Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F29AD5288A9011EE9AB48A0E4AD9E6FC.roa
File: F29AD5288A9011EE9AB48A0E4AD9E6FC.roa (raw, json)
Hash identifier: kup+TTGLXPEuxId0BmSXRIBBSkN17ZCrnV2jcq62Dq8=
Subject key identifier: 2E:98:5F:30:08:F6:9C:93:B7:9A:CC:E3:6E:F9:63:FE:20:50:86:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 53A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F29AD5288A9011EE9AB48A0E4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:16:05 +0000
ROA not before: Fri 24 Nov 2023 06:16:01 +0000
ROA not after: Tue 26 Dec 2023 06:16:01 +0000
asID: 62240
IP address blocks: 154.194.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21409 (0x53a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:16:01 2023 GMT
Not After : Dec 26 06:16:01 2023 GMT
Subject: CN=65603fa4-2365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:01:11:1e:68:46:1e:01:17:21:09:04:bd:
70:10:71:19:0f:22:80:86:b2:50:3d:99:19:f1:39:
6f:00:fa:df:cf:7a:6e:21:ed:77:67:92:66:ff:c3:
03:05:0f:12:e9:0a:7a:c3:48:26:5b:ad:9a:dc:5b:
7a:43:86:55:35:7e:93:0d:22:3b:fd:6a:1b:1e:43:
1a:03:be:a0:69:8b:a6:62:08:d1:46:3d:7a:a8:ca:
5a:0a:1b:f8:06:8f:71:b2:b5:37:b6:18:d9:dd:78:
55:55:32:d6:62:a1:02:c5:10:be:59:4e:ca:e2:92:
f4:d4:3c:d7:39:50:11:23:ea:72:4d:88:ae:ce:eb:
0c:32:ed:8e:a4:05:c9:0d:a2:35:22:a6:c7:ef:f8:
54:f5:c4:40:4d:ea:fb:79:3a:c1:b2:7c:6e:5a:92:
d6:0b:57:10:a3:01:0c:25:9e:22:c1:61:f1:e7:84:
5a:7d:63:21:dc:93:ef:62:9a:a3:ad:5a:2b:16:4f:
94:d5:93:87:ba:07:e8:73:d9:ce:93:19:fd:05:b9:
71:60:44:30:e2:06:f9:bc:94:40:a8:a4:06:8b:83:
32:19:a3:55:62:75:65:76:9a:b1:2f:fd:e2:2a:45:
b4:a0:fe:28:d2:82:76:c1:a2:0d:d9:1c:ba:e7:4f:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:5F:30:08:F6:9C:93:B7:9A:CC:E3:6E:F9:63:FE:20:50:86:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F29AD5288A9011EE9AB48A0E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f8:de:0c:fd:ca:5a:6f:43:74:63:7f:de:ab:72:30:96:82:
b4:ab:b4:14:5d:43:38:16:68:5c:21:4c:d5:95:a4:59:ff:fc:
ff:67:72:fb:3e:d0:49:17:25:34:f0:87:67:ed:90:e9:6a:c3:
74:6a:ab:be:62:13:f1:d8:ab:fd:2b:8d:2a:64:5c:24:fa:ed:
bf:08:00:04:f7:d4:3f:7f:7e:20:92:1f:9e:bb:bc:db:1c:47:
0c:5c:e2:ea:ab:f4:fe:d4:e5:54:b9:c1:f3:64:e3:61:b2:40:
cf:15:81:d2:24:2a:6c:b5:28:ce:bd:cd:30:1e:c1:1c:95:e9:
00:85:ff:2d:55:47:b9:8b:cc:2a:b2:a9:6a:74:d0:87:da:19:
1f:3c:64:28:ba:29:b0:08:74:fa:ab:28:16:37:16:82:ea:71:
1d:0a:52:08:49:05:12:5b:15:cb:c8:11:69:20:ac:fc:d0:e2:
44:eb:f3:83:9a:0d:04:d8:fe:c2:5a:88:6e:3f:d1:40:0f:2e:
e0:45:18:10:3f:6d:46:79:13:81:44:16:ec:ba:9d:c4:17:f8:
d4:65:25:97:85:0c:8b:b2:15:06:e7:dc:97:0e:c5:38:71:1a:
6d:9c:f9:07:fc:a1:ad:8e:ae:8a:d6:8a:c1:c7:82:c4:20:3c:
fb:bb:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:54:56 2025 by rpki-client