Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E529BD948CE011EE83AF2B6F4AD9E6FC.roa
File: E529BD948CE011EE83AF2B6F4AD9E6FC.roa (raw, json)
Hash identifier: zN9Vbmpvfj2Yfnucz3+zvlLmY5NSo7ahU8m5h0UzZLk=
Subject key identifier: B4:FB:22:12:38:32:ED:18:31:5C:6D:1C:33:A0:C2:BA:1B:41:58:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 553E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E529BD948CE011EE83AF2B6F4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:53:24 +0000
ROA not before: Mon 27 Nov 2023 04:53:21 +0000
ROA not after: Tue 26 Dec 2023 04:53:21 +0000
asID: 62240
IP address blocks: 154.194.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21822 (0x553e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:53:21 2023 GMT
Not After : Dec 26 04:53:21 2023 GMT
Subject: CN=656420c4-69bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:d5:40:67:6f:ef:c8:4a:d8:1d:11:32:7d:
4f:ba:03:49:45:5b:bb:2c:ab:14:ed:d4:7b:6a:d0:
95:e2:75:c9:ae:91:9d:1a:de:e0:2e:fa:e1:41:b2:
5e:19:dd:ea:6b:0f:fc:f4:4b:be:9c:d7:d8:c4:87:
f6:69:44:1b:43:c8:47:9d:a0:62:56:4a:0a:57:d7:
8d:04:10:2a:10:c3:c1:ec:16:34:4f:94:7b:25:c2:
79:be:7e:64:d1:2d:9d:df:57:c1:e7:69:30:5f:f9:
e7:ff:c0:25:f0:88:cf:65:f2:fb:f6:1d:23:19:03:
91:a7:c7:47:e3:28:a0:c2:ca:d0:ad:9d:0d:d5:0b:
1f:ae:07:bf:70:55:9c:97:e0:ef:58:82:5e:bf:7d:
0c:1d:cb:69:1b:d1:fd:dd:74:46:a0:ba:51:24:17:
ff:b0:c9:f5:88:56:1e:15:00:ca:2b:84:6a:3f:0c:
7f:d5:04:49:50:34:da:29:1b:aa:c0:c4:68:a9:9c:
36:c5:a9:ca:1f:c8:68:73:45:95:af:d4:e4:8d:4d:
21:59:9f:a4:0e:c0:ec:0d:60:3f:77:22:68:ca:05:
35:c7:15:3d:7a:6c:03:57:9c:2e:20:5b:47:f2:18:
9e:dc:4d:a8:3f:1d:de:4f:d6:17:33:ba:13:4b:ce:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FB:22:12:38:32:ED:18:31:5C:6D:1C:33:A0:C2:BA:1B:41:58:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E529BD948CE011EE83AF2B6F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:77:7a:69:93:40:be:f4:55:ad:a9:47:e1:3d:fc:11:4d:1a:
c9:72:07:d2:82:8b:f0:8e:0f:cd:d3:a7:4c:13:b1:34:87:c5:
49:f9:fb:e2:3b:66:32:a9:9e:8c:28:89:a6:e0:b9:c9:1f:e7:
c9:7f:16:6c:97:78:03:a5:82:45:6c:45:0b:4a:9b:fa:e5:19:
49:29:49:55:ff:65:99:1e:04:1b:e2:de:a0:43:6b:38:9d:71:
21:0d:9f:58:9c:af:e8:00:b9:d4:1e:24:7d:9d:31:c8:d5:44:
6f:ac:29:90:3a:22:93:1c:2a:a7:e9:9b:0b:fe:a7:da:7d:c5:
87:ad:62:54:d6:1b:f7:86:2b:77:12:7b:ee:1f:e3:47:ba:bb:
2b:9c:c5:99:db:64:d5:1c:68:2a:96:0c:84:d6:71:83:5c:28:
d3:25:2b:06:b6:52:eb:14:50:9d:80:e4:06:30:be:ba:30:ae:
9a:e4:b8:87:6e:81:20:fc:ed:2e:78:b4:59:8d:66:e6:24:4d:
cc:65:fd:7b:0e:13:73:2c:c2:19:85:0b:0e:25:f4:37:3b:9a:
ee:a5:c0:90:7f:10:e4:85:4f:5a:8c:43:cb:65:30:a9:5c:47:
30:2e:ad:42:82:45:44:72:27:b3:93:93:13:71:d9:99:af:f8:
64:6c:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:54:59 2025 by rpki-client