Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF2DB6FC8A7F11EEA085E8534AD9E6FC.roa
File: CF2DB6FC8A7F11EEA085E8534AD9E6FC.roa (raw, json)
Hash identifier: hWfmgM/jx+YUwCS8OgkayjQhpZEtV8NqS16W+/NRT64=
Subject key identifier: 30:DA:FE:58:CB:5B:65:2D:8D:92:9D:F5:48:4D:12:31:00:37:4E:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF2DB6FC8A7F11EEA085E8534AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:13:24 +0000
ROA not before: Fri 24 Nov 2023 04:13:20 +0000
ROA not after: Tue 26 Dec 2023 04:13:20 +0000
asID: 62240
IP address blocks: 154.194.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21174 (0x52b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:13:20 2023 GMT
Not After : Dec 26 04:13:20 2023 GMT
Subject: CN=656022e4-81c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:cd:2a:32:1a:b0:0a:be:89:05:92:b0:b8:
66:89:d6:7e:22:04:67:79:a7:6a:0d:46:4e:ab:31:
f6:d6:b4:e3:41:fa:25:72:ef:e4:57:41:d7:f6:35:
9b:55:37:e4:9d:0b:20:56:70:bf:bc:e0:96:2c:4a:
d4:f9:64:08:e8:21:98:99:4f:cd:f2:c2:8d:50:ba:
99:71:ba:9e:fe:d5:75:a9:04:cd:0d:80:73:5f:58:
f8:57:1c:38:c0:e1:f3:1d:f1:31:49:ea:65:9b:88:
d1:d6:0e:dc:b5:6a:54:7c:f2:8b:95:26:f3:8c:ea:
4a:6e:b5:bd:f6:84:e9:1d:b1:be:d7:90:7f:7a:33:
7b:cb:82:c0:6e:64:16:da:b0:3a:eb:c8:f0:0d:c2:
7e:2a:8e:1d:3f:6f:dc:10:73:21:dd:21:93:a1:ad:
cc:8a:cf:f8:32:39:eb:56:a5:df:59:51:01:51:1a:
a5:52:86:bd:4c:8b:26:17:48:21:c4:c6:c6:c5:7a:
88:c4:f8:8d:82:87:3c:f6:97:c7:36:6d:29:57:8d:
be:55:e6:94:87:f2:53:f3:a5:46:80:90:fe:0f:39:
50:c8:6f:d4:b3:76:c3:f2:5e:eb:cf:f5:f0:98:9f:
5d:ab:cf:ab:ea:9c:63:18:29:99:25:9b:e8:79:73:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:FE:58:CB:5B:65:2D:8D:92:9D:F5:48:4D:12:31:00:37:4E:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF2DB6FC8A7F11EEA085E8534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:39:88:79:d5:40:1f:23:4d:dc:12:19:af:66:d9:4b:30:4e:
d9:1e:d0:b1:aa:22:5f:53:7b:c1:26:5f:b5:9d:35:40:fa:82:
86:0e:83:b5:40:fa:b5:db:5e:9b:ae:ec:85:77:e0:76:7c:9e:
10:1b:f1:51:0c:9d:05:b9:65:62:c7:04:f4:94:88:ee:b8:cb:
2d:af:40:0e:62:74:40:a6:76:e3:2a:54:91:27:8a:cb:5b:34:
d6:81:50:67:cd:e7:82:8e:a4:d7:6c:75:f3:48:b8:ed:46:e7:
b6:90:30:27:ad:da:24:33:99:f8:b6:2d:3c:74:b8:a9:46:b6:
8e:30:3f:2f:5e:6f:bc:09:9d:c3:46:89:7b:00:ff:83:f4:2e:
2c:6a:01:c2:c7:f6:9f:e0:56:c7:c2:6e:28:45:8d:e3:72:70:
be:b8:ca:6d:8e:48:c1:ea:72:d6:b6:7a:89:11:e7:80:47:a0:
f8:9d:a3:08:e7:ff:d0:8e:0c:1a:dc:7f:5a:e3:ce:a5:e6:01:
8d:f2:c7:fb:c1:c2:82:73:1c:5f:8e:2a:5e:ce:9b:b6:27:df:
32:5c:12:24:7e:81:7b:e7:17:65:3e:62:67:ae:f2:47:08:fc:
5c:65:e0:79:a3:64:f4:f5:4b:ea:51:63:ae:49:ba:72:35:56:
7c:97:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:28:41 2025 by rpki-client