Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E23805DE473811EE9F4C8E584AD9E6FC.roa
File: E23805DE473811EE9F4C8E584AD9E6FC.roa (raw, json)
Hash identifier: xFIzxf7zgxowfVTv8fRWcQgaDZ9J/xDju21E4arbLYM=
Subject key identifier: 29:8C:53:F6:87:CB:23:CB:43:38:19:FC:13:20:0A:1B:CB:2E:70:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3AE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E23805DE473811EE9F4C8E584AD9E6FC.roa
Signing time: Wed 30 Aug 2023 13:26:53 +0000
ROA not before: Wed 30 Aug 2023 13:26:50 +0000
ROA not after: Thu 08 Aug 2024 13:26:50 +0000
asID: 133199
IP address blocks: 154.204.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15081 (0x3ae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 13:26:50 2023 GMT
Not After : Aug 8 13:26:50 2024 GMT
Subject: CN=64ef439d-ca24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:86:bb:ba:f8:5a:ce:68:45:09:54:c6:5a:
9d:48:d5:80:80:90:a9:2a:2f:63:d4:51:d7:99:88:
68:e5:d9:ca:41:82:9e:05:ab:10:49:22:3b:80:be:
fa:bd:9f:c7:b6:e1:e1:62:d8:76:e8:1b:ba:ae:27:
77:27:74:11:42:6f:05:16:15:6b:eb:3d:f1:75:7d:
91:c8:b5:41:b9:9a:8c:de:c0:cc:a8:9c:2f:a8:f4:
04:d4:1d:54:7b:e7:b3:3b:cc:de:dc:ec:28:9e:15:
95:d8:2d:9e:cd:04:df:37:d4:6d:9b:8b:60:95:73:
04:78:41:65:3e:3e:27:30:50:a4:0e:5b:be:b7:00:
ae:49:0d:ba:87:47:6e:5e:6d:a3:cf:20:9e:23:cf:
c5:93:15:95:69:2e:bd:06:a5:bb:20:3f:36:79:69:
ab:c0:35:58:4f:3e:65:2f:87:1b:01:58:a9:c8:5c:
97:eb:42:17:ee:b0:35:66:61:6e:e2:65:88:18:2e:
85:97:cb:83:f8:62:c5:97:40:33:21:df:b0:cf:ab:
61:7a:9c:85:15:97:b8:ed:2d:5b:ce:d3:04:5e:51:
bf:68:ab:75:89:b8:5f:32:b5:47:48:7f:8b:c2:c2:
48:17:07:5c:45:3f:79:9d:96:70:19:05:7a:2c:fd:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8C:53:F6:87:CB:23:CB:43:38:19:FC:13:20:0A:1B:CB:2E:70:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E23805DE473811EE9F4C8E584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.33.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7f:86:29:90:f3:8c:de:00:81:3e:0b:c2:7e:43:18:96:10:
df:6e:b4:1a:2f:2e:e5:a4:99:c5:39:c2:2b:73:79:29:57:b4:
bd:e6:da:ff:8c:27:a2:25:64:30:96:d0:c7:ca:30:69:1e:0f:
8b:1b:30:c2:0e:ea:11:fb:61:a3:2e:4c:91:32:16:be:dd:67:
68:ba:30:45:6a:17:8f:89:fc:3d:9b:e8:68:7a:03:70:47:fa:
5c:97:68:47:dc:35:a3:8e:ed:83:c4:55:c2:f5:b5:59:95:48:
8f:b7:80:a8:10:2f:18:a3:35:8f:89:1a:41:df:ff:04:c4:1f:
8f:45:27:3e:69:3b:6f:b2:31:cc:a1:f8:63:20:4c:4e:64:4f:
9e:83:6a:37:3c:fe:35:af:c3:13:55:43:77:5c:41:84:03:8b:
4f:23:f7:91:76:b7:85:79:70:9d:10:2c:58:69:cd:9a:66:06:
90:de:4f:f0:ea:be:1e:a0:a5:a7:8f:ea:04:57:c8:cc:04:18:
ca:ad:a1:79:69:42:f7:0d:d6:e5:ec:47:b0:b0:26:79:a5:5d:
d9:09:8d:9e:57:76:82:e3:37:8a:c3:d7:1e:9f:4a:9d:bb:58:
ae:30:2d:54:0c:4e:01:40:2e:dc:11:46:03:6d:74:c7:00:f9:
fe:75:26:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:30:23 2025 by rpki-client