Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B19403A68A8611EEA1B8656B4AD9E6FC.roa
File: B19403A68A8611EEA1B8656B4AD9E6FC.roa (raw, json)
Hash identifier: FCy9RQXR/jfAXy/sWAhtmtiZ92TwHn9IaNrQUcZ8Dn4=
Subject key identifier: E2:C2:B3:8A:C3:A7:A6:41:5A:EA:D8:DF:00:E0:52:30:E1:DE:B8:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 530A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B19403A68A8611EEA1B8656B4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:02:41 +0000
ROA not before: Fri 24 Nov 2023 05:02:37 +0000
ROA not after: Tue 26 Dec 2023 05:02:37 +0000
asID: 62240
IP address blocks: 154.194.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21258 (0x530a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:02:37 2023 GMT
Not After : Dec 26 05:02:37 2023 GMT
Subject: CN=65602e70-667c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:55:df:51:29:7c:72:3a:f3:08:38:3e:2d:
45:ac:61:77:b3:ce:45:12:20:47:ca:21:b4:cf:03:
94:81:61:88:21:e4:28:c3:44:da:5e:69:20:b8:6b:
fe:48:c8:e0:6d:a8:9b:17:4e:90:85:73:c8:22:bb:
44:23:b5:ea:19:71:7b:5c:cb:63:10:09:f8:e3:7b:
9b:5a:c5:e8:95:1a:40:c2:98:46:7d:d6:a2:be:c6:
c7:70:5c:f5:2a:38:3e:10:a1:cf:d2:a6:a2:2b:01:
54:7b:f1:8b:27:dd:d5:da:09:9e:d5:5a:07:70:9c:
dd:9a:db:a4:d5:db:39:1d:e5:fc:6d:73:ea:64:e1:
eb:44:2b:7b:a0:5c:bc:ae:5a:4b:f6:74:5e:ff:c7:
10:8a:90:4c:28:97:08:93:b7:c0:27:3d:e0:18:aa:
ae:94:5a:65:87:e4:ce:b8:6e:36:9f:49:c3:91:d2:
e8:a3:cf:b8:6f:c0:cf:db:69:7f:f2:2f:43:95:73:
c8:0a:9d:a5:29:a3:98:6f:ca:70:f8:4f:36:7d:78:
7b:a5:19:5e:a2:4a:8f:f3:af:74:e1:9f:96:c5:47:
6a:36:d3:34:b6:c7:67:a7:96:3f:c9:c7:1f:73:44:
58:a9:85:ea:72:b8:db:1f:13:b7:8e:e1:ec:4f:39:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C2:B3:8A:C3:A7:A6:41:5A:EA:D8:DF:00:E0:52:30:E1:DE:B8:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B19403A68A8611EEA1B8656B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.71.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1e:ef:41:d6:9a:a7:e5:77:83:af:d5:f4:97:f4:fe:ab:64:
1b:db:02:64:ac:25:76:4a:8c:1b:d3:94:68:69:b3:56:f2:c4:
41:3b:ca:dc:b3:8f:55:fe:c9:93:de:ce:83:63:61:ea:ab:31:
a5:35:71:b2:1a:97:55:26:8d:ba:f7:92:a1:9a:15:c0:e0:fe:
b5:af:90:aa:5b:75:d1:02:73:8d:44:b6:31:68:e3:a8:ff:33:
c5:47:41:47:07:41:e7:c3:3b:cf:2c:3f:30:04:75:66:3a:aa:
4e:37:5b:3b:d3:20:80:f3:f5:93:ac:88:d2:81:5d:3c:56:75:
4f:b3:65:73:37:4b:49:0a:32:78:d4:24:4e:64:2f:29:57:75:
01:ad:32:d1:9a:b1:7c:cf:2b:23:61:c2:95:4e:83:f9:f7:71:
04:bf:0d:0b:f9:7b:13:ef:6f:11:18:aa:2e:14:e5:54:15:75:
c6:30:9c:9d:51:6f:ef:d3:71:10:1b:1e:0b:19:6f:f0:41:a0:
c9:6a:50:17:16:08:5c:fc:7d:86:85:2a:0a:50:06:1e:0f:63:
05:0e:2f:b4:3b:25:44:f4:38:e2:ac:b5:98:81:74:d3:77:e5:
21:e3:54:28:fe:6b:51:60:c6:e5:72:88:1f:20:56:2c:70:40:
78:d8:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:29:30 2025 by rpki-client