Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0D2CE888CDD11EE92D14C654AD9E6FC.roa
File: D0D2CE888CDD11EE92D14C654AD9E6FC.roa (raw, json)
Hash identifier: lrqv+IM9+es3hGLRFAvWTRncqqEJNTE34Phez9idihc=
Subject key identifier: 46:2C:33:AC:5F:E8:11:5C:F5:DC:05:72:EF:55:B5:44:BF:56:7B:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0D2CE888CDD11EE92D14C654AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:31:21 +0000
ROA not before: Mon 27 Nov 2023 04:31:18 +0000
ROA not after: Tue 26 Dec 2023 04:31:18 +0000
asID: 62240
IP address blocks: 154.196.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21758 (0x54fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:31:18 2023 GMT
Not After : Dec 26 04:31:18 2023 GMT
Subject: CN=65641b99-c870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:e3:38:b0:09:9f:d0:c2:c6:81:51:c6:07:
f1:77:b1:c8:06:c1:67:bc:f1:9e:be:2e:35:19:87:
c2:30:e0:6d:2c:78:41:1d:de:32:56:57:d3:ca:d7:
6f:af:ca:b0:75:d5:d9:35:91:2a:cc:50:80:93:b6:
6f:aa:d7:b5:b9:fa:10:5d:65:d4:8b:1e:38:65:63:
78:6b:aa:b7:c3:79:29:32:d2:99:e4:c8:6a:5d:f0:
49:b2:78:8c:65:73:8c:83:22:7a:09:c3:b6:24:91:
c6:b7:62:a2:69:58:a8:d7:da:3b:66:68:ff:44:71:
26:97:36:95:9d:d9:42:c1:20:29:18:28:44:3d:81:
34:b6:09:f1:57:ab:be:76:e0:2d:5b:77:d6:1d:1c:
c0:98:da:a4:db:41:87:12:31:ef:1f:19:2d:01:78:
a9:36:7f:d1:13:30:a8:2b:35:97:87:3c:0c:fc:5e:
3e:6c:b3:11:4c:ea:e1:2d:19:7e:b2:71:09:77:4d:
58:43:bb:3c:70:95:03:41:d1:85:77:84:b0:a2:3e:
50:06:e6:96:8d:01:4a:a3:e0:1d:a6:51:8a:01:4a:
fc:66:94:bf:c6:e1:e6:c6:1d:08:b8:1e:8d:f4:76:
19:7b:c0:7f:15:7e:9a:29:02:b9:11:c0:22:9b:4c:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2C:33:AC:5F:E8:11:5C:F5:DC:05:72:EF:55:B5:44:BF:56:7B:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0D2CE888CDD11EE92D14C654AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.88.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:f0:e4:fd:1d:bb:d4:e5:c2:b5:03:d9:d7:d2:bd:c6:d0:7e:
fc:bb:4e:73:2e:d0:1b:61:aa:44:91:89:80:5d:34:48:0b:01:
a0:88:82:2e:e3:fc:13:e2:a3:5b:61:c4:18:8b:07:1c:e9:22:
51:0c:36:19:77:fd:ea:cd:a4:3c:79:6b:ae:c6:6a:8c:dd:fe:
0c:77:40:ba:f2:14:9b:1f:cd:9a:33:7f:1e:9e:42:8c:0d:f7:
d6:d5:a6:3f:94:cd:51:68:a7:b4:6c:aa:a0:16:30:d4:34:5b:
5b:35:3d:86:f0:8d:c3:9e:ba:c3:0c:08:e9:e6:e8:a8:b2:6f:
a4:a6:8b:b1:36:a4:44:a1:44:a3:dd:d9:a2:48:10:36:e8:26:
84:79:43:b2:36:cd:eb:dc:86:e3:e0:51:5d:78:27:31:c4:1e:
40:4c:6b:33:e2:b6:ac:2a:5f:0f:9f:3a:26:15:2e:d3:39:01:
87:f2:b3:1b:84:bc:68:13:44:7f:b9:e8:ec:90:39:f0:84:a7:
5c:a1:dc:d0:ae:6c:9d:e3:c9:6c:1f:8d:bb:d9:0b:63:20:b3:
79:0b:a9:67:91:9f:5b:31:cb:15:b7:15:11:93:37:21:b9:75:
f2:25:0f:df:62:6c:8a:4d:67:cb:a9:94:d5:ff:83:b3:b3:3d:
2b:62:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:49:02 2025 by rpki-client