Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE994DFA8CDB11EEA552DE5E4AD9E6FC.roa
File: DE994DFA8CDB11EEA552DE5E4AD9E6FC.roa (raw, json)
Hash identifier: KbXwpEz0TD6ZrFw6zx1nETzXW7F9IguyuAbila51MCk=
Subject key identifier: AB:60:47:EF:31:27:4D:08:50:03:6C:7E:BE:1E:44:FA:A0:AA:67:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE994DFA8CDB11EEA552DE5E4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:17:26 +0000
ROA not before: Mon 27 Nov 2023 04:17:22 +0000
ROA not after: Tue 26 Dec 2023 04:17:22 +0000
asID: 62240
IP address blocks: 154.196.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21710 (0x54ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:17:22 2023 GMT
Not After : Dec 26 04:17:22 2023 GMT
Subject: CN=65641855-8323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:4b:d9:6a:ae:58:59:be:54:53:8d:7b:fc:
fa:1c:50:d1:67:02:c8:71:7c:93:64:2a:2a:b9:fd:
fe:56:fa:4b:c5:9c:6f:db:79:6a:a1:3b:08:3d:ef:
be:28:88:44:ab:2e:17:d7:27:9b:11:b8:26:25:78:
08:7e:e4:5c:a4:7c:80:3e:39:64:f3:f0:b0:a7:e6:
30:3f:71:6a:47:50:fb:b8:f7:65:92:7e:65:97:9e:
3f:72:4f:b4:1a:9b:57:65:85:dc:62:27:96:11:b5:
7d:52:77:c4:8b:f1:d3:e1:8a:5d:46:d3:6f:c6:15:
c5:a8:57:44:e9:b8:ca:cb:c7:7a:f9:e2:6e:d8:cd:
35:dd:45:34:9f:94:d9:87:2a:bf:d8:39:6f:4d:2b:
26:ea:52:70:72:16:b7:9f:07:ee:05:52:7e:70:c8:
83:e5:63:a6:92:6f:5d:67:06:f8:84:89:e6:45:83:
a8:76:7b:3e:1f:a8:b2:2a:51:ce:8d:4a:21:17:8f:
dc:79:89:02:ca:8a:92:e0:c6:d5:e3:29:10:a6:12:
24:c5:18:da:9f:f8:cf:00:ec:6d:d9:b6:87:d2:6c:
ca:3c:9d:00:02:06:e1:86:00:d7:64:ef:4c:c5:d2:
9e:d4:2a:15:15:14:36:a7:ac:ee:36:24:87:fe:05:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:60:47:EF:31:27:4D:08:50:03:6C:7E:BE:1E:44:FA:A0:AA:67:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE994DFA8CDB11EEA552DE5E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.84.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a9:19:c2:a7:8b:97:89:92:80:a6:9b:49:65:50:be:c8:d3:
4d:be:48:e5:1b:21:14:0e:9b:36:c8:42:46:a7:e7:9c:ec:61:
c8:7c:18:d8:94:e7:f7:b9:d6:87:df:1b:c9:5f:be:75:36:de:
2e:96:56:d4:0b:80:8a:89:2e:a2:13:da:a5:b7:11:58:4b:70:
07:6f:94:0c:eb:60:62:35:a8:63:57:f0:53:ea:f2:13:a6:8f:
5e:f6:ca:72:33:ca:db:8c:f2:59:60:c8:25:62:2c:d7:3b:4c:
71:ed:14:35:6d:41:93:43:7a:e9:9f:a9:6f:06:47:f6:e2:84:
e9:71:e9:23:cf:b3:22:3a:1b:e6:b0:17:a0:e6:9f:60:1c:d1:
ba:e6:85:1d:ae:a2:ba:08:dd:d1:59:66:5f:f4:5c:17:84:17:
3e:15:47:10:c6:ae:1f:67:c6:16:36:6d:71:7b:6e:6c:ba:db:
4e:b0:26:82:99:b5:c5:ac:bb:d5:b4:64:af:ee:94:d4:7e:1f:
49:1a:42:09:cc:18:a9:c5:53:bc:dd:75:8d:91:6b:a2:2a:6d:
a8:e0:03:2e:80:58:e7:75:2d:91:1c:03:29:7a:53:de:b0:2b:
21:c4:97:c0:40:5b:17:f2:56:b5:0b:f0:50:29:e1:cd:48:22:
b0:ab:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:52:58 2025 by rpki-client