Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D75CAD948A7D11EE9DA37C4D4AD9E6FC.roa
File: D75CAD948A7D11EE9DA37C4D4AD9E6FC.roa (raw, json)
Hash identifier: nngKa0qStDRlaXfdRnt2/yxvbi2se8Bk5f2vpUyD85U=
Subject key identifier: B7:CD:45:45:7A:5A:9A:34:53:41:2D:27:9C:9D:EB:0E:91:ED:92:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 528A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D75CAD948A7D11EE9DA37C4D4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 03:59:18 +0000
ROA not before: Fri 24 Nov 2023 03:59:15 +0000
ROA not after: Tue 26 Dec 2023 03:59:15 +0000
asID: 62240
IP address blocks: 154.196.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21130 (0x528a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 03:59:15 2023 GMT
Not After : Dec 26 03:59:15 2023 GMT
Subject: CN=65601f96-d9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:0c:e6:f2:38:81:cf:35:05:b8:69:45:fd:
34:e0:e2:37:50:ef:2d:97:eb:b5:00:7d:95:86:ac:
9c:3e:0c:e2:65:d5:a1:9b:71:b5:ad:06:32:73:d4:
61:6e:39:5b:74:ba:07:2f:8d:53:14:96:73:59:61:
96:63:b4:85:30:ba:de:26:41:b1:7a:91:32:ce:c4:
7f:78:4d:4a:40:3a:92:5b:9e:aa:2e:a7:61:74:ae:
ff:d1:55:32:bb:d7:76:56:58:3d:27:80:f3:20:73:
10:bf:51:e4:a2:8f:f3:df:c8:8b:7c:f2:f0:64:e2:
c6:d6:be:70:d8:00:b9:f4:c5:2e:18:a4:20:77:98:
c5:b0:3c:ff:15:f6:31:75:03:b4:a0:1a:c0:9a:e5:
23:86:8f:be:68:d2:e6:30:33:57:08:73:f0:9a:c6:
17:1c:6e:be:13:40:53:ba:cd:34:52:38:5a:01:6c:
1e:0e:66:e7:c4:03:fd:7c:c2:96:a2:cc:53:4c:a9:
41:47:5a:23:3a:04:92:92:1b:b8:a3:8c:4b:45:fa:
c1:b9:ff:a2:f1:ec:16:55:74:4f:1d:0b:00:09:1b:
13:ef:86:45:df:e0:79:e2:97:9e:ed:d8:09:b7:78:
8a:50:ea:ca:a7:8d:65:e6:d0:f3:09:13:4d:e1:0e:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CD:45:45:7A:5A:9A:34:53:41:2D:27:9C:9D:EB:0E:91:ED:92:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D75CAD948A7D11EE9DA37C4D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.46.0/24
Signature Algorithm: sha256WithRSAEncryption
42:40:db:fd:1c:05:ed:ca:9d:e1:67:3e:73:98:94:15:24:ad:
c6:25:ca:ff:55:83:3f:dc:41:38:fc:15:9e:3b:8a:84:02:89:
4c:42:d5:34:86:4e:50:53:dc:74:0d:90:84:56:c1:ba:82:4a:
ff:68:24:27:0d:f2:ff:6b:0e:6f:fa:67:1d:bb:de:4d:8a:61:
cd:cc:01:e9:f9:52:0a:40:be:68:7d:a6:c3:5b:b1:5b:9f:1d:
ec:2e:8c:e1:fa:6d:60:d3:38:5d:4e:4b:2f:97:54:69:50:4e:
ee:0b:91:3f:0b:a1:a4:c8:9b:24:db:bf:9b:de:83:62:97:da:
a8:64:fa:5e:bd:5e:2f:7f:4a:32:5a:e1:c3:10:64:ee:4b:dd:
46:f2:fc:f1:4b:6f:af:c8:78:20:b3:dd:b0:53:a5:2c:03:4a:
38:e4:70:5a:bc:a2:72:34:5b:f6:fb:39:69:70:f8:bb:5c:5f:
e0:38:fc:b8:79:89:be:55:c5:2b:2d:ad:00:f4:3f:d1:85:6e:
30:45:62:92:f5:8e:60:e6:35:83:ea:81:a7:7d:dc:52:ba:3d:
2e:0f:de:1b:32:bd:17:34:8d:2a:e1:4a:7e:9a:85:ee:12:b3:
77:97:2e:0f:57:ef:a4:b2:05:b5:e0:b3:9f:08:35:67:17:48:
a5:de:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:17 2025 by rpki-client