Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E24321D48A9111EE9F6D83114AD9E6FC.roa
File: E24321D48A9111EE9F6D83114AD9E6FC.roa (raw, json)
Hash identifier: ++kzzLK12gMQoPdM/9RZuh5p+h5O9kCpinxo1tEcP24=
Subject key identifier: 1B:28:84:16:EC:79:7A:15:03:90:58:17:F3:A4:FD:32:CB:3A:1E:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 53B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E24321D48A9111EE9F6D83114AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:22:47 +0000
ROA not before: Fri 24 Nov 2023 06:22:43 +0000
ROA not after: Tue 26 Dec 2023 06:22:43 +0000
asID: 62240
IP address blocks: 154.195.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21424 (0x53b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:22:43 2023 GMT
Not After : Dec 26 06:22:43 2023 GMT
Subject: CN=65604137-561f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:d3:f6:85:fe:2f:2e:9e:18:b3:c3:8a:59:
a9:bd:0e:5d:7e:a3:4a:f4:be:08:2b:b0:93:84:56:
83:ed:8c:6f:95:83:14:6f:e9:9c:f5:2b:a7:6b:64:
fa:49:a6:ff:7a:97:2f:35:43:91:63:00:1d:d0:e8:
14:6f:92:e2:85:d6:0a:d3:db:ec:87:b0:5d:26:19:
86:8a:52:b9:91:dc:63:5d:61:dd:b7:56:1a:3f:cd:
10:1c:32:9a:d2:9b:64:77:fa:2b:85:7e:fd:b5:ef:
58:81:65:5f:80:41:cc:99:3a:61:de:f2:16:22:e1:
ca:ba:65:f1:77:7d:d5:72:28:de:61:1c:a5:5c:f2:
a6:c0:89:21:1e:a3:ab:b4:93:0d:33:d2:bc:73:25:
e4:89:a9:5c:ea:b9:41:d1:2f:8a:27:69:1b:6e:e3:
bc:c5:8d:da:5c:d0:50:11:69:e3:9b:af:e5:b4:72:
a4:b4:6b:8d:62:79:0f:40:5c:bd:7c:63:64:c1:46:
98:ee:e2:0b:e0:50:09:98:a8:ff:fc:3f:b3:0b:e4:
bf:17:d0:a3:77:c3:08:7f:d4:e2:db:58:6b:55:b6:
e4:4f:a4:db:f0:b1:f4:16:9c:ed:99:80:b9:7a:a8:
44:44:b8:4e:68:19:7b:15:84:a6:40:09:45:e7:46:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:28:84:16:EC:79:7A:15:03:90:58:17:F3:A4:FD:32:CB:3A:1E:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E24321D48A9111EE9F6D83114AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:36:e3:7b:9c:06:ee:c6:95:5b:8d:92:5f:fe:51:c6:f9:9e:
42:83:0c:10:59:4c:5c:74:e6:4a:aa:ce:f2:5d:cb:2f:03:4d:
af:1d:f8:db:b8:3b:b5:f2:bf:ce:a6:dd:17:df:7c:ad:78:f2:
f1:3b:03:56:02:d3:51:17:69:45:1e:64:f2:a3:43:44:6e:b0:
66:18:09:a9:c0:f4:7b:09:95:ac:c2:0b:01:a2:fd:d6:19:50:
d4:a9:94:cf:2c:fc:11:f5:eb:48:0d:25:d4:ac:5d:15:d2:92:
21:33:78:ad:84:07:f3:e2:68:2c:79:24:67:1c:ba:fb:9a:5f:
ab:f0:f9:34:1b:3b:e8:f9:cd:75:52:28:33:ae:8a:c8:1c:a2:
29:8c:f7:15:56:90:0c:38:9a:e2:21:4c:27:16:8e:5f:1b:77:
62:85:03:f7:92:43:04:c6:5d:7d:2f:11:16:ec:7d:1e:1d:5c:
4b:ff:18:77:05:aa:ca:97:7c:c8:7a:96:e1:52:18:30:e5:2c:
39:41:26:91:38:c7:72:0a:ee:66:50:65:fc:f9:a5:47:14:be:
5a:b6:e5:ae:6b:8a:60:69:c7:76:6b:16:b8:f2:f3:54:12:9e:
bb:97:14:c1:bc:ca:d7:ba:81:06:ac:9b:74:9b:75:0a:d9:56:
00:c2:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:41:12 2025 by rpki-client