Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3C472F68A7E11EEA157BB504AD9E6FC.roa
File: D3C472F68A7E11EEA157BB504AD9E6FC.roa (raw, json)
Hash identifier: ihpJ5AL+l/woMK6UB7eHa2mmksXghcDNiCZeuyTe28M=
Subject key identifier: F6:20:93:F7:90:F2:22:39:3C:DC:A1:A8:68:35:F4:9E:47:D4:7D:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3C472F68A7E11EEA157BB504AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:06:22 +0000
ROA not before: Fri 24 Nov 2023 04:06:19 +0000
ROA not after: Tue 26 Dec 2023 04:06:19 +0000
asID: 62240
IP address blocks: 154.195.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21154 (0x52a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:06:19 2023 GMT
Not After : Dec 26 04:06:19 2023 GMT
Subject: CN=6560213e-1d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:ce:c1:4b:32:db:bd:bf:26:ff:5e:17:33:
69:6e:b1:25:dd:cd:28:58:42:b2:03:96:41:92:3b:
56:f6:82:a4:cf:ab:ee:82:a1:81:2d:9f:ae:4e:c6:
39:c8:0b:f0:1d:df:d2:0e:79:44:5c:0f:5c:cc:14:
fd:21:94:9d:be:19:5d:5c:a5:87:02:69:8a:8e:43:
2a:a3:78:7b:c3:4e:6d:04:85:33:21:e8:cb:c1:11:
29:13:30:f3:ba:15:32:6a:43:ad:e1:9b:c0:30:4b:
47:d9:fb:ba:5b:5a:7f:06:e1:10:26:55:84:18:93:
14:4f:46:22:5f:ff:9e:0a:30:26:4f:d2:12:34:d7:
e0:01:2e:ff:49:8e:73:83:55:31:bb:3c:fa:c0:9f:
f5:b0:a2:74:ef:5c:27:0e:c7:48:c4:8e:05:88:6e:
6f:b2:03:27:2f:40:da:90:9a:af:44:2d:cc:68:0f:
88:77:c2:bb:62:2c:d3:a1:44:a8:c3:81:30:29:24:
ab:f5:e9:5c:e4:92:b8:0c:28:ad:64:72:0f:4c:d9:
36:98:11:26:1a:d1:75:53:23:55:87:0e:85:42:0e:
37:be:64:7f:b3:07:99:43:e1:7c:4d:fa:7c:b6:95:
e9:2a:34:a2:21:de:bd:4d:d6:85:94:b1:67:8b:c0:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:93:F7:90:F2:22:39:3C:DC:A1:A8:68:35:F4:9E:47:D4:7D:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3C472F68A7E11EEA157BB504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.162.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:dc:1f:a4:d2:ae:e8:3e:e9:9c:47:3a:78:3a:57:d4:bb:cb:
34:92:19:67:63:7b:e1:96:68:ca:fe:49:17:a3:67:8d:d0:2a:
a1:70:2c:f4:ae:5d:52:8e:bd:dd:d7:e3:9e:e4:4e:41:0e:f2:
26:f9:2f:61:17:7a:29:a0:6e:8b:a1:22:89:97:2a:a5:90:87:
ae:a7:a8:db:21:c8:fb:38:c7:c0:ff:d2:17:22:fe:2f:00:75:
12:98:c4:8d:24:1b:7d:27:68:70:23:ab:bc:54:1d:ff:5f:c7:
11:8e:09:46:11:2e:23:9f:d3:72:f9:a9:30:6c:ca:f4:a6:2e:
fe:08:3c:db:f2:c2:80:ef:ed:3a:5d:2e:08:2e:e5:9a:f4:c9:
ee:29:b0:e7:89:64:6a:95:ad:64:0d:07:29:92:8f:da:f3:05:
51:0b:ec:49:bd:8e:04:9b:ce:3b:d9:2d:18:11:d1:f1:88:9c:
95:c4:72:08:4f:00:81:ee:8f:67:af:06:bf:ca:1d:85:87:37:
fb:6c:f6:e3:11:eb:50:e8:47:74:07:75:b2:19:da:1b:0b:78:
e6:0a:e0:f5:4a:ff:db:d6:0a:10:b6:d2:7a:71:05:63:9b:54:
47:dc:93:e4:69:75:10:4c:a7:5c:7f:6e:7a:9d:8a:b8:dc:49:
c2:80:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:12:23 2025 by rpki-client