Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF715E988A7C11EEB527AA494AD9E6FC.roa
File: AF715E988A7C11EEB527AA494AD9E6FC.roa (raw, json)
Hash identifier: WK8jd3ly2fr1dO5+QySjKMfDrZT3D9QKffFSUEoDKTQ=
Subject key identifier: 63:C9:13:76:26:0E:E8:EA:22:96:DC:49:31:03:08:55:F1:71:1A:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 526E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF715E988A7C11EEB527AA494AD9E6FC.roa
Signing time: Fri 24 Nov 2023 03:51:02 +0000
ROA not before: Fri 24 Nov 2023 03:50:59 +0000
ROA not after: Tue 26 Dec 2023 03:50:59 +0000
asID: 62240
IP address blocks: 154.194.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21102 (0x526e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 03:50:59 2023 GMT
Not After : Dec 26 03:50:59 2023 GMT
Subject: CN=65601da6-38da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:b4:4d:e2:23:31:dd:9f:e3:93:54:81:a3:
f1:2b:54:68:be:25:08:70:ce:1a:b3:b3:85:b7:64:
36:a5:b4:51:b5:66:2e:2f:d8:e2:45:9c:86:44:a8:
32:8a:f6:b1:67:eb:c0:42:35:56:2f:0b:94:cc:e1:
34:16:6f:59:66:37:af:ab:5e:a7:f5:be:d6:80:2a:
c5:48:cb:f4:aa:e2:ca:d2:ab:49:fa:aa:5b:0d:2b:
b8:ab:cf:51:a0:4e:60:09:32:84:cf:57:d5:ec:c2:
f5:e8:f4:0b:cf:7b:2b:22:dc:00:01:f6:86:16:bd:
9b:a9:65:32:86:86:83:fb:14:c9:13:0c:36:f4:23:
a7:cc:dc:78:7d:a1:7f:e5:6a:c5:24:73:75:89:79:
bf:d2:00:41:6c:84:5b:0c:ed:48:01:6a:d6:e9:0b:
2e:74:5e:68:46:c4:f1:41:cf:c6:20:18:8f:d9:86:
60:24:fd:4f:36:48:83:98:b4:fb:8b:71:e4:5d:09:
85:ec:f7:3f:0e:66:fd:9d:72:08:9f:9f:e2:a0:c3:
b6:79:c1:f2:41:8e:21:bb:53:d0:15:f1:95:96:b6:
f6:7d:3e:f4:d7:68:bd:e9:34:1f:39:23:24:25:10:
f5:83:91:66:69:f5:a6:da:46:b1:33:d3:19:4d:1f:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:13:76:26:0E:E8:EA:22:96:DC:49:31:03:08:55:F1:71:1A:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF715E988A7C11EEB527AA494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.85.0/24
Signature Algorithm: sha256WithRSAEncryption
46:87:0b:74:68:52:a9:2f:8b:b3:e2:91:42:60:26:fa:1b:01:
dc:80:e1:ad:9e:22:10:1b:aa:f5:e0:9d:1b:9f:f5:11:97:e1:
89:88:30:f4:71:41:77:c6:97:21:f1:83:38:a4:72:b6:33:b0:
a1:47:63:c4:e4:47:61:c6:1a:d3:36:4b:1c:78:15:ba:0a:a5:
13:5c:a2:1f:7c:fa:f9:9b:05:36:ec:40:1f:6e:03:59:62:49:
6d:12:5f:42:d0:76:bb:4a:a7:fd:57:b4:c7:1b:3b:43:37:e5:
64:3f:4e:b5:e9:ba:d5:07:d8:36:2e:8e:d0:f3:d1:0f:2e:3a:
6b:46:b2:e8:cd:97:b2:4b:01:eb:dd:cc:31:5b:f1:11:ae:75:
c9:59:66:47:b5:01:47:34:53:31:fe:d0:3b:07:5d:1e:42:22:
73:92:12:ae:39:d6:fb:1b:e0:16:b5:1d:2b:dd:69:86:35:42:
d0:61:e0:32:e0:d9:60:a4:d3:bb:a8:c1:4f:13:49:a4:6d:4d:
f0:f1:fc:ef:20:66:a0:6e:38:3e:70:bc:bc:78:d3:88:bd:79:
8d:cd:81:dc:10:f1:ee:df:15:b8:a7:5f:d6:8a:cd:9d:bf:8f:
58:1f:32:0c:f8:42:cb:ea:ac:a0:38:f7:67:44:d7:e0:99:e8:
e0:a4:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:23:13 2025 by rpki-client