Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F73E1E008A9511EEB03BF11E4AD9E6FC.roa
File: F73E1E008A9511EEB03BF11E4AD9E6FC.roa (raw, json)
Hash identifier: V/XqDNTu9K85js973reKVM3HfMC/Bz5FJoBczG3P69Q=
Subject key identifier: AC:E3:C4:38:37:A9:55:95:01:67:AF:4C:24:F0:BC:C0:0B:61:DD:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 53FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F73E1E008A9511EEB03BF11E4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:52:00 +0000
ROA not before: Fri 24 Nov 2023 06:51:57 +0000
ROA not after: Tue 26 Dec 2023 06:51:57 +0000
asID: 62240
IP address blocks: 154.195.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21500 (0x53fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:51:57 2023 GMT
Not After : Dec 26 06:51:57 2023 GMT
Subject: CN=65604810-c830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:ac:c6:69:bb:30:43:c5:d1:f7:46:e6:d3:
95:c3:50:a4:c3:48:b5:c0:e7:4f:b8:d3:c8:24:f7:
59:33:01:d0:89:73:46:48:44:5f:88:e3:2d:49:17:
7f:79:35:26:14:05:85:03:2d:56:b6:a0:c9:88:de:
f1:5b:7c:55:0b:40:e0:ae:2e:2d:1b:03:9d:11:63:
4e:ea:00:f1:b2:b1:3c:fe:f4:8b:29:37:23:89:85:
a4:bc:e9:5a:d8:03:33:bc:2b:6c:a3:53:86:6a:a5:
a1:6c:33:c6:af:4f:82:72:4f:f1:ab:f1:35:d0:6e:
a2:ba:03:35:82:50:f3:c1:4f:bf:84:13:35:c4:32:
e7:ef:ad:1a:25:52:61:6a:fc:21:a7:50:05:79:05:
94:73:16:16:ef:aa:02:87:b2:7e:b4:57:68:1a:7c:
d1:88:d5:23:2d:9c:28:80:f4:c1:9b:21:0f:27:93:
8e:11:89:45:04:7d:7c:8b:97:f2:51:d2:bd:e7:30:
9b:3c:dc:ea:75:e0:46:ee:9d:a7:c9:f9:ff:9b:cd:
63:4e:c8:53:64:c7:56:1c:53:83:24:97:96:3c:98:
b3:4a:fb:65:79:02:68:09:5e:77:93:70:90:b8:aa:
b2:b4:68:1a:64:eb:58:0c:ae:de:97:df:96:56:0c:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:C4:38:37:A9:55:95:01:67:AF:4C:24:F0:BC:C0:0B:61:DD:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F73E1E008A9511EEB03BF11E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.141.0/24
Signature Algorithm: sha256WithRSAEncryption
44:46:19:78:11:33:c9:11:3d:f3:e5:2d:9b:7b:0d:07:bd:cf:
f0:e8:69:32:d0:61:71:87:4e:38:36:82:0c:58:dd:a0:1d:8e:
88:8f:84:42:24:0a:9f:d0:a2:c6:bf:7b:0b:ef:3c:76:77:b6:
e5:a3:c9:8d:7b:a0:55:2d:12:04:a2:8d:ee:01:f8:2c:d4:f5:
6d:c3:14:0a:0a:4f:60:d3:eb:52:67:5f:29:e1:cd:82:fb:7e:
b9:b2:07:39:c3:89:69:94:b3:5a:75:19:f9:9a:81:32:3f:67:
aa:e5:71:3b:03:b8:a4:68:e6:07:32:c7:c7:d0:ca:bc:bd:b5:
17:a0:5a:f7:02:ab:6f:59:a6:23:95:fa:d1:70:67:57:ad:a8:
a5:df:83:0d:b2:79:d3:76:45:32:6f:1d:23:56:44:26:f4:d6:
d6:7a:2b:66:37:22:1f:9c:6d:1d:1d:ac:70:6a:e7:1d:a4:ac:
73:16:4d:c4:50:28:99:f8:82:c4:b9:1c:75:f5:20:7d:e2:6e:
9a:b3:3c:68:04:ec:4e:5b:d9:f4:5d:82:9c:7a:1d:da:99:a3:
a6:91:0d:6f:20:6e:6d:3c:40:98:c1:88:48:00:b0:8e:1f:0d:
09:3b:5d:73:55:9c:10:8c:e7:c1:47:06:5c:26:5c:56:8d:b0:
1b:75:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:18:28 2025 by rpki-client