Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F884F11E8CE111EEAFD2D8724AD9E6FC.roa
File: F884F11E8CE111EEAFD2D8724AD9E6FC.roa (raw, json)
Hash identifier: s7VZBHbfMEsdDh+tjR5r2Iqx2uTsmajwdLSiA90BUGU=
Subject key identifier: EE:98:A8:26:0A:86:DC:B7:24:3F:96:80:72:37:05:FC:FF:91:8B:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 554E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F884F11E8CE111EEAFD2D8724AD9E6FC.roa
Signing time: Mon 27 Nov 2023 05:01:06 +0000
ROA not before: Mon 27 Nov 2023 05:01:03 +0000
ROA not after: Tue 26 Dec 2023 05:01:03 +0000
asID: 62240
IP address blocks: 154.195.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21838 (0x554e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 05:01:03 2023 GMT
Not After : Dec 26 05:01:03 2023 GMT
Subject: CN=65642292-646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:d2:4f:70:13:be:3e:d8:8d:65:73:56:b2:
f4:18:4b:c1:76:aa:4f:67:bc:39:b5:16:cb:d1:ee:
c2:a5:cd:90:b8:87:0f:c5:e0:c9:75:01:da:ab:2c:
03:76:dd:26:75:81:16:82:73:6b:7e:f0:3f:72:cf:
7a:26:37:9f:40:e3:a6:b8:c6:af:6e:ae:f8:fe:8c:
99:93:5d:0d:75:f9:87:b3:f3:7d:86:6c:2f:80:e6:
21:57:dd:9f:20:83:f4:e0:b7:21:35:aa:c7:44:a9:
90:b5:42:d5:6c:9c:16:a5:02:12:bc:a1:24:8f:68:
c4:5f:ab:8b:58:db:2f:c1:e1:8d:1b:cd:36:b6:71:
3f:d3:dc:dc:f8:f7:60:1e:f5:a3:7a:0c:d2:1d:60:
e8:31:64:bd:c6:ba:ec:d5:76:aa:86:6e:67:6d:59:
b4:22:d1:6f:87:2d:58:c5:0a:08:11:5f:74:54:e8:
30:36:76:f7:c1:5e:37:dc:51:5f:52:a1:68:97:09:
1e:68:40:22:ae:82:a2:40:8d:12:b7:7a:37:d4:52:
a2:cc:c1:be:82:60:b8:28:61:55:c1:7d:c3:62:d2:
6b:62:45:f8:ef:37:39:d7:df:af:7c:45:9f:79:23:
31:b5:85:25:26:82:99:e6:ff:aa:99:f4:1b:28:d4:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:98:A8:26:0A:86:DC:B7:24:3F:96:80:72:37:05:FC:FF:91:8B:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F884F11E8CE111EEAFD2D8724AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.183.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b3:26:10:36:10:4a:2b:ec:8a:fc:7a:f5:c5:4b:29:44:99:
b5:67:f8:6d:06:b3:fa:16:eb:3e:0e:6f:67:3e:02:49:dc:a6:
34:b5:a8:a9:97:38:79:e8:cd:48:82:7f:c8:66:7d:ea:ae:b2:
b2:fd:c2:37:a0:9c:bf:6b:45:8c:74:cf:29:a3:8d:80:2a:9f:
e1:28:f3:27:d8:61:04:31:4d:6f:68:69:b0:97:29:a0:e5:b9:
d7:c4:75:fd:eb:14:f6:5b:e0:09:90:93:a9:5a:93:bd:75:c2:
1c:d8:91:48:3a:be:59:6f:81:a3:e3:85:48:36:49:17:a1:61:
fd:2e:46:ca:10:7c:5b:c4:1c:a2:20:da:cc:18:55:7d:ee:90:
2c:1a:24:75:23:3c:7f:50:fa:ba:ee:ad:8e:2a:45:42:76:00:
ed:bf:a2:67:12:e7:51:02:88:6c:ca:45:8e:5d:8c:d7:ec:26:
82:d1:26:d3:87:3d:8e:b3:77:c4:11:4d:3e:58:5e:0c:d6:80:
d1:d5:36:ea:1c:16:78:7b:aa:b1:19:36:71:60:ce:78:45:11:
a7:92:13:81:9d:b0:83:05:95:12:05:ad:9b:fa:c9:89:5a:e7:
77:9d:a6:93:b3:89:dd:5c:8c:83:68:e1:8f:3b:91:17:91:7d:
80:4d:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:47:13 2025 by rpki-client