Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B81F4E188CE011EE9B7CAC6E4AD9E6FC.roa
File: B81F4E188CE011EE9B7CAC6E4AD9E6FC.roa (raw, json)
Hash identifier: ISqEGOYIJvto9lllZYhFYh72+qvwa9SNGBMIWvfq62k=
Subject key identifier: F7:E8:2F:15:DB:9D:BD:AF:7E:49:B9:A0:3D:32:27:3E:DE:BA:BC:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 553B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B81F4E188CE011EE9B7CAC6E4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:52:09 +0000
ROA not before: Mon 27 Nov 2023 04:52:05 +0000
ROA not after: Tue 26 Dec 2023 04:52:05 +0000
asID: 62240
IP address blocks: 154.195.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21819 (0x553b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:52:05 2023 GMT
Not After : Dec 26 04:52:05 2023 GMT
Subject: CN=65642078-a991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:39:15:a3:22:35:15:d6:11:a2:45:54:bb:
61:fe:d3:54:29:48:50:2d:f6:8a:71:34:7c:80:c4:
12:6f:d5:78:9c:5a:d3:f6:d0:20:30:f3:17:77:02:
98:81:4a:c4:22:51:fc:b6:01:83:39:a5:44:1c:a3:
4c:02:5a:a9:54:54:e1:c3:5b:ac:a3:0b:b0:a9:d5:
a2:d9:32:b4:69:bd:d3:f0:b5:31:21:8f:c2:7e:5d:
a7:27:a9:22:19:00:44:91:82:66:6f:67:76:95:8b:
29:bb:a0:7b:09:5b:ce:44:e5:a2:fe:35:5a:e9:02:
76:48:f5:9f:58:5d:f9:f0:a7:a0:38:cb:ae:ec:94:
ee:94:43:10:d4:cb:39:61:92:d9:21:e5:1e:6f:79:
88:13:6a:e5:d6:aa:18:68:99:0c:ae:fb:40:a8:a8:
8b:86:12:9a:b4:a7:fd:5c:b2:e8:07:68:33:26:09:
35:fd:a3:fb:e6:a1:b3:b7:a5:d4:6c:75:41:45:de:
a0:1e:10:31:1e:69:bc:5c:7b:a4:4f:12:ed:6a:cd:
a8:73:26:63:4d:3e:75:c9:0a:d8:8f:eb:12:35:15:
eb:d6:ff:c9:c6:b3:f8:ff:23:69:a1:29:aa:c4:02:
04:c5:99:ca:1f:71:a2:de:2e:07:54:90:70:86:46:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E8:2F:15:DB:9D:BD:AF:7E:49:B9:A0:3D:32:27:3E:DE:BA:BC:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B81F4E188CE011EE9B7CAC6E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.185.0/24
Signature Algorithm: sha256WithRSAEncryption
78:68:cb:2f:9d:12:b5:32:9b:2b:d4:6b:68:94:72:a0:2f:34:
db:81:3e:30:e1:5a:76:69:92:b6:a0:b2:b5:6a:24:3c:7e:47:
24:ad:16:6c:29:ef:2a:88:97:4f:4e:b3:29:c4:f0:ac:04:eb:
e0:d4:81:3c:67:81:0b:15:e9:15:0b:1a:c5:a2:24:56:ce:01:
06:db:6c:75:9e:56:11:74:84:07:4a:89:22:35:e3:38:94:37:
a7:48:fd:c5:d4:ab:10:3e:39:97:1b:d2:b5:6c:95:bd:88:8c:
4f:19:f0:11:94:aa:35:e3:c8:1c:2c:5b:3f:89:90:3c:b9:bf:
61:2a:43:0d:00:e2:74:8c:5e:30:e4:96:dd:64:87:8f:f2:5d:
fe:ca:7e:5e:39:67:b3:9e:ab:f3:b5:03:0b:1d:1a:9c:0b:c5:
76:b6:36:77:e2:fc:69:ee:f3:96:d5:de:a0:01:0d:c2:0e:29:
cf:74:88:e3:5f:6c:26:ae:67:48:6c:b0:6b:02:40:d6:af:03:
a8:17:41:c5:70:19:63:00:34:7d:5a:f6:90:88:84:2f:64:b1:
6a:57:d8:28:ab:68:19:e5:22:7c:3d:58:ff:b4:b4:63:00:1e:
a0:95:59:db:42:df:ca:b4:f7:bc:ff:c6:a0:96:8b:c9:3e:df:
1f:f1:5f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:18:21 2025 by rpki-client