Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9E966D08A8511EEA8BC96684AD9E6FC.roa
File: D9E966D08A8511EEA8BC96684AD9E6FC.roa (raw, json)
Hash identifier: 0FlbFcSF1+blu6sFtFEsSlEQGWzjs0wUwjuCGVmBlQ8=
Subject key identifier: 87:39:05:1C:DC:5D:DB:3A:EA:56:A9:E9:F0:1B:04:1E:05:B3:95:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5300
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9E966D08A8511EEA8BC96684AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:56:39 +0000
ROA not before: Fri 24 Nov 2023 04:56:35 +0000
ROA not after: Tue 26 Dec 2023 04:56:35 +0000
asID: 62240
IP address blocks: 154.194.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21248 (0x5300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:56:35 2023 GMT
Not After : Dec 26 04:56:35 2023 GMT
Subject: CN=65602d07-dbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:18:0f:cf:3c:60:7c:55:65:0f:6a:cf:e9:
73:99:0d:76:74:7d:0a:82:28:87:f0:d1:66:7d:d4:
8d:8e:6a:ff:cc:63:38:a0:e2:78:5b:9d:fc:e2:32:
09:32:53:e2:db:a7:09:d0:8b:14:42:7d:9b:ef:00:
d0:4f:5b:df:1b:2a:42:8b:3d:80:c7:2c:9b:8c:19:
e5:72:0b:d0:a2:61:ed:65:ab:bb:5e:3d:43:73:51:
ff:e8:64:0f:81:7f:31:fa:81:88:7c:6a:ee:fe:19:
15:fa:b3:34:3c:0f:45:ce:95:dc:f7:24:2e:d1:19:
55:6e:ea:47:26:d5:ff:f7:91:6c:72:5a:25:9b:42:
fc:2b:52:c2:c9:e3:f7:62:fc:a7:ed:f1:34:d1:63:
1b:35:e6:6c:33:4b:57:7a:bd:05:5d:e7:ca:58:30:
69:07:4c:1f:e3:3f:f9:d4:ef:41:a7:cd:c8:07:fc:
ee:69:50:97:1a:f6:a8:52:93:87:a6:8f:2b:bb:54:
0c:a0:dd:a7:f8:23:a6:ef:3c:89:9a:cb:c1:b3:1a:
d5:ce:9c:fc:ef:44:11:11:e0:09:ef:6f:c2:d1:7c:
47:e4:fd:73:26:6e:a4:6d:35:66:4f:61:58:94:ae:
17:aa:b0:f9:1e:93:85:54:c1:96:28:61:66:10:d9:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:39:05:1C:DC:5D:DB:3A:EA:56:A9:E9:F0:1B:04:1E:05:B3:95:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9E966D08A8511EEA8BC96684AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:68:73:37:58:48:d5:8e:0b:08:41:f0:53:5c:64:8d:ba:12:
1c:37:27:38:e5:71:3d:f1:ef:ef:dc:80:4c:24:e5:49:68:d3:
b9:ab:ce:ba:1f:86:b2:84:61:e9:93:ff:51:00:a4:f8:66:29:
88:c7:c9:06:44:a1:bc:b8:07:e2:d9:bd:82:f0:2f:d3:3c:1e:
a2:0b:c9:47:64:37:04:f9:dc:b8:9d:f0:8f:d3:07:b9:5b:b8:
ed:f4:56:2e:fc:c3:1e:39:a8:29:04:3b:0b:e3:54:a9:57:38:
7a:63:70:52:21:bc:94:70:81:cb:ff:4c:74:9f:ea:43:e7:2c:
49:87:e9:72:57:5a:b6:50:03:d5:52:5b:25:d5:6d:8a:7d:42:
0b:1b:18:54:bd:1b:ad:d3:84:78:6a:d7:b8:d6:f8:06:66:72:
c2:e3:71:21:a4:8e:42:0b:56:c3:cf:e8:d7:a7:97:9e:14:6a:
bc:5d:04:fc:e0:00:15:ff:5b:c4:ee:20:46:5b:7f:bf:be:b8:
fa:0d:24:a8:f9:57:b7:89:00:88:40:15:64:ff:4c:08:48:18:
5b:69:0c:a6:67:47:76:5f:d8:56:e8:26:6c:02:b0:aa:33:ef:
99:ca:06:a1:58:0f:f8:db:28:1c:36:3e:db:85:e0:d5:2f:22:
9f:bd:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:37:03 2025 by rpki-client