Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFCC594C8A9411EEAE0E261B4AD9E6FC.roa
File: BFCC594C8A9411EEAE0E261B4AD9E6FC.roa (raw, json)
Hash identifier: Q66XhN91TIwjpTXwCqmXcJWbz91u5FYI08ElQqNqTdM=
Subject key identifier: BB:33:28:9F:E8:D0:91:83:C2:85:79:AB:C7:D2:C1:99:0A:AB:97:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 53E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFCC594C8A9411EEAE0E261B4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:43:17 +0000
ROA not before: Fri 24 Nov 2023 06:43:14 +0000
ROA not after: Tue 26 Dec 2023 06:43:14 +0000
asID: 62240
IP address blocks: 154.195.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21476 (0x53e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:43:14 2023 GMT
Not After : Dec 26 06:43:14 2023 GMT
Subject: CN=65604605-fe06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:cf:da:0a:28:73:f1:f8:8d:1c:6d:6b:f2:
5f:d5:1b:30:6b:64:c4:16:ea:58:91:64:b2:35:b3:
d5:59:ec:59:12:77:4e:19:d1:31:6a:cb:b3:de:49:
c8:2a:0f:08:7d:11:50:1f:ff:b9:cd:78:24:f5:85:
32:01:23:32:d9:a0:a2:d1:4f:32:42:a6:64:a0:53:
d8:5c:05:10:f6:b7:31:53:9a:8e:9b:43:78:0d:44:
8e:6d:d6:3c:a9:75:90:60:da:76:ea:b6:3a:94:3a:
85:b8:03:1a:b3:18:7f:ce:75:3f:7d:f2:06:74:fa:
1b:c2:3a:3c:9d:83:55:5a:33:1b:e5:de:5d:53:11:
31:15:8d:f1:29:72:da:ba:8a:1a:44:da:ea:e8:93:
1e:a6:8c:a1:7b:00:51:81:5a:a8:5c:9d:d4:2c:fe:
ea:7c:d1:cb:22:6b:64:ba:4c:43:53:72:e8:96:49:
80:00:17:7a:15:91:ab:fc:0b:a5:67:82:eb:63:03:
9a:61:9a:14:3b:29:99:01:f3:8d:f3:43:4d:a4:83:
d4:b0:ee:d0:4d:45:3c:72:a8:c4:0c:ef:f9:76:30:
f1:7f:9f:8d:b1:11:62:d2:2a:09:60:d5:26:b8:43:
b7:e9:15:bc:20:2e:59:6f:83:d6:87:8b:c9:38:20:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:33:28:9F:E8:D0:91:83:C2:85:79:AB:C7:D2:C1:99:0A:AB:97:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFCC594C8A9411EEAE0E261B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:25:5f:37:44:74:e4:14:dc:87:76:13:26:54:57:61:ba:6b:
71:eb:f0:ea:b0:9c:4c:2a:6f:b5:3f:8a:69:e7:ba:3f:3d:a0:
88:4d:95:ba:42:55:aa:fc:a1:3b:03:cf:39:0c:59:aa:99:20:
c6:d8:ee:de:86:d3:25:40:2a:b5:4d:3e:c5:ab:9f:f2:00:c3:
e4:3b:e7:d5:38:f8:76:f2:a5:0d:cc:92:1b:d6:cd:54:16:a3:
b4:2d:9c:8e:77:ae:da:f5:e2:1f:43:50:d0:80:79:e6:cf:55:
b9:44:17:ae:03:f9:52:a5:8d:8a:f1:69:75:35:23:9a:5f:04:
0e:76:ed:98:6a:ca:17:23:a4:6a:33:44:cc:58:27:fe:bc:51:
c5:25:1d:6a:3e:f6:42:9b:11:e1:a3:a0:e2:47:55:17:c5:c7:
49:e8:1c:14:4e:8a:83:19:d8:54:32:8e:df:f1:4e:ad:1e:c9:
4e:75:9a:ac:2b:7c:0c:1b:78:20:a9:7b:85:5a:cb:57:fb:b7:
e6:77:bc:50:2f:09:3e:a7:72:50:b7:ca:4e:28:44:6d:0e:36:
3c:e3:d2:5a:82:3c:74:9e:3a:b6:5a:48:12:a5:93:f6:c5:b0:
f4:9d:3a:55:8d:0c:b8:c2:69:38:27:e2:60:2a:7b:19:e9:e4:
37:71:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:26:16 2025 by rpki-client