Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFDFC1488A9A11EE9F999C2E4AD9E6FC.roa
File: BFDFC1488A9A11EE9F999C2E4AD9E6FC.roa (raw, json)
Hash identifier: A3s7gAkMdJn9ghDCGuojSe35u83Ipl5ep9+lIttg3tE=
Subject key identifier: 2C:87:9A:B1:D8:33:ED:9D:27:05:DF:F6:EE:E3:46:E2:F1:11:73:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5468
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFDFC1488A9A11EE9F999C2E4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:26:14 +0000
ROA not before: Fri 24 Nov 2023 07:26:11 +0000
ROA not after: Tue 26 Dec 2023 07:26:11 +0000
asID: 62240
IP address blocks: 154.195.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21608 (0x5468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:26:11 2023 GMT
Not After : Dec 26 07:26:11 2023 GMT
Subject: CN=65605016-b2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:00:d5:4a:2f:b4:c4:da:23:6d:2d:bc:e3:
c0:8e:39:26:04:51:14:3d:5b:f2:2a:a5:d1:12:7d:
0a:34:65:d9:3a:09:63:c1:38:2e:86:ea:ab:bd:72:
c1:4e:4b:12:9d:67:c1:39:a2:de:03:66:c2:68:ef:
3c:c3:c0:6c:32:55:d8:8d:51:be:da:34:41:8b:23:
49:63:d7:ba:ec:a8:30:55:b4:01:7e:ef:6d:bf:41:
64:61:3d:b5:99:0a:ac:7e:c8:58:40:a0:99:b7:a6:
69:fd:7a:c5:2c:4e:a1:98:78:84:0a:24:44:ae:e0:
8b:73:90:ce:47:cc:f7:bf:8d:1b:e8:58:22:22:d3:
20:e2:11:8b:ef:9d:48:35:b9:11:50:3d:08:ea:41:
87:07:3c:0b:66:89:6a:f1:2d:61:8a:e6:83:37:fa:
29:13:7e:c6:7e:ab:5c:e9:db:06:8b:6a:d3:ab:b2:
b7:ec:b8:0e:bf:fc:da:8a:f7:88:4c:71:b4:ed:66:
6e:ee:70:90:6b:55:a3:3d:37:11:3a:c4:ed:5a:58:
c8:63:1a:25:82:a6:50:b3:f2:59:96:44:31:c5:7c:
a6:2e:78:35:e7:ee:b4:4b:5e:c0:97:c4:bb:aa:07:
d8:73:7c:61:d7:72:b1:98:a0:29:9f:ff:8f:99:37:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:87:9A:B1:D8:33:ED:9D:27:05:DF:F6:EE:E3:46:E2:F1:11:73:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFDFC1488A9A11EE9F999C2E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e7:00:ae:30:e4:1c:5b:f0:18:e8:a2:aa:2a:64:61:3b:2a:
ae:31:a6:08:2e:7c:b8:43:97:19:23:9d:f3:13:0d:6a:51:f2:
a1:ea:c6:09:a0:97:a0:31:ea:0e:33:bd:75:0a:14:b1:d4:b8:
be:61:f7:f5:17:25:f9:5d:dc:2e:8a:ed:c2:87:99:5b:b1:83:
8d:9c:32:4c:60:dc:b5:49:0a:35:f1:79:c7:97:2f:27:f2:99:
77:1f:3d:3a:a7:d4:83:4d:d4:08:f1:2d:a2:b9:a3:cb:89:8d:
6d:6d:23:cd:5a:f7:a7:78:a5:0f:65:65:16:aa:55:d9:6e:28:
ae:c0:bf:5c:41:57:6d:62:85:11:87:47:02:fe:e6:95:cb:4f:
53:37:32:36:4e:c2:91:2a:5f:a1:ce:1b:89:13:00:4f:93:fa:
ef:a1:54:21:cd:96:b5:36:79:86:b6:93:f5:ee:78:22:b5:56:
6c:c6:35:9a:b7:c8:c1:78:87:8b:fb:b6:13:12:31:31:32:56:
b5:5d:07:5e:78:29:51:3c:12:33:11:4c:35:43:22:21:ca:0f:
35:b6:a8:ce:b1:d5:93:2e:89:a7:dc:df:62:9d:9a:13:55:4c:
4f:b8:50:1b:b4:47:86:16:29:6e:25:3d:75:37:a4:e2:75:18:
6c:d6:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:38:07 2025 by rpki-client