Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB8590228CE211EEB63274754AD9E6FC.roa
File: DB8590228CE211EEB63274754AD9E6FC.roa (raw, json)
Hash identifier: oXPUYqfCGGZyxNY39reWuqe2G+TwOAVEhMoo46VSEnU=
Subject key identifier: 80:6A:8E:BB:D4:A0:42:3B:2F:A6:93:5B:3F:6B:29:B4:C9:66:B4:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5558
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB8590228CE211EEB63274754AD9E6FC.roa
Signing time: Mon 27 Nov 2023 05:07:27 +0000
ROA not before: Mon 27 Nov 2023 05:07:24 +0000
ROA not after: Tue 26 Dec 2023 05:07:24 +0000
asID: 62240
IP address blocks: 154.194.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21848 (0x5558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 05:07:24 2023 GMT
Not After : Dec 26 05:07:24 2023 GMT
Subject: CN=6564240f-56a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:c6:61:ea:27:6e:0a:d2:02:bb:42:fc:b1:
6c:bb:a5:50:c8:41:e4:34:04:6c:32:0b:c1:90:c7:
ed:ea:3d:8f:ad:ab:cb:a8:76:c9:5e:7e:bc:db:1e:
bb:92:4e:72:a6:c7:29:2c:ab:04:83:e8:b6:5f:a2:
2a:8b:a6:98:00:5b:0d:24:c4:71:06:20:16:32:b3:
f5:ff:54:f8:50:a3:e6:0b:36:15:05:33:56:05:a5:
f9:f2:f6:e9:d0:33:ed:0e:37:1d:49:e6:ae:cb:74:
ea:f2:ae:c1:40:df:fa:af:8a:ed:0d:b0:72:c5:94:
b3:06:fe:72:c0:33:ec:a4:56:92:2c:95:02:55:94:
3a:27:da:35:0f:53:df:01:cb:ef:7c:f3:b1:16:83:
c5:58:d3:9b:ca:58:5f:ce:a6:1c:44:d0:d8:51:58:
7d:3f:41:8f:99:46:88:dc:0e:b8:de:95:d5:d3:53:
c0:6a:1f:96:42:a7:37:b2:6e:15:f9:76:05:26:8c:
5b:4d:15:92:d9:18:d5:78:08:94:97:03:f4:00:06:
1c:c4:b9:29:94:bf:25:1b:84:ab:0b:58:bb:91:17:
2c:0b:e3:a4:62:16:bf:b1:81:ef:18:8d:b5:d0:fb:
3f:24:7b:63:d6:0e:57:57:65:11:ba:3a:49:fe:1c:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:8E:BB:D4:A0:42:3B:2F:A6:93:5B:3F:6B:29:B4:C9:66:B4:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB8590228CE211EEB63274754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.97.0/24
Signature Algorithm: sha256WithRSAEncryption
19:96:85:eb:91:72:85:c7:7a:ff:59:03:91:99:43:b8:61:0d:
fc:c0:04:ac:a7:60:6c:36:33:23:87:91:04:97:ce:7d:43:19:
31:68:c7:c1:4b:94:b3:b1:c4:49:b8:59:05:dd:71:fb:d9:d2:
a6:c7:cd:69:a2:1b:08:31:7f:e0:cd:12:e9:51:b2:ab:f8:8c:
f0:19:86:85:ec:7b:04:1e:fc:67:e4:a7:ff:64:92:81:e1:d6:
fc:d7:5e:66:25:51:a9:f5:31:e7:72:f0:d7:36:db:c5:a3:7b:
4f:4a:e2:d7:75:76:a4:14:13:a1:7e:09:84:b1:6f:61:05:53:
b0:3c:88:b4:34:9d:9a:7a:06:42:9b:e9:95:99:7c:28:31:23:
98:ff:ec:cb:28:b3:b3:4d:a6:6e:78:42:ed:02:b8:72:fc:e8:
37:1c:ed:fb:5c:76:f8:be:04:8f:3b:38:54:82:92:ff:4b:c3:
c5:7a:e5:2e:4a:c8:65:9e:be:52:6d:a6:3c:b0:f0:2e:a6:18:
cd:5c:2e:79:e2:b5:75:69:f3:08:51:64:05:be:84:22:2b:1d:
c1:11:47:d2:cc:6a:63:15:68:b4:ff:9f:42:07:43:d5:30:a2:
f8:22:09:bd:33:01:30:ae:30:5c:67:05:b8:5b:b6:f9:25:6a:
75:e5:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:53:52 2025 by rpki-client