Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B9A29A8A8711EE80EE566F4AD9E6FC.roa
File: E3B9A29A8A8711EE80EE566F4AD9E6FC.roa (raw, json)
Hash identifier: CuAgfXrXRWW4klNnjs0dnuewfSaiswTVquI+coSCnxA=
Subject key identifier: 67:7D:B4:53:4F:FE:00:2F:E9:47:F9:5A:D8:B0:0F:E8:38:A2:71:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5318
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B9A29A8A8711EE80EE566F4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:11:14 +0000
ROA not before: Fri 24 Nov 2023 05:11:11 +0000
ROA not after: Tue 26 Dec 2023 05:11:11 +0000
asID: 62240
IP address blocks: 154.195.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21272 (0x5318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:11:11 2023 GMT
Not After : Dec 26 05:11:11 2023 GMT
Subject: CN=65603072-e40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:6b:a7:ea:c2:3f:da:55:e1:ec:08:a8:11:
5e:75:e2:a8:d0:82:d7:8c:05:9c:80:f6:0f:a6:06:
cc:75:61:d7:10:d6:dc:06:95:57:d6:61:a7:2f:3c:
06:ed:c0:d3:a7:5e:99:71:92:19:0c:90:1d:fd:c8:
8b:64:3f:8a:49:99:54:5f:ff:18:9d:04:23:ae:ee:
df:86:12:53:40:ed:45:af:d4:2b:60:27:75:a9:0e:
a6:2e:80:4d:72:3c:2f:cf:be:cd:39:46:0e:3a:21:
4d:d5:70:73:41:32:44:76:98:0f:fb:a3:bb:4f:87:
f6:0a:3b:a9:e9:3c:84:88:58:19:5f:31:bf:7b:d6:
5c:db:86:51:ab:f6:b9:6c:d9:9c:e3:b0:d2:19:ce:
28:7d:21:22:6e:1f:40:8d:46:8b:cc:8f:48:57:11:
ca:a3:ad:5e:04:c7:a9:c5:c7:92:4e:a5:56:7d:a6:
13:3f:3d:9d:8e:ea:7b:7c:1f:cb:7c:57:8b:be:1a:
b3:08:a2:6b:c4:ba:ee:69:6f:b6:f0:05:3e:fb:39:
14:1a:fb:93:df:97:6b:53:99:3b:5a:e6:63:b8:a8:
af:26:58:00:67:e1:8f:fa:37:d1:b9:4f:1e:84:c9:
2e:35:25:5c:39:de:ef:46:d2:21:49:ac:be:56:0c:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:B4:53:4F:FE:00:2F:E9:47:F9:5A:D8:B0:0F:E8:38:A2:71:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B9A29A8A8711EE80EE566F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.159.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:c2:6e:d5:2a:bf:1e:62:50:0c:ba:ca:a4:a1:1f:8b:9f:17:
71:58:16:c7:f8:ee:bb:f5:79:6b:33:1d:2e:12:ce:15:6b:2a:
94:cd:de:eb:8f:97:ef:08:f7:2f:ae:fb:ca:9f:8e:15:17:90:
44:15:fa:49:0e:96:9b:f6:56:fb:f9:47:17:6f:b9:b3:0f:ce:
b6:6a:a9:52:f5:e5:0d:a1:18:b2:cf:35:5e:d4:e8:b1:94:7a:
f5:a5:dd:6d:de:11:08:9b:bf:0d:ce:3e:b2:d2:b5:37:ff:cc:
77:ac:8c:3f:24:22:59:c4:2a:96:91:9a:e0:91:a2:1e:b5:80:
12:b2:32:6b:5a:59:be:c7:14:8c:22:32:7c:42:85:2f:c5:dd:
67:0f:5d:ee:7b:0e:22:ae:30:76:3a:e3:a7:47:c1:79:7c:28:
28:71:2c:6c:a6:74:8b:3c:55:31:f1:c7:83:bb:88:a7:a4:52:
d6:d3:b4:db:14:c9:2e:2c:50:cb:e7:58:d7:48:74:c9:e5:24:
c9:27:ce:41:1b:6f:44:6a:6a:89:54:05:6b:a6:cb:80:b8:58:
ba:d5:f4:93:45:27:33:68:59:94:36:72:6f:e3:cc:c4:6c:69:
74:a7:24:52:7e:d1:7a:79:aa:fb:e4:5b:20:09:f1:f6:08:ba:
59:72:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:43:12 2025 by rpki-client