Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B8A8548CDB11EEB4FCD55E4AD9E6FC.roa
File: D8B8A8548CDB11EEB4FCD55E4AD9E6FC.roa (raw, json)
Hash identifier: xZn46eCAm6bnsXUdI/fnxq5t8yUhUfBGLfodG+l9FvI=
Subject key identifier: 50:8D:A1:2C:4A:F2:DA:D2:C4:0F:66:D3:70:51:9C:CF:1A:5D:CC:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B8A8548CDB11EEB4FCD55E4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:17:16 +0000
ROA not before: Mon 27 Nov 2023 04:17:12 +0000
ROA not after: Tue 26 Dec 2023 04:17:12 +0000
asID: 62240
IP address blocks: 154.194.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21708 (0x54cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:17:12 2023 GMT
Not After : Dec 26 04:17:12 2023 GMT
Subject: CN=6564184c-9db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:21:cc:81:c4:e3:bc:0c:6b:28:b0:15:f3:
39:50:19:89:61:7b:a8:af:4d:68:33:90:93:b3:0e:
aa:44:fb:48:70:68:34:7a:09:ff:bc:42:da:5c:9e:
8c:6e:82:c5:eb:ea:20:e6:5e:c0:98:1e:4a:69:69:
8a:8e:f5:9c:8c:ee:58:af:54:14:7f:cc:d4:95:4a:
5a:94:b5:89:2e:98:cc:5f:06:e9:34:52:ee:75:0f:
08:ae:08:74:0d:b7:ce:a3:77:e6:84:34:12:76:96:
5f:7f:87:50:71:ed:8e:d1:a3:cf:d7:15:8c:d4:f9:
85:c5:80:28:a4:f3:e2:45:15:2b:2f:b5:66:25:2a:
9c:d5:84:24:20:0a:6c:46:31:9a:7b:06:a5:09:36:
ea:64:fa:09:0e:39:be:6e:ee:35:de:87:b9:6b:c7:
44:34:2f:a6:97:66:d5:14:8d:ee:91:e2:46:e2:84:
c4:31:3f:7d:a2:24:69:bc:db:77:68:84:0f:e0:e2:
90:74:15:32:f9:f0:72:5a:1a:5f:dd:42:99:9e:01:
a5:e9:d0:63:1a:a8:5a:df:c9:86:8b:a3:64:d6:36:
55:20:f0:3c:eb:43:94:6a:0f:df:3e:89:46:92:60:
41:fe:4f:5d:e8:15:19:7e:05:b8:ae:82:66:b5:c8:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8D:A1:2C:4A:F2:DA:D2:C4:0F:66:D3:70:51:9C:CF:1A:5D:CC:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B8A8548CDB11EEB4FCD55E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:39:48:e1:a6:b0:10:46:6c:33:5a:e9:0e:f8:52:4d:c3:89:
3a:36:e9:66:43:26:5f:b9:34:b9:44:8c:15:df:62:20:e4:38:
e1:92:03:f8:8b:59:21:1e:38:16:1b:7f:01:d4:5a:10:0d:3f:
d2:9d:8c:06:4a:f2:30:e4:b4:4d:3b:7d:ca:2a:b8:0b:71:21:
66:28:f5:9e:b6:aa:20:51:a3:e0:8e:45:12:41:17:c2:7f:2d:
ef:6d:84:f5:b9:ca:94:4e:75:42:f1:64:07:d4:64:32:d8:97:
64:17:8b:ce:2a:a4:aa:e3:27:0e:8f:60:4e:c3:92:40:76:cb:
61:a0:9d:d2:6a:64:b0:a6:99:35:c6:6b:de:f2:46:df:e1:88:
d8:b5:76:6d:cf:3f:ed:5d:f6:fd:f3:5a:f1:74:48:38:b7:21:
ff:49:7c:6a:ed:b3:ec:71:ad:30:41:6a:3b:af:bb:85:ab:e2:
c0:99:1c:61:29:ac:90:94:c8:49:a5:9c:c3:8b:96:b9:0a:63:
84:34:57:e5:cb:f1:f7:b0:ae:1f:98:62:a6:cb:a1:95:33:d0:
d3:43:a4:a7:da:1c:e7:fd:38:3b:9c:f7:af:48:92:14:ef:30:
e2:58:ae:14:b8:5e:d7:ed:d0:60:89:9b:f0:7c:86:2a:d9:f0:
e9:69:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:08:04 2025 by rpki-client