Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB21E57C8A8D11EE9A7B3D834AD9E6FC.roa
File: FB21E57C8A8D11EE9A7B3D834AD9E6FC.roa (raw, json)
Hash identifier: uS1sonbjIwIgE9NEVhYFFkT/gB3vJszgyqYgj8sA7QA=
Subject key identifier: A1:99:CD:62:16:39:35:DB:B1:B3:23:CE:8D:80:9A:39:9A:C5:76:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 536C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB21E57C8A8D11EE9A7B3D834AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:54:50 +0000
ROA not before: Fri 24 Nov 2023 05:54:47 +0000
ROA not after: Tue 26 Dec 2023 05:54:47 +0000
asID: 62240
IP address blocks: 154.195.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21356 (0x536c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:54:47 2023 GMT
Not After : Dec 26 05:54:47 2023 GMT
Subject: CN=65603aaa-0fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:0a:85:ce:ff:b8:0a:e4:4e:32:bd:5b:a1:
7d:71:99:14:e9:17:df:7c:92:0b:12:b2:e9:39:89:
6b:88:8a:cf:76:8f:40:a7:18:6a:03:ad:c9:24:79:
5b:96:de:60:3f:7e:2a:1c:57:f9:43:22:55:7c:73:
12:fb:e0:8a:ad:ca:4c:bf:60:d9:28:5e:06:a5:db:
e8:10:4a:f4:a0:8e:bf:f7:e7:bf:09:6c:ee:a8:a0:
e3:e5:25:ca:e2:31:b9:54:1c:3f:5c:bb:34:ba:52:
1b:4e:42:23:59:14:2f:89:80:0f:de:8b:8b:32:91:
31:98:fc:ab:b6:f1:79:24:fe:4b:33:94:21:62:d5:
e0:c7:e3:bd:c6:fb:e2:06:50:24:21:a4:d9:43:41:
b5:b1:f8:be:ba:a2:36:43:c5:21:15:41:93:24:fc:
f4:f1:7a:d5:06:d3:95:37:7a:df:52:66:9c:86:ce:
c7:be:52:62:c8:ae:e5:67:29:0c:af:c9:ea:08:4b:
51:b3:b1:46:7e:cc:0d:68:0b:38:c2:d5:34:44:ec:
87:57:de:97:28:1b:28:75:1e:b9:32:04:1e:bc:81:
19:38:9b:05:bd:51:b3:70:7b:de:36:d4:aa:5c:0b:
fb:2e:90:f4:50:a8:46:b5:85:7c:68:36:83:66:89:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:CD:62:16:39:35:DB:B1:B3:23:CE:8D:80:9A:39:9A:C5:76:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB21E57C8A8D11EE9A7B3D834AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
35:00:ab:0d:fd:94:1a:b5:6c:67:f3:43:b9:6e:a7:b9:eb:a4:
9d:95:f1:47:32:17:2e:e6:0f:6b:5c:1e:d3:f1:50:8d:04:08:
fe:36:86:ad:a3:22:44:1d:d0:51:ad:74:30:4e:8f:18:aa:a2:
ad:4c:18:87:ca:07:15:3a:14:33:ae:c9:b0:52:f4:96:c8:9c:
2e:46:08:f2:c6:68:3d:c6:b1:84:f8:14:59:ad:76:44:e5:e7:
e7:92:2d:bc:76:c6:12:d9:e2:e2:ab:fb:76:3f:64:81:4c:bd:
5c:f7:ae:fe:c5:0f:2b:c6:b7:53:bb:25:e7:de:9a:64:1f:d1:
56:39:0b:15:ed:de:02:3d:9f:9a:ca:51:8e:24:fb:b0:40:e7:
50:a1:78:ec:a4:b1:f5:c7:e6:ee:29:c2:1e:9f:43:4c:bc:4c:
47:52:78:19:06:5f:02:f3:55:09:27:d6:e0:bb:10:00:b7:1d:
5e:9c:b9:e9:f9:23:3b:42:80:ba:6f:92:37:9f:22:25:3c:99:
0f:d9:21:a2:3c:ae:ac:b1:72:2f:60:02:87:87:83:5f:23:24:
f5:ed:5f:b8:61:43:ac:ec:47:52:d1:20:80:23:aa:b3:5d:0a:
e6:5e:31:96:15:23:e9:84:34:01:4d:ce:fd:a4:fa:37:ee:f9:
c1:d2:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:04:08 2025 by rpki-client