Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6094FB8901F11EE90CD355BD25BE465.roa
File: D6094FB8901F11EE90CD355BD25BE465.roa (raw, json)
Hash identifier: XpRjztQIet+DMQP7UXmGxwXRIuTwGyRbOHnNIHyFCWg=
Subject key identifier: 18:56:63:48:A5:F0:CF:CA:BD:82:AC:65:DB:63:46:49:AB:10:50:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5715
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6094FB8901F11EE90CD355BD25BE465.roa
Signing time: Fri 01 Dec 2023 08:01:31 +0000
ROA not before: Fri 01 Dec 2023 08:01:27 +0000
ROA not after: Fri 05 Jan 2024 08:01:27 +0000
asID: 397423
IP address blocks: 154.93.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22293 (0x5715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 1 08:01:27 2023 GMT
Not After : Jan 5 08:01:27 2024 GMT
Subject: CN=656992da-f137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:a6:4d:44:13:87:0a:8a:e4:53:f7:4b:b2:
0f:a5:dd:c3:aa:a0:10:73:39:c1:b7:5c:38:2e:e1:
94:af:73:c1:05:66:88:2c:d3:ad:38:70:e1:62:48:
9a:bb:3b:08:0b:a1:f6:c7:49:c6:b9:a1:81:44:1e:
f8:2b:7d:e9:d8:8c:47:bb:54:f1:c9:23:8b:aa:b3:
35:c0:ce:42:c3:d2:1e:d4:3a:0c:fe:4b:d7:8b:99:
22:a3:33:57:7d:8a:d6:ba:f6:29:28:1f:1f:ad:41:
67:5c:e2:bf:5a:41:dc:8f:f5:9a:59:35:13:78:2d:
a1:d0:82:db:cb:23:61:5b:06:de:cb:23:de:f0:dc:
0f:8c:3e:77:75:ef:2b:a1:89:a3:95:e2:db:9a:cd:
e8:a7:6e:e5:61:ef:26:db:9c:a7:e6:db:98:c2:ed:
2b:49:35:9c:da:28:35:95:e7:91:01:e0:97:e8:b4:
99:fd:fe:20:75:75:3e:f8:4e:4d:52:1b:32:aa:e3:
8f:0d:0e:7f:91:a7:13:64:ed:1c:90:9d:08:b6:7e:
c7:88:e6:9a:90:f4:d3:c8:93:71:ac:61:f9:45:26:
4a:4a:98:a4:0a:b7:03:ab:7e:61:f7:8d:c0:01:7c:
4e:98:43:a1:8e:0a:20:60:82:6f:32:68:a7:cd:bf:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:63:48:A5:F0:CF:CA:BD:82:AC:65:DB:63:46:49:AB:10:50:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6094FB8901F11EE90CD355BD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.27.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e0:10:25:71:bc:d3:c4:97:ae:16:bd:45:af:ce:6c:ef:6d:
9f:2e:02:8f:08:06:05:79:9b:1c:08:74:bd:1b:a6:c5:fe:88:
1e:d2:a2:0a:79:6a:a7:d6:c2:ac:ee:62:65:c2:ee:63:1c:a6:
3c:1a:f2:50:c2:ea:df:e8:8b:64:26:88:66:de:0c:0d:da:1f:
13:91:1b:29:ed:3e:73:b8:98:bc:22:8d:5e:66:b5:1e:86:77:
2d:2a:50:2b:18:de:eb:52:c8:31:f2:cd:60:58:1d:30:75:fb:
56:31:e8:53:c5:6d:8a:af:d7:0c:25:54:e8:34:c1:6b:24:8b:
19:f6:23:2b:8b:78:cb:9e:3a:a4:f4:8a:4c:69:76:2b:0a:55:
82:c9:7b:2f:ab:41:be:c8:ad:e4:73:57:a9:47:97:da:bf:1f:
a6:f6:03:cd:72:82:27:43:7a:b7:30:50:37:66:63:3b:c9:a7:
75:69:15:cb:61:fa:37:12:9c:65:dc:1d:bb:f3:8b:d8:5e:82:
c9:6b:82:60:24:92:3d:9a:07:94:3a:38:ad:08:92:d3:1f:fe:
06:52:82:99:43:86:5a:db:21:51:92:5c:11:e3:3b:81:b6:8e:
db:99:8c:1f:dd:32:75:db:ec:63:2e:e1:b0:2e:3f:77:f7:31:
81:b4:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:29:06 2025 by rpki-client