Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D91E59E68CDC11EEA2B829624AD9E6FC.roa
File: D91E59E68CDC11EEA2B829624AD9E6FC.roa (raw, json)
Hash identifier: M6fP0tLiwaYXLyyf2h1aGx69uN+EC41obW/v6GjSQtc=
Subject key identifier: 11:A9:20:F3:83:62:2F:E3:C9:FE:2E:2A:3E:39:E3:1B:32:2A:48:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D91E59E68CDC11EEA2B829624AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:24:26 +0000
ROA not before: Mon 27 Nov 2023 04:24:23 +0000
ROA not after: Tue 26 Dec 2023 04:24:23 +0000
asID: 62240
IP address blocks: 154.195.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21733 (0x54e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:24:23 2023 GMT
Not After : Dec 26 04:24:23 2023 GMT
Subject: CN=656419fa-916e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:64:fa:2f:d7:32:6c:24:f5:56:5a:ca:41:
86:d1:54:f0:26:f5:71:06:58:d3:db:13:48:15:25:
cb:36:8d:7c:5d:2d:d4:b9:97:a9:f5:b9:59:c5:48:
97:e5:7e:02:52:b1:e1:d6:59:72:eb:66:85:26:97:
39:5b:b1:c1:05:61:62:c3:5d:4b:b9:04:da:6b:16:
8d:50:7a:05:13:5b:56:56:60:8a:49:e9:e1:b3:b7:
10:46:03:ba:fa:cb:e2:34:93:95:c3:16:66:87:ec:
5b:3d:9d:01:8e:c9:a1:40:bb:8c:5e:59:6a:9f:ee:
7b:4a:36:49:6c:7a:22:38:e6:ab:3f:11:ad:f1:37:
92:94:ce:95:da:69:4e:56:3f:54:c3:6b:26:a5:70:
70:6c:f1:e9:45:2e:dc:f9:59:cb:00:7b:e9:ef:90:
db:e9:1f:85:5a:24:f8:53:b3:5b:18:43:63:1a:74:
c2:c5:8f:c2:84:ee:61:ce:dd:30:74:6d:43:a6:18:
0b:1f:81:16:6f:dd:eb:d5:9d:89:f4:a1:dc:10:66:
71:ac:db:2f:4f:6f:47:af:71:cb:f1:16:77:d3:7d:
57:6d:d5:a3:86:37:c0:e8:c6:22:cc:5a:5d:0f:f9:
77:d7:62:cd:c2:8d:75:b8:40:36:b1:b8:b6:a2:bd:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A9:20:F3:83:62:2F:E3:C9:FE:2E:2A:3E:39:E3:1B:32:2A:48:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D91E59E68CDC11EEA2B829624AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:9d:b9:a8:ee:52:95:98:75:0f:ea:4c:a9:c5:65:cd:3c:6a:
b0:49:37:21:c5:da:22:4e:94:e8:dd:0f:1e:4b:ae:c0:79:99:
1d:79:85:a5:9c:34:29:ca:fe:53:21:fc:0c:58:97:dd:e5:ae:
48:d4:04:7c:0f:4e:1c:53:0b:a4:8f:95:c7:f2:25:e6:e2:94:
03:a6:f7:23:45:d3:08:e5:8a:d7:20:6d:26:5e:9b:45:2d:2a:
bc:fd:19:07:65:d6:dd:8e:30:92:be:29:6e:ef:1f:0d:28:53:
ea:5d:1b:aa:73:5f:fb:dc:18:8b:73:c9:9b:99:2c:50:71:d8:
81:ac:dd:05:0a:bc:14:e5:76:06:26:78:df:d3:05:97:db:33:
37:8d:86:59:13:c7:49:18:b3:6c:51:f0:58:d1:32:4c:78:15:
95:50:64:41:c9:b8:27:7e:53:8f:ee:65:03:5f:e0:7a:10:46:
6c:77:fb:e5:62:80:ff:e1:b5:6f:d2:2d:ce:10:a4:89:0f:78:
9a:71:bb:5f:3e:dd:2d:1b:93:a2:a1:ca:f8:1a:f2:ce:1a:52:
b5:5b:50:1b:9d:e5:fc:1b:2a:f0:3c:96:79:4e:6d:77:3c:2b:
e0:3b:13:aa:cd:2d:5c:23:bf:a6:f5:13:84:1f:ef:ba:a6:56:
89:28:c3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:59 2025 by rpki-client