Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B85CEEB88A8711EE987FD06E4AD9E6FC.roa
File: B85CEEB88A8711EE987FD06E4AD9E6FC.roa (raw, json)
Hash identifier: ZfqYYTYP3FBWEuk14RIOk2uaVbWAXfDRFTKfdEHM/wM=
Subject key identifier: 57:CF:B9:53:F6:AE:E0:ED:29:83:64:33:6F:84:74:F7:77:EF:A8:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5316
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B85CEEB88A8711EE987FD06E4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:10:01 +0000
ROA not before: Fri 24 Nov 2023 05:09:58 +0000
ROA not after: Tue 26 Dec 2023 05:09:58 +0000
asID: 62240
IP address blocks: 154.194.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21270 (0x5316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:09:58 2023 GMT
Not After : Dec 26 05:09:58 2023 GMT
Subject: CN=65603029-9075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:8e:a7:18:69:7b:f0:72:64:32:d1:c1:56:
e1:6c:a2:c8:c0:a5:a9:e3:01:7d:6c:18:9e:27:70:
7b:1c:03:af:54:7c:78:b4:4e:c6:f4:3b:ff:06:c8:
94:a9:3b:a5:1d:82:f2:ce:b6:91:64:53:61:d9:78:
96:3b:63:48:10:80:fd:35:68:25:b4:a0:f7:33:3a:
2c:f6:9a:f8:e9:d7:e4:93:37:6e:ef:e0:85:12:a1:
30:2f:3e:8c:8c:07:74:d8:4d:75:da:2d:af:3a:6b:
ce:aa:85:ce:aa:34:0f:18:fb:b1:f8:90:e5:84:62:
29:78:45:04:56:bd:ae:aa:6f:66:65:61:9e:3f:9a:
3a:0c:67:d6:20:7d:ec:25:69:29:35:ce:76:1b:96:
3f:0f:8b:9b:3a:95:7f:f3:26:c8:ea:6f:d2:07:a1:
78:03:ed:2c:f9:63:3b:09:78:83:20:3c:47:dc:7a:
2a:b7:37:a5:de:a7:fd:17:0b:ff:5a:d6:0d:06:0a:
8c:43:1d:72:fd:8f:7f:17:d0:35:99:29:7c:52:69:
2e:3b:fa:5b:65:91:1f:b3:ce:19:ea:5e:90:00:4e:
05:0c:9a:3c:68:8a:b6:9b:73:d6:36:5c:a2:45:d4:
b9:e9:a5:c9:80:9b:28:e9:f8:b3:b2:54:b0:a3:83:
c1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:B9:53:F6:AE:E0:ED:29:83:64:33:6F:84:74:F7:77:EF:A8:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B85CEEB88A8711EE987FD06E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.119.0/24
Signature Algorithm: sha256WithRSAEncryption
50:14:1a:db:00:b6:5b:a2:c2:19:20:93:ca:6f:ba:4a:27:2f:
6c:fa:50:71:6b:1d:0f:84:8a:ff:6a:bc:75:a3:c2:9d:7a:3a:
35:d3:70:5e:18:eb:1a:46:fc:08:89:18:26:2e:d3:84:73:d2:
48:83:e9:f2:25:a8:0a:c7:32:7f:d1:cc:f4:37:01:74:02:77:
3c:38:63:24:0c:66:16:7d:ff:00:75:69:5e:d8:3b:93:a7:23:
6e:3e:20:b1:2b:91:00:40:e3:94:de:64:f7:b5:e2:16:47:88:
97:cf:a0:23:48:8c:d6:24:8a:42:ee:95:27:d4:c7:3d:92:1a:
e8:ea:cb:39:79:61:d6:0c:7f:c5:90:cb:61:29:5f:f6:14:4d:
43:7c:f6:a0:f0:d3:07:33:8b:8c:95:7e:18:07:ea:9f:fc:9a:
22:75:1a:36:fc:53:97:61:54:b3:bd:a8:82:5c:c6:89:79:64:
25:c9:ef:cc:ca:a6:22:5d:51:67:08:27:b0:0b:62:a3:08:90:
e1:68:fb:84:d9:54:b5:bb:cc:50:5b:0c:c1:a6:47:df:ae:65:
81:a0:50:9e:ce:ec:c8:52:18:fd:09:ff:b4:31:6f:e0:12:05:
a7:0e:b4:8a:e4:73:fd:d6:ed:20:ca:b0:29:4d:82:8b:d1:ac:
68:ee:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:21 2025 by rpki-client