Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B36ADF048CDB11EE8F21775E4AD9E6FC.roa
File: B36ADF048CDB11EE8F21775E4AD9E6FC.roa (raw, json)
Hash identifier: Kh0aFhEFD5eur2i7EhGK6+5/t5nTRfWKIZH8uOh4EoA=
Subject key identifier: 17:AB:FD:A2:BD:0A:90:B3:02:C5:05:C3:1E:2D:37:36:D3:B9:8B:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B36ADF048CDB11EE8F21775E4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:16:13 +0000
ROA not before: Mon 27 Nov 2023 04:16:10 +0000
ROA not after: Tue 26 Dec 2023 04:16:10 +0000
asID: 62240
IP address blocks: 154.196.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21706 (0x54ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:16:10 2023 GMT
Not After : Dec 26 04:16:10 2023 GMT
Subject: CN=6564180d-9c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:7e:ad:b1:1d:b1:08:f3:de:0c:c8:a1:f5:
54:83:b7:57:2b:85:4d:f1:36:11:56:76:0e:1d:1f:
30:14:66:a1:38:52:02:60:37:ce:91:5b:ac:e0:6a:
75:3e:c9:91:d3:0c:ea:4f:cb:b5:24:eb:ab:77:6a:
ad:09:fa:b8:83:97:c5:a9:a9:60:cb:a6:ee:ff:02:
b7:b6:4c:1f:ed:11:f3:37:e7:d7:96:1a:3d:ac:e3:
0d:b7:22:26:e4:fd:d1:cd:05:fe:97:cf:b8:c7:ba:
8e:36:4b:a3:db:b7:91:be:9c:19:18:78:bb:07:03:
eb:95:e9:95:0b:ea:25:a9:86:ed:fe:0b:ed:38:96:
c0:60:d2:68:e3:98:a2:ac:f3:4f:29:84:a5:06:50:
42:32:40:bf:62:01:fd:c1:f0:d1:6f:6c:a9:a2:4e:
6d:b6:da:ff:02:92:27:9a:a7:da:31:74:8b:0a:f0:
a9:fe:ef:5e:f0:bb:c2:0d:5d:6b:8e:9e:5b:0a:8d:
7a:4c:08:e7:62:64:68:6b:18:6b:fd:32:a1:1d:c7:
35:aa:7e:17:ae:85:d1:f7:97:c4:08:3e:74:da:76:
af:bf:19:f5:95:b2:eb:9b:f9:9d:f8:4d:bb:44:2a:
30:09:77:1c:d4:e3:c1:ae:31:45:4d:33:7f:e5:f1:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:FD:A2:BD:0A:90:B3:02:C5:05:C3:1E:2D:37:36:D3:B9:8B:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B36ADF048CDB11EE8F21775E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.85.0/24
Signature Algorithm: sha256WithRSAEncryption
40:09:09:40:8f:a3:27:bc:16:67:bc:c9:2d:e2:5c:8b:6b:a4:
2b:4e:0a:e4:2e:5d:cf:19:f7:bd:e2:91:b8:03:e6:f4:f9:96:
84:f4:86:79:a3:fd:d8:2c:ab:39:eb:49:ff:6b:68:1b:8b:67:
50:87:64:c7:d6:a1:e1:af:fb:8c:93:f8:20:15:4f:17:82:5d:
1c:a0:e5:33:0b:a9:13:e6:81:07:2d:74:4e:e3:fa:99:0b:16:
9e:72:95:f1:98:08:de:25:ac:60:f1:4f:86:9d:56:21:34:52:
42:56:a7:e2:71:ff:4d:7e:12:b8:80:6a:1b:e4:02:ab:1a:c5:
91:5c:20:e3:f7:ea:a3:f4:36:8a:f4:be:1d:a9:dd:fd:a6:5d:
99:d4:01:47:bf:26:82:7d:c6:f4:f4:93:0a:9e:51:2b:a9:10:
23:77:e2:20:29:30:ba:31:94:6f:06:fb:2f:33:b6:19:54:16:
27:6a:cb:86:61:2a:eb:d9:69:bd:8e:ce:f2:08:0a:b1:42:47:
51:86:29:f5:b4:ae:c9:5f:af:46:89:a5:3f:61:e4:c7:96:d3:
f1:80:08:7e:6a:ed:34:06:b5:20:2f:38:d2:10:4c:b0:aa:5e:
00:bd:a1:13:a6:2c:24:7d:ed:fa:cb:7c:78:23:19:df:70:e9:
aa:2c:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:37:07 2025 by rpki-client