Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C49928C48A8A11EE8BD5A1784AD9E6FC.roa
File: C49928C48A8A11EE8BD5A1784AD9E6FC.roa (raw, json)
Hash identifier: /59mi2nXYDB950TPKAREdqdMhPkdbmj/mBK/36rC5WA=
Subject key identifier: 30:BF:AF:DF:70:D6:F9:42:88:4C:FC:D8:B4:F4:D6:EB:44:E0:19:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 533A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C49928C48A8A11EE8BD5A1784AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:31:50 +0000
ROA not before: Fri 24 Nov 2023 05:31:47 +0000
ROA not after: Tue 26 Dec 2023 05:31:47 +0000
asID: 62240
IP address blocks: 154.194.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21306 (0x533a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:31:47 2023 GMT
Not After : Dec 26 05:31:47 2023 GMT
Subject: CN=65603546-c884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:1e:40:23:ea:a6:b0:70:b4:3e:b3:74:37:
37:fd:90:30:ab:81:20:63:41:a3:2d:66:de:2c:5b:
e5:81:48:83:af:4d:b0:7c:9f:ee:19:bd:d6:6b:1c:
6e:49:4b:b9:b4:ee:0c:70:60:4a:a3:09:65:55:8e:
ce:23:d7:1c:49:f2:ba:02:b3:a7:a0:a6:e7:81:2e:
4a:5e:0d:ee:e3:83:fb:46:dc:15:7a:4f:8a:c4:19:
31:40:f6:9c:dd:46:4a:b1:60:f4:66:ce:44:bd:c1:
05:39:ce:b7:1f:03:7d:9c:2a:43:55:e8:41:81:27:
ab:13:86:ea:4a:24:10:74:b2:0f:c8:e8:57:53:ca:
a6:82:42:80:56:09:0d:12:01:1f:f6:79:3f:a2:2c:
cb:57:b9:53:8b:09:ef:64:56:f2:75:11:4d:2b:d5:
1c:23:38:49:96:ed:ea:db:93:a8:54:53:f7:c9:5f:
3f:f0:7c:85:43:e4:27:d8:73:ca:ee:fb:09:ea:f2:
4b:4f:4e:7a:d4:ad:70:16:7f:be:19:68:5d:ed:c7:
52:9f:f3:71:a4:db:a7:93:fe:b0:9f:47:69:02:5c:
79:bc:2e:5f:a0:d2:0c:27:30:bb:15:24:a8:ba:33:
f1:90:f5:ad:05:e7:67:0d:b0:00:8a:84:ea:99:d8:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BF:AF:DF:70:D6:F9:42:88:4C:FC:D8:B4:F4:D6:EB:44:E0:19:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C49928C48A8A11EE8BD5A1784AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e7:5e:8d:b3:7a:65:a0:9b:a5:59:32:86:ac:b0:f5:c8:50:
79:31:98:86:01:6d:b2:1a:90:47:fc:8b:74:4b:c1:00:c4:44:
34:79:f9:15:4c:37:c4:fa:23:8f:f4:84:03:b1:75:74:5e:8c:
d0:87:27:06:5c:e1:0a:98:2e:0c:b3:c3:18:1f:b6:a9:76:ae:
64:bc:cc:75:28:93:43:4b:0b:92:3a:d5:0c:0a:e5:47:4f:a9:
e2:f2:9b:f1:b1:09:45:0e:36:0a:91:e0:c8:ed:9f:56:4d:77:
5f:e5:0d:49:86:39:49:5e:db:7d:d8:bc:ba:34:18:ef:5e:26:
5a:f4:3d:3e:56:26:5d:7a:79:46:a3:19:a4:8d:cf:cd:fb:19:
dc:05:e1:00:ad:a4:4a:f4:fb:79:4f:8f:5d:25:9c:fd:cb:e4:
d9:f9:45:61:8d:18:2e:8f:eb:36:49:8b:ec:41:c9:4b:cb:d5:
5e:d0:0a:1a:2a:c7:1a:a4:23:88:4a:e7:93:ae:2d:0a:05:0e:
81:47:72:a8:5b:01:0e:4c:4a:84:c2:a1:4c:2e:ac:9a:05:a7:
b7:c0:56:6a:f7:7f:a0:0b:99:b1:93:49:ce:0f:c8:fb:56:5d:
60:b6:9b:a9:22:57:70:45:82:21:48:39:99:be:ab:6d:fd:4a:
92:2a:3e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:38:03 2025 by rpki-client