Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEFAAE748A8F11EEAAEFF8884AD9E6FC.roa
File: BEFAAE748A8F11EEAAEFF8884AD9E6FC.roa (raw, json)
Hash identifier: CuwtL0nLkvrlUqh5jGQmerNAK8iJxYUwTP6pDYIzxiM=
Subject key identifier: 73:04:27:FE:DD:46:FE:28:9C:1B:94:94:AA:9A:37:19:C1:28:C8:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 538B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEFAAE748A8F11EEAAEFF8884AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:07:28 +0000
ROA not before: Fri 24 Nov 2023 06:07:25 +0000
ROA not after: Tue 26 Dec 2023 06:07:25 +0000
asID: 62240
IP address blocks: 154.195.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21387 (0x538b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:07:25 2023 GMT
Not After : Dec 26 06:07:25 2023 GMT
Subject: CN=65603da0-4e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:f0:49:5c:12:4f:d5:1d:19:cd:79:2e:c6:
91:e3:cc:d0:df:cc:19:eb:21:fa:a2:17:2d:0d:bb:
ff:a2:d8:09:4b:1d:04:97:86:02:72:13:41:a9:50:
31:45:ee:8c:2e:ef:54:7b:b5:c0:08:a0:91:f2:cb:
3a:58:30:2a:6a:8d:65:3a:b4:d0:01:d2:2d:39:66:
d5:a0:a2:45:8a:91:71:3b:70:12:a2:88:74:5e:32:
17:87:77:0e:ba:ab:86:1e:3f:1a:13:9b:b4:38:1c:
b3:7b:ad:a6:b8:f1:4a:c2:e4:8b:fb:25:48:a3:3c:
5a:72:7e:36:6c:76:17:42:b8:70:79:6a:bc:2e:97:
7e:e8:90:0d:ae:28:44:34:7d:17:d0:34:4f:e1:c9:
bb:3d:9d:31:58:06:e5:ee:26:9b:90:66:ad:dd:37:
08:9d:85:18:e7:d9:a3:28:13:86:22:b2:c5:e8:f5:
20:1e:bb:5d:95:a3:c9:e9:77:99:90:94:bc:0c:f7:
c5:53:89:fd:8e:89:23:da:bb:2e:c4:33:43:42:a0:
1c:37:ae:e9:d6:38:df:84:8c:03:d8:d4:a3:a0:24:
40:14:14:c5:80:05:21:7a:8f:ed:9a:53:a9:2b:9a:
e7:ed:11:33:a5:ec:55:5c:61:fd:00:c7:19:52:45:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:04:27:FE:DD:46:FE:28:9C:1B:94:94:AA:9A:37:19:C1:28:C8:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEFAAE748A8F11EEAAEFF8884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.116.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c6:a9:ba:9d:d3:dd:21:3f:11:16:0e:1a:15:f2:ec:47:b9:
92:cd:e9:96:c8:2d:b7:70:d3:5c:ca:aa:16:7f:dd:b3:5a:43:
85:1a:16:0f:ba:ba:c6:57:93:26:66:76:93:56:da:7c:5a:99:
17:43:fa:02:db:bd:b1:25:44:b5:47:a8:30:7c:7d:39:5e:da:
e0:9d:c8:54:7b:5a:c3:81:dd:8c:b9:84:36:c9:cf:f3:a9:e5:
36:26:80:33:6e:c1:97:c3:79:9f:8e:29:f7:9a:4a:b1:06:46:
e3:56:f9:17:eb:81:a4:78:2c:33:a8:d2:68:75:d8:6f:8b:b5:
dd:29:fb:d6:2e:c3:26:a5:3e:68:a8:60:45:c8:cb:1d:d6:b5:
60:6f:a1:6d:58:34:6c:a9:24:04:d6:94:43:88:22:3d:37:71:
de:fb:c5:ce:5c:ad:31:45:c5:d0:df:0b:94:1d:50:53:ce:9b:
9f:e2:b7:78:b2:df:05:ef:ae:0e:82:1d:58:0e:2f:e0:1b:3b:
de:a5:7e:c5:e8:e1:7d:f9:89:d9:a4:ed:6f:99:d3:08:da:1c:
1c:4c:b1:3b:17:a0:d6:20:36:e9:38:7b:10:bf:28:10:48:63:
11:14:7e:e0:a3:da:dd:41:cc:0a:00:e1:27:53:e8:33:4a:41:
87:00:d5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:51:35 2025 by rpki-client