Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D612D5708A9C11EE8B1A48354AD9E6FC.roa
File: D612D5708A9C11EE8B1A48354AD9E6FC.roa (raw, json)
Hash identifier: NQknVmnxXUAQs2X4JNl8TvE2cQ5jxH0SUZzFrGl3w8g=
Subject key identifier: 98:B8:75:31:34:A5:85:BE:B9:0B:DF:38:5E:60:60:E0:30:FC:AC:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 548B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D612D5708A9C11EE8B1A48354AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:41:11 +0000
ROA not before: Fri 24 Nov 2023 07:41:07 +0000
ROA not after: Tue 26 Dec 2023 07:41:07 +0000
asID: 62240
IP address blocks: 154.195.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21643 (0x548b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:41:07 2023 GMT
Not After : Dec 26 07:41:07 2023 GMT
Subject: CN=65605397-f57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:58:00:50:b8:4a:48:47:0d:c7:0e:28:7f:
6e:19:6b:a6:57:5c:e4:8e:86:60:c5:36:59:99:76:
46:f2:2a:c4:8e:ee:70:e7:65:f7:ea:69:10:37:73:
ef:73:40:69:52:99:54:43:23:7a:3e:b1:4b:a9:e0:
4a:d0:8a:60:e2:9a:b9:c9:51:72:73:e6:6a:2f:d4:
47:37:a1:6c:38:af:98:05:04:80:83:5d:d0:63:1a:
c6:dd:e0:32:f3:d6:33:17:41:18:6e:df:6a:70:6b:
63:d0:0e:bf:57:9c:09:8f:02:62:26:b5:76:fd:3f:
68:a8:7a:d0:5e:0d:ba:2b:0e:2f:c3:6f:c6:8d:8b:
70:dc:19:cf:90:55:3b:46:97:d5:03:47:8c:1c:b6:
20:17:30:40:3d:93:53:aa:31:5e:35:4c:83:86:76:
a1:ad:99:cb:6a:dc:82:f0:96:ad:b8:b1:2c:eb:7b:
e0:4b:ef:47:bc:16:54:89:bc:f8:d5:06:b6:95:3c:
eb:2a:b2:9c:88:06:9f:09:f9:40:19:e0:09:00:a2:
b8:07:3d:0f:17:c9:4b:3a:0d:fb:a0:16:08:65:25:
90:6b:88:45:cb:0b:05:72:6f:29:e5:4f:ae:97:c5:
14:22:55:54:5b:82:0a:13:a6:5d:4a:7e:ae:78:8c:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B8:75:31:34:A5:85:BE:B9:0B:DF:38:5E:60:60:E0:30:FC:AC:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D612D5708A9C11EE8B1A48354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c2:2a:8b:3e:a2:19:68:52:29:e4:8c:c5:cc:89:48:9d:12:
68:f0:f5:39:70:2a:8a:dd:6e:22:98:43:37:f5:63:cd:aa:cb:
2b:5b:2e:68:1b:d2:81:36:71:21:4e:be:15:73:16:f5:9d:38:
1c:dc:33:f1:03:3f:64:62:79:b4:85:54:49:c4:2c:97:1c:b2:
a1:89:e0:8e:7c:a9:58:42:1f:ea:c5:4d:aa:df:96:66:2e:35:
a3:04:84:38:d7:a3:b9:2c:ae:1d:8f:04:91:78:47:25:79:94:
6d:ae:2f:3e:83:5a:55:12:b5:82:e6:1a:99:b1:f2:89:46:bc:
fc:13:aa:47:97:86:1e:cc:7a:ca:56:90:ed:7d:1e:72:18:2b:
da:e7:8e:66:fc:d4:a4:85:25:8e:ce:ff:a5:4e:79:c4:b7:98:
21:60:b4:2c:28:58:27:13:4e:42:6d:28:bb:c3:ed:27:80:7d:
4b:5a:39:48:f5:98:74:55:52:b9:db:6f:99:37:26:7d:27:a1:
ce:a4:68:71:d2:e8:96:ee:4c:2b:b6:11:5e:6e:fe:0e:81:3f:
e5:7e:6c:03:49:c9:71:89:88:f9:05:72:10:3d:75:3e:ff:bb:
20:48:81:94:36:c3:34:5a:f0:53:69:6e:ea:67:af:98:93:4c:
f7:2c:27:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:16:16 2025 by rpki-client