Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F50151F68A8C11EEBA5ED57F4AD9E6FC.roa
File: F50151F68A8C11EEBA5ED57F4AD9E6FC.roa (raw, json)
Hash identifier: ahPILklI8tkKHZSghsJs9th0BxaNuNLNPIBQeKHQJ64=
Subject key identifier: 8C:CB:67:8C:1A:BD:29:6B:88:0F:08:48:4E:5A:E0:69:4D:E6:5B:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 535C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F50151F68A8C11EEBA5ED57F4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:47:31 +0000
ROA not before: Fri 24 Nov 2023 05:47:27 +0000
ROA not after: Tue 26 Dec 2023 05:47:27 +0000
asID: 62240
IP address blocks: 154.195.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21340 (0x535c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:47:27 2023 GMT
Not After : Dec 26 05:47:27 2023 GMT
Subject: CN=656038f2-dcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:17:1b:3d:30:5d:9f:5a:51:0b:87:a8:ee:
3d:42:50:87:7e:f0:dc:91:8e:99:e1:67:30:a6:83:
07:43:6e:22:6f:6d:e3:3a:de:3e:89:ab:41:31:1f:
f8:51:14:ca:89:86:b5:cf:20:3f:12:f9:dc:f5:90:
b7:89:dd:82:7b:ba:7f:ea:04:e2:c8:4f:1b:98:9e:
e6:ed:a3:23:10:4a:ca:db:9d:cb:27:61:e7:12:c3:
e5:cc:61:eb:aa:3d:c1:9b:c2:b6:08:5f:25:ae:3c:
41:25:5e:ae:57:59:0b:7a:50:e2:c2:2e:45:7e:b2:
29:15:5e:1d:07:b6:71:35:10:ce:2b:a7:cc:cc:e3:
22:06:e3:e6:41:5b:fd:06:2f:30:8b:cd:ea:08:f3:
86:6e:f4:e9:60:b3:67:a9:31:b8:97:01:f9:ba:04:
ee:2c:6c:b8:e8:fa:bf:90:af:1b:9f:f8:a8:8b:e8:
b3:fa:de:99:49:cc:20:b7:ea:74:58:5f:3a:b8:e3:
81:2f:c7:45:73:62:d2:0b:63:52:63:7a:6d:d4:94:
b7:90:34:1c:14:43:68:78:c7:e1:d9:0a:13:c4:61:
8e:07:74:c9:9d:d4:8f:90:cd:d7:09:47:e7:1f:d6:
e9:ca:4b:59:d6:db:4a:83:2f:68:b8:03:cd:a0:e4:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:67:8C:1A:BD:29:6B:88:0F:08:48:4E:5A:E0:69:4D:E6:5B:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F50151F68A8C11EEBA5ED57F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:57:95:28:77:40:0c:cf:23:a7:dd:78:0f:00:b7:b1:09:8c:
21:6c:2b:cb:f7:0d:6d:20:45:2b:b7:e7:97:29:90:15:b1:41:
eb:9b:b1:0a:99:fe:33:4b:56:26:37:5c:d5:61:85:0c:69:4d:
72:76:2a:70:f9:9e:28:b7:ee:84:39:1b:ea:c9:74:8d:a8:9e:
ba:43:8f:8b:8a:7f:d3:38:c0:ec:b5:7d:a0:96:85:98:ec:5d:
e0:d7:0f:c8:ae:73:27:73:19:86:34:1e:2b:28:ff:60:c7:ff:
2f:4c:05:53:7d:90:97:ff:fe:18:92:1e:c7:91:7a:21:2f:3c:
ac:b6:d0:32:77:90:64:25:be:a8:0d:a9:5a:4f:a7:ed:c7:10:
25:03:90:2b:70:71:57:66:77:d1:37:81:fb:d7:ba:b7:85:7f:
c8:d3:ec:42:94:a9:bc:52:68:0d:6c:62:2e:81:66:ab:bf:1b:
e2:9a:29:8f:43:07:b3:18:63:89:f5:f1:11:d4:c9:09:58:4a:
00:b5:30:5f:1c:5c:77:09:20:f7:f2:dd:41:28:2d:0f:ae:f9:
70:71:73:be:ee:3a:7d:b6:5e:bf:fa:65:03:31:9d:27:6a:fc:
11:ca:10:15:02:7d:6b:f6:e3:9b:2d:5d:95:3b:7f:8e:ec:af:
54:33:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:37:05 2025 by rpki-client