Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0EE7CA68A8411EEABA454654AD9E6FC.roa
File: D0EE7CA68A8411EEABA454654AD9E6FC.roa (raw, json)
Hash identifier: uS96JHS0DxeYk3YpI+cti7EaTGq32864jZwP194qlnA=
Subject key identifier: F6:55:82:5D:DE:E8:41:D6:A2:00:05:DA:CF:7F:57:A7:78:CD:B1:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0EE7CA68A8411EEABA454654AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:49:14 +0000
ROA not before: Fri 24 Nov 2023 04:49:11 +0000
ROA not after: Tue 26 Dec 2023 04:49:11 +0000
asID: 62240
IP address blocks: 154.194.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21236 (0x52f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:49:11 2023 GMT
Not After : Dec 26 04:49:11 2023 GMT
Subject: CN=65602b4a-2983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:0b:0e:45:1d:82:f1:10:7d:9a:9a:27:af:
a2:02:7c:8a:22:82:61:a3:97:e6:0b:30:3b:a2:86:
59:63:bf:54:61:fd:8c:9c:3f:a7:dd:de:5e:63:13:
f4:54:53:b8:ec:b0:52:ae:a5:80:9e:a2:fb:17:10:
76:c9:df:16:a9:7e:4a:89:26:28:2d:ef:9d:02:63:
27:17:c5:ff:27:1a:64:b4:58:19:99:7b:36:9e:4f:
0b:d9:97:73:3b:d3:61:04:9c:23:23:97:da:73:d5:
b0:66:ee:89:dc:2f:cb:ec:a7:5e:ee:d6:70:ca:19:
19:c3:68:01:6e:a9:bc:5f:75:4f:eb:a7:2a:74:11:
11:bf:f1:bf:0c:51:05:e7:e9:2c:22:ff:0e:83:4f:
19:9a:cb:21:a6:63:6b:d2:79:ce:d2:a9:12:5a:93:
08:8e:03:87:ee:b0:f3:98:b1:13:07:23:10:5a:30:
a2:a2:f3:5f:af:a8:2e:da:65:d0:eb:38:6a:08:8e:
fa:58:b0:ef:f9:e0:75:d5:de:f6:e3:2b:f8:90:60:
67:92:f0:2e:12:38:18:03:f7:32:7a:04:b4:75:eb:
c7:02:57:0f:2a:14:e6:23:32:e9:ba:d3:2d:83:0b:
72:78:fb:ac:0c:ec:3e:b2:8f:30:93:3e:b2:17:28:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:82:5D:DE:E8:41:D6:A2:00:05:DA:CF:7F:57:A7:78:CD:B1:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0EE7CA68A8411EEABA454654AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.80.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fc:30:ca:13:45:fb:98:39:18:28:dc:99:0b:10:77:7a:20:
f8:2c:4a:3b:48:4b:e0:2e:b4:19:b9:76:ed:f9:75:ec:b5:c5:
86:29:d5:b6:7a:ea:ea:e5:41:95:c6:24:09:85:14:ce:34:bd:
0f:5a:89:8d:d0:b4:a6:e4:39:47:a5:89:b3:6f:c7:d0:63:83:
3f:3c:ac:c8:0c:b8:9a:3e:c1:b4:45:31:30:ee:57:09:1b:c6:
b1:82:4e:44:01:8f:7f:14:72:09:85:a0:13:1f:61:06:3d:13:
6e:9b:1b:5e:9c:40:7b:6a:6b:07:85:64:28:ab:cc:c0:70:27:
ca:99:a3:36:71:22:5f:cd:dc:05:a4:36:d9:89:43:5f:4b:e9:
16:27:f2:8e:df:4f:08:72:81:26:90:29:ea:58:cb:bc:bf:1d:
74:8e:29:cd:6a:12:ed:b3:1e:58:f0:ed:de:d8:df:90:ec:42:
81:65:31:c8:0c:1e:47:0a:a6:ef:a2:23:02:68:ef:7e:3b:18:
ca:99:9d:b4:de:e5:0e:c4:7f:53:47:d4:ca:3e:07:60:b8:5b:
a6:5e:3f:83:e4:0e:e9:53:2d:b7:21:ab:70:77:37:d9:7a:fc:
22:af:f8:66:7d:40:b3:ff:e2:ea:31:fb:db:d4:92:a6:73:20:
aa:70:01:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:58:05 2025 by rpki-client