Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE30CEA28CDF11EEB666F36B4AD9E6FC.roa
File: DE30CEA28CDF11EEB666F36B4AD9E6FC.roa (raw, json)
Hash identifier: lmRflLETw9HuyPYQ6HF5d79e6tRJiGl5E0FakTrWekk=
Subject key identifier: 2A:70:1A:A1:14:9A:64:A9:A3:AB:94:18:56:38:9C:94:08:BB:FF:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 552D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE30CEA28CDF11EEB666F36B4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:46:03 +0000
ROA not before: Mon 27 Nov 2023 04:46:00 +0000
ROA not after: Tue 26 Dec 2023 04:46:00 +0000
asID: 62240
IP address blocks: 154.195.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21805 (0x552d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:46:00 2023 GMT
Not After : Dec 26 04:46:00 2023 GMT
Subject: CN=65641f0b-545e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:13:01:3d:4d:53:bc:4b:d1:43:9b:ba:2e:
a6:92:5c:a6:f7:a4:72:79:bb:b3:81:4d:ab:ae:69:
77:60:64:30:c1:fa:74:8a:61:b3:78:f3:ac:e5:0b:
be:0a:ad:23:48:3f:2d:cd:d9:30:9f:44:c8:09:c8:
d0:ed:6e:8f:66:2d:98:48:7a:bf:63:4a:5a:f6:71:
4a:4a:3e:e2:5f:c6:dd:99:29:82:d3:cc:26:7b:e2:
ac:ad:a8:63:31:3f:bc:a9:1a:73:6d:ff:62:74:61:
f2:03:dc:cc:7e:a8:a3:8f:fe:5f:f5:2d:a6:32:4b:
43:f7:7f:98:4a:86:3a:90:b3:70:3a:47:a5:30:5f:
bf:c4:21:40:81:39:95:6e:75:4d:ef:86:e8:33:a7:
07:c7:8a:a0:fa:8c:43:19:54:f8:72:79:f5:11:ac:
da:7f:3f:7a:0d:34:02:1c:b8:c1:c4:42:36:97:e5:
aa:2f:5a:ee:79:11:7f:c0:83:0d:a2:4c:2f:5d:74:
29:11:43:22:f4:0d:80:2d:d4:0e:7b:84:35:26:8d:
e8:e6:57:7b:a6:92:d7:25:9c:2a:42:0a:41:8e:18:
82:33:b1:d2:3e:c1:fe:80:92:54:a2:b2:49:4d:a8:
28:0a:99:ca:5d:64:8c:a2:70:26:30:eb:0b:39:81:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:1A:A1:14:9A:64:A9:A3:AB:94:18:56:38:9C:94:08:BB:FF:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE30CEA28CDF11EEB666F36B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.3.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:32:3b:97:41:50:61:cf:3d:a3:2c:2c:72:bc:13:d4:8c:21:
c3:78:b7:db:b4:f9:11:bf:9a:2b:a9:26:89:c5:fd:68:ae:6f:
7c:11:a0:e2:07:7c:31:a4:7a:c7:57:8a:ea:14:2a:30:80:30:
ce:cc:ae:71:4f:fc:19:52:f9:87:30:56:23:35:59:53:f4:7d:
6f:ab:3c:33:35:bf:31:f2:21:e4:43:fd:b2:1f:b7:17:77:4f:
87:aa:93:68:8c:7e:dc:35:56:3f:a1:b6:68:e5:81:17:ef:40:
29:9c:1b:b3:46:e4:51:c6:f1:45:93:8f:1c:d3:73:99:00:fa:
e8:8a:78:cc:89:3a:53:51:0a:83:91:02:ab:61:5f:d3:27:7a:
9b:7d:04:2f:f8:92:ba:9d:4f:ec:44:a3:1d:38:76:af:3b:4c:
b7:71:8e:50:b7:34:39:8b:0c:9d:91:c7:f1:5d:66:df:a0:3b:
75:26:6c:9d:c5:75:ea:c5:46:14:b6:33:f9:55:94:33:17:20:
03:d2:8f:90:00:59:2f:8f:5e:66:82:fd:60:16:93:df:37:42:
98:11:73:34:6b:e1:06:85:5d:b5:06:db:2f:c3:68:18:41:46:
6e:0b:ca:69:16:6d:b8:02:dc:68:bf:6b:de:34:be:a5:a2:60:
8d:93:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:08:01 2025 by rpki-client