Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C12D00448A9811EE8BC5F9274AD9E6FC.roa
File: C12D00448A9811EE8BC5F9274AD9E6FC.roa (raw, json)
Hash identifier: vpEzqUqwN6JSlG6H6lHVa1Rk9q9POf7M7GFYDlPNVNk=
Subject key identifier: 7F:9E:14:DC:53:91:68:71:E1:05:1F:73:81:84:7A:36:BD:C2:87:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 543C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C12D00448A9811EE8BC5F9274AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:11:58 +0000
ROA not before: Fri 24 Nov 2023 07:11:54 +0000
ROA not after: Tue 26 Dec 2023 07:11:54 +0000
asID: 62240
IP address blocks: 154.195.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21564 (0x543c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:11:54 2023 GMT
Not After : Dec 26 07:11:54 2023 GMT
Subject: CN=65604cbd-42a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:0b:21:18:2b:dd:cd:6e:06:cb:24:ae:9f:
8f:12:dc:b0:3e:06:a9:45:e5:cb:ef:46:b5:6f:98:
33:c9:20:9e:d7:62:7a:20:2f:e0:b6:f1:62:18:88:
3f:12:24:02:fb:c3:43:38:cc:40:e8:40:b8:ce:73:
15:50:6f:f1:15:57:4d:38:d5:e3:31:c4:41:eb:65:
a5:72:e9:5c:c8:9a:d7:fb:ad:ff:87:9d:54:e9:ec:
86:2d:5d:9f:6a:14:cc:59:2b:24:e9:bb:1e:8d:4d:
bf:69:5a:46:a6:6b:ec:f5:60:c4:50:88:53:89:6b:
8f:52:1d:08:13:61:ea:e7:27:6f:8b:1e:af:03:da:
9d:8a:6f:b0:51:4a:f5:1b:3f:16:e8:17:35:b8:6f:
45:56:6d:b4:bf:d2:a4:0a:a7:70:91:36:0c:cf:1b:
c4:75:e2:d8:02:84:d2:91:61:69:da:43:42:9b:5b:
52:25:97:07:c0:e6:f9:dc:27:f0:eb:a3:f7:a7:1a:
2c:f8:fb:26:e2:17:dc:e4:8c:f1:b0:b8:3b:bd:97:
b4:9e:33:d0:82:cf:ee:ae:c1:f6:bc:6b:20:3d:96:
c5:01:3e:30:85:7a:79:05:6d:bd:8f:3d:db:07:d1:
b4:00:3a:15:46:47:b5:a7:41:e3:8f:21:e5:55:f9:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9E:14:DC:53:91:68:71:E1:05:1F:73:81:84:7A:36:BD:C2:87:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C12D00448A9811EE8BC5F9274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:28:0d:40:60:d0:27:10:0f:0b:6f:78:df:05:53:1a:4f:a5:
a2:22:20:3b:d1:9d:8f:6b:31:92:c1:67:04:62:a2:5e:e3:66:
81:c1:77:13:d6:3c:d5:e1:3d:d0:c5:b9:40:4b:90:7b:c3:e4:
26:ae:85:99:b3:b2:4c:62:cd:c5:b2:11:71:a1:9a:01:bd:85:
01:fd:83:ec:8d:78:42:9c:85:77:82:b6:bc:ce:2e:9a:c0:b0:
c2:ac:fe:8c:35:46:54:e0:b9:45:8b:ee:4f:a4:a0:53:b5:0a:
60:6d:7a:09:1d:b1:f0:42:6b:25:a7:f5:80:23:d9:f8:6c:56:
78:e9:74:7b:f1:44:c6:94:ed:32:81:2d:26:7c:3c:1b:d4:52:
14:af:ed:70:87:ba:fa:96:2c:a7:2b:62:71:08:78:24:1a:19:
73:1b:46:37:20:8f:2b:cf:bb:f8:ed:d6:09:fc:1c:dd:ef:cd:
b1:92:fb:f8:2d:c9:40:6e:51:db:51:a5:06:1e:97:9c:38:6f:
2d:76:ea:99:6b:f9:13:71:72:d0:c4:2f:0c:c4:de:e0:e4:74:
56:39:7e:5c:20:3c:59:c3:0e:a0:c2:0e:02:3e:54:22:c8:b3:
00:39:cd:de:13:3f:8f:3a:63:4b:60:3c:f0:32:13:1d:91:4a:
f7:73:69:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:16:09 2025 by rpki-client