Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB21B6248A9511EEAE9C7B1E4AD9E6FC.roa
File: CB21B6248A9511EEAE9C7B1E4AD9E6FC.roa (raw, json)
Hash identifier: 8Ql2dFZPUzrt0tJXxy2PesVqv4BZ5WFYUjPsW4kSDsA=
Subject key identifier: D9:99:DF:C5:B6:B8:B8:B9:84:20:A3:38:C5:A8:60:A9:4F:26:F9:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 53F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB21B6248A9511EEAE9C7B1E4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:50:46 +0000
ROA not before: Fri 24 Nov 2023 06:50:43 +0000
ROA not after: Tue 26 Dec 2023 06:50:43 +0000
asID: 62240
IP address blocks: 154.194.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21496 (0x53f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:50:43 2023 GMT
Not After : Dec 26 06:50:43 2023 GMT
Subject: CN=656047c6-326b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:a2:35:6e:68:2e:03:90:ed:78:6e:df:9a:
58:d4:fe:a0:55:1f:23:e6:88:09:b9:3a:44:43:90:
51:bf:a1:ca:a8:7f:cc:97:68:79:8b:df:9e:38:92:
66:fa:df:69:8c:31:0d:db:c3:a6:4f:cf:25:95:66:
b5:53:a1:4c:f1:6e:24:6e:49:47:58:30:c1:e9:f9:
ee:b7:35:1a:bc:b9:83:33:8d:0a:3e:0c:48:b1:37:
8d:51:bf:c6:af:7d:d2:ef:e1:c0:a9:52:58:f6:5d:
9c:c9:a0:99:98:c8:d8:5d:3f:ca:e0:3f:e0:63:f4:
2d:64:0a:c2:65:1d:bc:34:32:80:2e:a1:6d:4c:eb:
97:1a:36:83:83:5d:c3:26:43:b6:cd:bc:71:50:eb:
5f:65:f3:dc:2f:8f:7e:41:d2:aa:19:02:e0:8f:55:
8f:7d:a5:94:eb:ae:1b:83:92:5b:75:df:f8:a9:a4:
15:bc:70:2c:9e:7e:18:fc:a2:bd:ed:6f:3c:d3:f6:
f5:89:56:48:34:c2:6c:04:8d:53:78:38:08:0d:5b:
5a:c8:bc:7a:d8:1c:4f:ef:76:37:1b:31:7f:28:09:
3d:5f:a6:7a:10:20:a6:a7:52:21:2a:8f:1d:66:30:
ae:94:8d:bd:0f:75:fc:c3:20:f3:36:73:24:2d:12:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:99:DF:C5:B6:B8:B8:B9:84:20:A3:38:C5:A8:60:A9:4F:26:F9:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB21B6248A9511EEAE9C7B1E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.106.0/24
Signature Algorithm: sha256WithRSAEncryption
51:73:95:ec:c2:c9:c1:85:cc:a5:91:88:b1:41:6b:9b:0d:b1:
72:61:2b:17:30:c6:72:20:d1:e7:16:9c:b5:64:41:af:13:a2:
c0:91:75:c5:4b:e4:3d:86:14:b7:65:f6:41:6f:ef:ea:03:fa:
4f:e6:eb:36:76:33:40:6f:ec:51:27:00:2b:d9:de:71:33:58:
0b:e1:eb:f6:b5:31:b5:37:ff:5c:03:2a:d5:21:59:a3:d1:82:
ae:3e:52:2b:13:87:a2:c2:4d:01:2e:dc:67:34:ce:a7:3d:74:
04:1b:01:5c:87:4c:82:f5:97:77:cd:77:ce:c9:9b:a0:24:75:
8d:27:4f:c6:aa:7c:c7:ad:a4:6a:1d:27:26:04:98:a1:38:6b:
3a:0e:d3:ba:26:f8:92:ee:1e:80:5b:ad:86:8d:7b:4e:28:ef:
ba:86:ef:14:64:91:d8:ed:a8:9f:58:67:dc:f9:fc:b2:42:34:
7e:ac:81:6f:65:7c:51:cf:ac:7e:f9:51:ab:89:93:0b:a4:45:
e8:42:cd:79:25:f4:dc:b8:5e:66:47:a1:6e:f0:38:13:20:da:
cd:56:2a:22:ed:21:77:7f:ff:29:d3:21:e7:48:7b:98:48:38:
92:4a:7d:6d:de:28:9e:24:da:c4:e9:76:fc:54:b1:1c:5e:fc:
19:8e:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:54:53 2025 by rpki-client