Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF498294473711EE8F40C8554AD9E6FC.roa
File: EF498294473711EE8F40C8554AD9E6FC.roa (raw, json)
Hash identifier: nxZ1SjCmOvtXFIneU5rRjD0iQbNYJ0szH7OQhRuCMTU=
Subject key identifier: E9:7B:1D:F0:D8:B6:52:24:C3:36:ED:0F:81:18:A4:E8:34:4B:AA:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3ADD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF498294473711EE8F40C8554AD9E6FC.roa
Signing time: Wed 30 Aug 2023 13:20:06 +0000
ROA not before: Wed 30 Aug 2023 13:20:03 +0000
ROA not after: Thu 08 Aug 2024 13:20:03 +0000
asID: 133199
IP address blocks: 154.204.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15069 (0x3add)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 13:20:03 2023 GMT
Not After : Aug 8 13:20:03 2024 GMT
Subject: CN=64ef4206-a1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:d2:cb:6e:3a:59:a0:cf:30:2a:eb:29:bb:
66:2a:5a:74:0b:28:8a:12:1a:3c:59:be:5b:91:d3:
d6:35:45:cd:85:16:f3:95:88:f6:45:63:66:36:0c:
9a:d9:7a:79:4a:2b:a5:29:85:ae:b3:a7:67:cb:ec:
cd:07:04:17:38:ad:36:5a:59:cd:f3:2d:bf:cf:26:
1f:ca:9a:68:71:ec:37:b7:cb:3b:c9:d1:86:11:9f:
7b:80:f8:03:09:91:3f:c3:64:04:38:44:9f:96:e8:
20:9c:a0:ee:90:2d:c9:75:0f:ab:70:bb:89:7b:ae:
2e:3a:86:41:5c:ef:04:cf:e2:38:40:c9:9f:e2:b1:
74:6e:0c:37:f1:3a:7a:a6:d6:1b:25:df:2c:ad:5b:
5c:4e:0d:0e:7e:04:4f:ca:b5:91:53:4f:20:d4:f6:
ac:ba:62:2e:ee:36:a8:44:a8:58:28:24:37:f3:94:
b7:90:bf:64:04:55:e8:14:75:c0:bf:61:19:c0:99:
46:31:c7:c4:aa:3a:3f:e6:c7:43:db:b0:7c:fa:eb:
a1:1d:aa:0a:ff:ee:5d:ec:66:78:df:d9:d5:e6:c6:
00:49:84:92:9a:e3:c7:eb:d8:34:56:f7:a3:5b:3b:
7c:68:d8:c6:2f:b0:e4:e2:69:cd:84:50:d4:a9:06:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7B:1D:F0:D8:B6:52:24:C3:36:ED:0F:81:18:A4:E8:34:4B:AA:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF498294473711EE8F40C8554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.45.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:7c:63:e3:1d:b8:ef:87:a9:02:60:4b:26:1f:91:b4:a7:f8:
ba:e6:7a:86:91:93:a4:c6:74:57:dc:f5:d9:b5:2b:ff:cf:be:
8b:f8:3c:3b:48:b5:8d:ef:02:20:4f:b8:6e:2a:9c:5c:ea:02:
d5:2d:c6:fe:6e:7e:d6:ba:15:a2:92:21:5e:80:f3:1a:36:f6:
33:48:f2:12:bb:2b:18:fd:1e:9b:5e:ab:4b:f8:5c:e2:49:65:
3c:37:9a:75:f1:8f:ad:19:6a:65:b5:69:b2:ee:cd:01:bc:22:
e3:2a:c8:9d:8f:65:d8:ca:15:dd:96:ab:f9:fb:59:c3:65:f4:
eb:a0:c6:c6:8e:05:99:af:85:ed:1f:2b:5c:11:d2:03:e5:aa:
7a:a4:8a:05:c3:fc:cc:f4:c1:1c:e5:01:d6:83:70:3b:bf:2c:
69:09:4a:7d:ec:7d:a9:89:cc:1d:ed:89:d1:92:17:23:b5:96:
64:c6:6d:11:7f:2f:d5:59:15:99:ed:de:5d:61:3b:84:f5:dc:
d2:0f:57:8f:06:39:11:86:e5:3f:c4:41:04:85:74:21:6c:07:
9e:68:b4:c2:d4:48:cc:50:25:77:1c:6c:ed:6b:4a:bf:c8:c1:
20:6b:0c:b7:a2:f3:33:08:a8:2c:05:c8:a1:b6:78:0a:0f:ab:
5e:8b:b4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:04:42 2025 by rpki-client