Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E88BCDC48A8811EE9043D5724AD9E6FC.roa
File: E88BCDC48A8811EE9043D5724AD9E6FC.roa (raw, json)
Hash identifier: NWLd6BMUKyJYyTk1MuGirsf1iwSejNy7YsMzriE+em8=
Subject key identifier: BD:92:C3:27:76:17:F7:DC:DF:CD:F2:55:12:35:1A:50:83:64:B9:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5324
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E88BCDC48A8811EE9043D5724AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:18:32 +0000
ROA not before: Fri 24 Nov 2023 05:18:28 +0000
ROA not after: Tue 26 Dec 2023 05:18:28 +0000
asID: 62240
IP address blocks: 154.195.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21284 (0x5324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:18:28 2023 GMT
Not After : Dec 26 05:18:28 2023 GMT
Subject: CN=65603228-e1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:cd:62:02:14:9b:cf:09:d1:0a:e9:f9:40:
3f:2a:6b:16:c6:55:89:81:ee:46:2e:36:91:59:f8:
5d:1b:c7:63:9f:4d:fd:b8:05:71:94:91:82:44:02:
be:4f:97:bc:41:c4:59:51:99:8d:6f:ac:1a:52:c6:
89:a0:0c:2c:f4:7d:a8:e1:92:09:b9:f9:03:a2:1f:
1c:d4:08:99:79:ab:64:ff:1f:00:84:df:2c:2a:ee:
f2:85:20:9f:ab:e7:ec:55:ab:8e:f4:ed:b7:db:75:
29:9f:d4:5a:18:8a:9a:c7:43:e5:2e:5d:8f:76:c2:
c8:75:b6:1c:b8:a2:01:f0:7b:62:87:13:b5:18:56:
00:4a:e5:a6:7a:84:f0:24:94:bf:60:1f:ad:dc:e2:
2e:98:80:d8:8f:e9:f2:9a:70:d3:2e:33:4d:7d:2a:
9c:a6:0e:04:b3:f0:83:58:90:e8:32:0b:1f:85:ba:
ee:d3:f5:0e:62:28:56:4b:94:81:c1:bd:6b:69:a1:
85:68:1a:3a:8f:e0:9c:34:8d:98:78:35:1a:aa:3c:
a6:4e:f3:e8:c8:a5:1a:ed:12:a6:d5:55:ca:ac:4f:
5a:55:76:de:62:99:fe:0f:47:c1:02:99:b0:21:67:
20:9a:bd:ea:7e:40:80:65:da:86:3e:69:a5:f1:37:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:C3:27:76:17:F7:DC:DF:CD:F2:55:12:35:1A:50:83:64:B9:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E88BCDC48A8811EE9043D5724AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:85:21:21:88:d5:f4:0a:bc:10:07:8a:41:49:01:1d:37:ac:
04:c2:2b:c6:bc:f7:3a:e9:60:b3:a6:e2:1f:69:03:ec:77:81:
b0:58:93:93:cb:ca:78:59:68:20:a8:99:ec:3d:f1:36:72:10:
69:04:43:8c:6e:ad:51:73:69:6d:a7:20:f5:d3:cb:0b:b0:d2:
55:db:ec:26:12:5b:11:8d:32:68:49:08:9d:a6:bd:85:23:bd:
22:7b:96:07:92:c4:80:16:75:f2:77:d0:16:b9:1c:65:07:18:
5c:7f:52:35:fe:96:c3:11:64:0b:0c:77:29:b3:39:40:88:95:
18:29:85:12:5c:ba:55:d0:ff:bc:f9:8f:36:a8:85:dc:77:8e:
40:31:19:21:25:a2:63:3f:d3:ea:8e:a9:84:a6:45:a3:9d:88:
bf:9f:2b:7a:4f:53:b9:f6:d9:d4:db:3a:84:4c:dc:c0:11:de:
af:f0:b9:01:85:d8:9b:87:26:c7:42:c0:49:1d:aa:71:ca:b7:
8a:a2:33:d0:ba:92:60:ae:4e:00:df:fe:0b:af:cc:db:69:e6:
64:11:e1:04:bf:65:c5:65:a0:e0:66:06:e9:1c:56:d0:e4:4b:
f0:0f:a3:84:52:c2:13:cb:50:88:19:d3:57:a0:23:cd:c3:19:
31:b3:6c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:56:00 2025 by rpki-client