Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8A5E5D881ED11EEABE432254AD9E6FC.roa
File: C8A5E5D881ED11EEABE432254AD9E6FC.roa (raw, json)
Hash identifier: BWV8PfyFwflZrEfNEZboVvVKOOhCrSVDZ44I5wpfChY=
Subject key identifier: 17:50:0B:AC:D8:2C:C7:CD:B5:50:C2:74:ED:E7:D9:B0:66:8F:6C:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4F91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8A5E5D881ED11EEABE432254AD9E6FC.roa
Signing time: Mon 13 Nov 2023 06:27:57 +0000
ROA not before: Mon 13 Nov 2023 06:27:54 +0000
ROA not after: Wed 20 Dec 2023 06:27:54 +0000
asID: 212238
IP address blocks: 154.212.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20369 (0x4f91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 06:27:54 2023 GMT
Not After : Dec 20 06:27:54 2023 GMT
Subject: CN=6551c1ed-5236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:1b:aa:75:af:18:bd:26:04:b2:36:6e:90:
80:37:2b:7a:82:39:d7:d4:1e:3d:e2:ae:ff:7e:1c:
2b:cd:af:e1:a7:64:d8:50:a4:57:a1:cf:1f:69:08:
1a:30:90:8c:b5:dc:b6:cc:4f:15:eb:79:55:5f:0f:
41:cf:f9:54:47:86:c4:b1:3e:ab:2a:1e:f9:9d:58:
c9:3e:44:82:92:f4:86:58:38:a5:1b:b4:dd:67:84:
fc:77:75:0a:58:2a:01:68:93:ad:d3:56:4b:8c:10:
cb:dc:a6:78:f8:ce:df:fc:39:7e:23:5b:26:c3:52:
1b:34:88:db:d8:6d:15:cd:9f:e3:b7:87:9c:b9:23:
19:83:06:49:c0:e3:78:85:1b:66:77:17:d2:2d:c7:
5a:57:f1:29:50:fc:d9:21:b6:57:5a:18:5f:e1:c9:
88:d1:d7:de:2b:01:00:78:bd:e9:7b:c4:ed:0d:a1:
c8:d3:9d:61:f5:2a:fa:7a:93:9b:52:1c:55:ac:6a:
8e:8b:78:6a:de:b4:bd:da:7a:a0:0c:cd:d5:37:69:
53:8e:d9:82:4a:66:ad:2f:d7:6f:06:66:96:e5:5d:
1e:76:f4:b4:70:ad:8c:5b:c9:0f:a9:1b:c6:1b:7d:
06:e3:1e:f1:d2:ee:87:7b:a7:3f:6a:d1:44:4a:b7:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:50:0B:AC:D8:2C:C7:CD:B5:50:C2:74:ED:E7:D9:B0:66:8F:6C:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8A5E5D881ED11EEABE432254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.161.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:3c:87:e1:0e:69:6c:a7:27:b4:99:7d:ef:84:cc:4d:9a:df:
d9:61:3d:64:58:90:6b:e1:26:1b:41:86:75:85:41:0d:8d:d7:
91:61:57:cf:ae:39:cd:39:9f:82:eb:e3:b4:71:41:7f:54:d9:
32:1a:81:9b:ec:74:77:38:81:af:4a:5c:a6:50:1d:4f:ee:7f:
74:59:25:ff:d9:72:54:01:3c:02:d7:e7:5a:38:4f:92:5e:7e:
83:fc:35:7a:63:57:27:85:c6:62:f2:9b:8d:2c:44:19:06:81:
4f:9d:65:08:ed:16:0e:67:9b:f0:43:21:96:6e:5c:af:bc:eb:
bb:0d:ff:ef:e1:73:c1:0c:fe:3d:07:bd:e5:eb:3d:76:e5:c2:
4c:cd:9b:9c:f2:f6:87:93:24:a5:a1:a1:0c:a6:e3:f7:bc:4b:
e8:bb:d2:ae:c6:c1:cc:c8:97:e4:a9:2e:bc:e3:96:85:49:7a:
7a:ee:01:ad:dc:d2:f6:4f:cb:75:19:13:84:7a:75:bd:97:16:
2b:06:6e:66:93:fd:cd:be:50:98:24:96:2e:42:07:c8:35:74:
d9:2a:9d:68:02:39:c3:24:72:93:6c:f3:3a:21:81:39:6c:cc:
19:4d:7e:10:e8:f9:70:f0:32:d3:e3:b9:a3:56:6f:66:ba:64:
04:7d:0e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:41:11 2025 by rpki-client