Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCDB713E8CDA11EEA517855B4AD9E6FC.roa
File: CCDB713E8CDA11EEA517855B4AD9E6FC.roa (raw, json)
Hash identifier: Da3RPEZx2aRPsI88CZOD8p/vozavebQ7kdh+RPhLZ1E=
Subject key identifier: 5B:8A:AD:5B:40:A3:E8:2B:60:57:A3:B6:23:01:C3:A8:FB:6B:4C:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCDB713E8CDA11EEA517855B4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:09:46 +0000
ROA not before: Mon 27 Nov 2023 04:09:43 +0000
ROA not after: Tue 26 Dec 2023 04:09:43 +0000
asID: 62240
IP address blocks: 154.195.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21682 (0x54b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:09:43 2023 GMT
Not After : Dec 26 04:09:43 2023 GMT
Subject: CN=6564168a-13b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:57:e1:96:89:26:4e:9e:1c:85:71:0c:ae:
36:c0:d1:6c:0d:3e:ee:aa:eb:72:92:06:c7:24:ba:
1b:40:15:00:8c:79:52:70:2a:a8:0a:6d:de:25:0c:
70:ce:2a:0c:bc:16:b2:68:de:bc:1b:4b:1e:eb:90:
95:3b:23:d2:0e:f0:04:5d:11:fa:df:72:0f:fe:cd:
3c:f0:f1:82:f3:00:6d:67:b5:14:c0:81:b4:78:0f:
fb:a4:78:d8:b8:df:bd:4b:fb:33:fc:a6:6f:e4:51:
3d:2e:99:78:ef:cb:b5:a3:10:b9:3e:47:6f:dd:1e:
fe:57:08:b3:fa:2e:7b:a9:43:41:c8:cb:c4:13:31:
7c:68:30:9e:bc:17:e2:58:5e:a7:df:b1:8c:c1:2a:
46:54:09:c6:c3:6f:84:42:64:b2:b1:b7:b5:88:ba:
56:71:b4:f0:ee:8d:dc:03:6d:8f:72:10:c5:ee:db:
ea:89:b0:1d:de:02:d5:00:f7:b4:fd:db:bd:48:be:
fa:a3:e3:c2:8c:1f:9c:c6:88:38:62:fd:fa:86:61:
01:3e:7b:dd:dd:d7:80:79:49:ca:0c:73:a4:df:e2:
67:70:21:55:45:36:18:75:b6:44:94:1e:00:37:20:
95:c3:6a:01:f7:6e:be:b5:7f:c5:cb:83:31:5b:c4:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8A:AD:5B:40:A3:E8:2B:60:57:A3:B6:23:01:C3:A8:FB:6B:4C:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCDB713E8CDA11EEA517855B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.147.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:10:0a:a3:62:09:c5:91:a0:13:c2:f0:e3:91:05:e3:31:38:
08:d8:b9:6a:64:94:3c:39:69:a3:77:a1:d6:e2:7c:56:29:a2:
dc:d2:78:2f:9c:a3:f7:c4:cf:41:3e:c9:88:a0:23:87:a1:e1:
57:21:46:b6:ef:cb:50:bd:8d:c8:e3:b9:81:95:f1:ba:e2:f0:
3b:dd:9f:bb:54:e2:87:a3:05:48:f9:92:87:31:8b:67:05:fd:
6e:7d:90:dc:f5:2c:58:1d:14:98:b6:d6:cd:9a:d4:38:97:49:
ca:63:1f:bf:a2:10:ac:1e:53:b1:7b:b2:47:c1:61:b3:50:6c:
d9:21:ab:b1:33:b4:ea:6d:e3:d4:95:00:cc:7d:14:0e:99:1a:
a7:d2:8a:bb:c0:74:25:30:ac:22:9e:9b:21:03:6b:4b:d5:50:
a4:ce:6b:b6:25:9e:cb:4b:7c:dd:75:e8:4d:e1:92:44:ae:9d:
d8:91:4c:c2:59:15:39:04:74:28:c7:d1:99:8a:59:4e:6a:08:
c2:f6:6f:9f:59:41:b8:8c:71:46:88:24:a7:2e:ec:40:d8:07:
20:0d:3d:76:67:17:38:9c:65:7b:55:f2:ea:c3:19:50:c1:4a:
8a:90:0f:3e:31:95:80:74:2b:77:37:f4:0c:76:9f:85:10:0d:
4f:95:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:13:26 2025 by rpki-client