:ca:c0:b9:36:af:75:af:
0c:16:d1:32:7e:26:a2:50:da:31:e1:1c:f6:ad:bb:
82:b0:94:00:51:40:cb:1e:59:32:e4:47:67:56:01:
0e:85:f6:3e:91:b9:2f:13:e8:ad:c6:a2:c4:ab:7f:
21:aa:59:64:af:3f:46:7d:e4:2d:d1:0a:64:d0:47:
19:58:71:59:a6:4c:fd:82:2d:25:1a:4e:88:e4:ad:
d2:82:1b:46:da:83:3b:79:48:b7:a6:d5:05:84:18:
22:c0:c7:2c:95:d2:34:7e:a2:75:a2:9d:d6:70:a5:
f6:fb:d3:e8:97:ee:83:c6:6e:9b:d2:5d:3b:ed:58:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A1:9B:0B:C0:19:4D:0A:AD:25:33:5C:64:2C:E6:88:BB:D6:0C:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1C8339084F811EEBA56D2594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:51:c8:e4:32:ec:f1:1f:14:93:ac:73:f3:23:d5:be:97:15:
8b:98:3f:7d:b0:eb:aa:ff:a8:f6:57:a0:3e:2e:71:a7:52:18:
28:db:45:48:1e:ea:ef:70:6c:58:16:23:b4:7d:97:01:f8:f8:
f5:cc:a5:d8:2b:a6:75:7f:93:aa:ae:6a:30:87:96:52:a9:59:
1c:96:18:27:36:0e:01:a3:51:80:fb:44:ab:87:57:06:6c:1f:
35:08:30:0c:a1:bd:c8:b4:89:f1:81:4f:a4:e0:ca:52:24:e1:
a3:7f:af:05:5a:ec:0a:03:05:c0:85:16:87:e5:c2:b1:59:cb:
d2:31:5f:44:ac:1b:80:44:11:54:7c:f1:a8:a1:55:91:05:e9:
3e:64:f0:b9:6c:36:9d:97:6d:00:c8:9b:41:8e:6a:ef:97:0c:
b1:bb:15:84:cb:a5:ab:07:67:a1:2d:85:11:ae:95:fd:b1:d4:
58:a8:f9:82:2d:49:98:79:f7:35:f3:b5:a8:52:fb:e2:a2:06:
6a:ce:94:db:3c:65:a8:19:88:36:7d:b3:6b:89:5b:cc:b5:d0:
4e:f3:19:68:78:1f:52:20:90:ec:2b:b4:c9:eb:54:79:74:07:
bd:61:b2:92:94:1c:21:52:b1:ce:b5:e3:88:35:7f:bb:7e:2e:
bd:e3:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:41:08 2025 by rpki-client