Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D518EA988A9611EE86A7D6214AD9E6FC.roa
File: D518EA988A9611EE86A7D6214AD9E6FC.roa (raw, json)
Hash identifier: 4OBWFBJRVAPBU+KjYvwpv7djp3rm6UPpYJIXgSMam2o=
Subject key identifier: 27:51:4C:51:02:6B:D5:F3:0E:18:43:EF:AB:8B:CB:CF:20:5E:84:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5410
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D518EA988A9611EE86A7D6214AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:58:12 +0000
ROA not before: Fri 24 Nov 2023 06:58:09 +0000
ROA not after: Tue 26 Dec 2023 06:58:09 +0000
asID: 62240
IP address blocks: 154.196.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21520 (0x5410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:58:09 2023 GMT
Not After : Dec 26 06:58:09 2023 GMT
Subject: CN=65604984-9fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:1e:3c:48:a8:e2:de:63:c3:7b:bc:de:3d:
cc:90:89:47:65:b1:b8:e8:f7:7b:d4:f0:16:a7:20:
8f:38:5b:d5:7c:aa:0e:22:9c:72:bc:2a:45:48:43:
f8:f7:02:fd:55:0f:ba:65:b9:59:97:2f:c9:08:48:
47:7d:b6:43:33:7a:d3:38:ae:03:31:bf:cb:ea:25:
bc:10:af:0a:84:5a:6b:ac:93:6a:eb:8f:84:4e:d2:
0f:8f:88:fb:fc:7b:e0:43:e4:78:55:9f:ed:26:99:
4b:f6:23:7a:20:76:55:2b:54:00:28:bc:78:21:64:
35:78:c8:81:90:2c:bc:d9:79:dc:ab:49:60:a3:72:
ab:7c:57:dc:6a:35:93:fe:87:ad:e0:b1:4a:5a:c6:
c9:63:af:a1:1f:ca:1c:00:7d:d2:e6:27:01:74:c6:
eb:6f:57:c4:66:4b:7f:2e:db:7c:22:79:32:28:a8:
23:96:8c:7f:c0:03:fc:a8:01:04:db:50:d8:84:8b:
63:e2:af:91:fe:68:36:2e:ea:d5:60:23:48:77:fa:
6c:05:2c:a6:e0:ab:dd:2c:cb:c3:74:74:17:1e:47:
7d:f9:c7:8f:39:92:45:bc:05:32:e5:6e:25:b6:d3:
aa:54:23:88:0f:bd:7e:5c:89:49:44:09:71:2d:a3:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:4C:51:02:6B:D5:F3:0E:18:43:EF:AB:8B:CB:CF:20:5E:84:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D518EA988A9611EE86A7D6214AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f7:bf:70:44:24:91:20:4a:29:a1:22:9c:07:c9:00:5a:cb:
56:6d:f2:06:ab:5c:ef:71:a5:2e:8d:2d:9b:bc:e1:c5:6a:08:
5a:57:6c:11:68:33:a4:52:b9:e3:ac:f1:b7:78:e6:cc:e9:91:
b0:6d:55:83:c1:5f:3a:b4:81:34:5b:2a:e1:c8:de:ee:1c:86:
33:85:e5:6e:e0:02:2d:5a:bd:86:49:fc:a8:19:32:23:d1:42:
72:29:c0:b9:23:0e:30:25:b0:57:cd:90:bb:b5:5a:84:0e:ac:
cf:81:d0:d4:e7:b8:c0:09:fe:aa:95:36:41:03:cc:1b:53:df:
bc:e6:ee:3b:d3:b6:6f:3c:7c:48:e1:1b:fa:a6:aa:bf:13:34:
90:b1:7d:c6:19:49:d5:ac:71:8f:2a:49:76:ed:d4:00:3c:fc:
7d:ff:36:d2:37:0e:17:52:f6:ca:b4:f9:f6:c6:a0:a1:b8:b2:
3e:cb:b6:9a:79:a8:6a:3b:de:29:ec:85:38:91:59:ae:1d:1e:
b3:14:7e:f0:7d:6b:b4:07:05:00:9f:55:c5:e7:06:ab:af:c0:
22:8a:dd:63:ab:73:20:68:f6:d9:82:56:b2:21:1a:56:80:a6:
76:5b:24:38:56:0e:f9:82:89:e0:7f:e0:fd:15:5d:df:f7:5a:
54:e7:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:01:24 2025 by rpki-client