Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6C127728A8B11EEAACB2C7C4AD9E6FC.roa
File: C6C127728A8B11EEAACB2C7C4AD9E6FC.roa (raw, json)
Hash identifier: 2FLa9T6DNzMy0lLiJ0mldh1PE9hOPAE6rb+d+nR5QXg=
Subject key identifier: 76:1D:FE:0E:55:BB:EF:1E:90:8B:9A:78:5D:0A:80:3B:39:A2:8D:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5346
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6C127728A8B11EEAACB2C7C4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:39:03 +0000
ROA not before: Fri 24 Nov 2023 05:39:00 +0000
ROA not after: Tue 26 Dec 2023 05:39:00 +0000
asID: 62240
IP address blocks: 154.196.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21318 (0x5346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:39:00 2023 GMT
Not After : Dec 26 05:39:00 2023 GMT
Subject: CN=656036f7-c182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:06:6c:1d:3f:78:0a:4e:3e:a8:8c:9b:b3:
0b:5e:02:0d:fb:4d:bf:c7:f1:74:59:df:df:66:f2:
26:c1:3b:9d:24:10:9f:d9:70:ba:05:fd:cb:e4:be:
6e:af:0e:b2:e8:39:e5:5b:79:f6:76:0c:28:9d:4d:
29:7c:f4:83:8c:3a:20:f0:0c:18:65:d3:a8:89:96:
10:68:aa:71:eb:2e:cb:e9:03:21:ea:bf:a7:1d:a7:
4b:e5:4c:64:b3:73:0d:7b:75:d0:17:c3:f6:2f:78:
9d:96:25:57:7e:31:45:1c:e0:09:f7:12:43:f5:14:
6d:d7:9c:dc:b3:0a:37:3d:5c:5d:f8:a1:da:5f:be:
ca:5a:1b:da:d0:4f:47:54:d9:54:b2:3e:fd:a6:d9:
81:0a:88:06:5f:46:76:f5:6c:24:20:b1:86:3e:03:
bf:ca:14:da:f3:6b:92:11:32:ec:a4:b0:2d:bc:aa:
1a:b7:5c:55:e1:31:8b:f6:cd:85:02:7b:af:82:34:
98:a1:9a:88:86:67:9d:96:fe:d8:0b:c3:ca:5e:3b:
33:ef:51:be:b9:d7:c2:af:7c:ec:f0:9e:67:84:f3:
df:19:1d:58:0f:94:7f:65:cf:2f:4b:9b:67:ef:ab:
24:ca:cf:45:15:19:7b:5e:f3:5b:4f:a2:4d:7d:6a:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1D:FE:0E:55:BB:EF:1E:90:8B:9A:78:5D:0A:80:3B:39:A2:8D:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6C127728A8B11EEAACB2C7C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ea:6e:b1:9b:31:ff:aa:a4:fe:76:63:4c:cf:9d:d1:70:77:
62:6a:fb:66:e6:93:ff:66:14:2e:b4:67:8e:1d:04:a7:1c:43:
05:42:16:3c:ac:b8:33:19:ba:0b:f1:fe:17:28:3b:73:62:34:
78:10:83:a2:56:dc:45:94:16:ca:19:0f:f2:a8:97:b5:77:79:
d8:8a:19:16:78:9c:5b:9e:91:96:07:b1:6f:67:47:09:c4:6f:
f1:ae:8c:3f:65:c5:15:fa:7e:f5:c6:e3:56:4b:d2:3d:fa:94:
4b:16:1a:02:d0:8d:f4:ec:86:3b:62:c8:14:0a:2c:2c:29:33:
3f:c9:25:99:24:a1:ba:eb:04:ed:62:99:15:db:60:18:0d:4a:
79:98:8c:32:fd:26:f3:99:36:2f:13:82:2f:6e:51:7a:9c:a7:
19:03:a5:99:8d:6c:33:88:a8:2a:29:fb:b1:61:86:13:52:3a:
e0:aa:b5:22:ec:86:be:20:28:6e:89:d7:ba:18:c1:29:19:6a:
13:f3:70:9d:2a:ae:09:7d:d1:4b:b3:ca:db:07:62:b4:da:51:
8d:72:17:86:de:53:fc:46:e9:c7:f9:90:fa:7e:8c:75:eb:f0:
92:cc:51:2c:cb:93:32:22:9b:d3:50:39:1a:b2:5f:15:b6:e6:
9a:68:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:22:01 2025 by rpki-client