Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9A75DCA8A8C11EE82DA4A7F4AD9E6FC.roa
File: C9A75DCA8A8C11EE82DA4A7F4AD9E6FC.roa (raw, json)
Hash identifier: Kx5vAGlbM203aQpDEBzxoBY8Ak7wzO2DeYoWt3go5VA=
Subject key identifier: 40:50:96:DD:23:2B:E9:BA:99:13:C4:37:0F:AD:52:91:D2:A0:68:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5358
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9A75DCA8A8C11EE82DA4A7F4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:46:18 +0000
ROA not before: Fri 24 Nov 2023 05:46:14 +0000
ROA not after: Tue 26 Dec 2023 05:46:14 +0000
asID: 62240
IP address blocks: 154.194.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21336 (0x5358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:46:14 2023 GMT
Not After : Dec 26 05:46:14 2023 GMT
Subject: CN=656038aa-6d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:2a:ba:f8:4b:d8:41:ad:b8:1d:50:13:cd:
6e:ec:af:7c:92:9f:58:b6:02:50:91:31:40:d1:71:
2f:69:14:50:c6:bf:59:33:11:df:22:3f:05:20:63:
22:2b:8b:60:ca:eb:45:24:4f:a2:84:f0:67:8a:51:
5d:6d:b8:d5:7a:63:d6:51:0d:29:dd:88:32:f3:da:
95:ba:5a:1e:7b:70:ec:00:96:8f:f3:07:f9:53:3e:
fc:60:06:e2:12:d4:c7:eb:f8:b4:ca:31:1f:63:a6:
4a:91:b2:c0:1f:9f:76:64:99:a0:d1:5b:b1:30:c5:
82:fe:24:4f:0d:4f:81:44:78:33:4e:7b:94:de:95:
a0:2a:a6:d3:97:69:c8:2e:3c:6d:80:f4:f0:e9:af:
1a:a2:cb:34:7b:36:20:30:72:bd:9b:6f:15:41:fe:
a7:ab:24:3a:59:79:26:e1:ef:45:22:bc:4f:fa:df:
45:88:6f:63:2a:1f:f3:d9:a8:0f:a2:c3:db:bb:3d:
cb:7e:50:94:2a:5f:af:b6:b3:dc:23:60:94:dd:44:
bb:72:89:7a:95:23:0a:e6:f2:14:fe:2a:2e:06:d8:
8c:68:b2:18:3e:18:e9:0b:95:5d:15:6a:51:ff:32:
e2:48:7d:0b:c6:10:78:83:02:4b:68:e7:16:93:0e:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:50:96:DD:23:2B:E9:BA:99:13:C4:37:0F:AD:52:91:D2:A0:68:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9A75DCA8A8C11EE82DA4A7F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d8:c1:17:21:95:e4:8f:25:1a:d0:db:d8:ec:09:55:df:bf:
d4:64:f0:1e:47:00:bb:73:e1:05:ed:66:2d:f6:0a:81:4e:b8:
c0:1a:ff:22:13:0b:6d:36:e3:a0:43:de:6f:db:a0:95:93:98:
90:15:5d:1d:35:3d:6e:55:16:63:aa:e7:e2:8a:bd:39:e8:83:
af:15:5e:5c:90:a2:f9:19:95:4c:6e:54:c4:85:0b:e8:87:40:
dd:31:7d:4e:45:48:a5:56:ba:33:49:c7:75:7f:77:68:a8:e9:
c0:c8:69:8a:9d:ab:66:a6:6f:80:d6:8f:1a:63:dd:56:35:dd:
e8:01:0c:2f:09:67:8f:01:32:b6:a1:aa:01:81:ec:42:17:a2:
76:39:90:89:90:9c:c4:1e:67:4a:0a:b7:99:aa:ed:65:31:e1:
6c:e2:91:49:27:4b:74:42:3b:bf:cf:85:3a:77:e6:62:d1:98:
b7:45:4b:fa:bc:e9:98:04:c1:b5:b5:02:ce:66:41:30:5a:b9:
21:72:1c:e3:3f:2e:7a:ed:94:25:01:52:dc:2d:15:db:0f:ca:
72:b8:2b:46:b3:f8:c2:94:b0:b3:1c:ba:68:49:b0:c3:d1:c6:
1d:c0:32:f6:5f:a9:07:02:c7:4d:a0:20:bb:38:84:cb:6f:b0:
73:7b:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:18:46 2025 by rpki-client