Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBFB54A48CDD11EE9B30B0654AD9E6FC.roa
File: FBFB54A48CDD11EE9B30B0654AD9E6FC.roa (raw, json)
Hash identifier: iS6fp0fWi7iOdDVKaIjEHrNqOX9KMtQp0fMqueGgmIE=
Subject key identifier: 43:32:3C:03:6C:0F:E3:EB:89:2F:10:6A:43:D4:24:57:88:B7:2E:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5502
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBFB54A48CDD11EE9B30B0654AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:32:34 +0000
ROA not before: Mon 27 Nov 2023 04:32:31 +0000
ROA not after: Tue 26 Dec 2023 04:32:31 +0000
asID: 62240
IP address blocks: 154.196.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21762 (0x5502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:32:31 2023 GMT
Not After : Dec 26 04:32:31 2023 GMT
Subject: CN=65641be2-0cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:67:b1:d0:9e:a3:8c:13:c5:70:42:1d:9b:fd:
4f:de:6b:58:54:97:2c:bb:f4:1f:3e:37:8f:ab:08:
81:64:47:e5:0c:40:32:ef:1f:b8:f5:3f:3a:02:5a:
d4:4a:08:d7:6a:b2:f5:df:77:cd:c6:17:0c:02:f4:
92:02:47:2b:50:8b:7b:a8:b8:18:df:a6:dd:3c:7b:
b1:24:96:15:03:99:b0:84:41:76:8c:78:d5:08:2b:
e0:74:17:cf:59:99:a0:42:09:88:7a:95:86:b2:e3:
e2:14:a9:71:72:0f:11:67:b0:5e:c4:04:e2:cb:ff:
50:b2:38:8d:33:d7:33:fc:f8:b0:e0:81:0d:92:c3:
81:29:88:af:e6:a1:41:a7:08:e2:29:3c:b5:77:8b:
c1:0c:14:d8:04:4a:22:8a:18:0b:e8:f1:64:f8:b1:
14:5b:4a:fe:97:6e:a1:45:9f:a3:4c:a0:fb:0a:42:
e5:c1:e5:c1:4d:de:44:6a:91:01:7a:53:22:2e:1c:
fb:42:4f:ea:85:9d:ef:58:5c:c8:23:10:e1:5a:c8:
d1:62:27:78:90:1b:8f:ae:15:a3:bd:91:93:f5:d4:
03:21:5d:bc:07:2d:40:51:89:dc:fc:db:cb:ad:74:
7d:8c:db:a0:7b:ab:7f:4b:63:0a:82:25:d2:19:a6:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:32:3C:03:6C:0F:E3:EB:89:2F:10:6A:43:D4:24:57:88:B7:2E:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBFB54A48CDD11EE9B30B0654AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.76.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:49:ba:62:96:7b:89:9b:32:69:26:8a:6b:18:b6:74:65:76:
64:9b:b5:eb:ef:79:38:1b:01:3c:31:ca:f1:f4:4f:37:28:a6:
f8:8e:70:bb:c6:b9:19:b0:9d:5e:63:7f:f4:4a:f8:f5:75:c3:
31:27:92:85:0d:59:71:64:89:2f:72:e4:ba:63:35:97:be:e1:
40:ef:43:f3:2a:35:61:50:6f:59:1b:b4:8c:31:6d:82:11:17:
c9:15:79:f9:e5:e0:78:6e:3f:a3:f8:5a:5a:79:d3:85:ce:26:
7a:61:29:6d:32:2c:c8:ae:60:d4:58:b2:fe:23:ac:97:19:33:
a5:b5:65:9a:f2:f2:f8:4d:9e:8c:a8:d4:a2:a6:7b:31:d8:ca:
7e:7c:78:a0:1b:10:04:48:20:53:e2:c1:4e:75:2b:64:6a:7a:
f2:0d:de:6c:f0:1e:39:31:f6:e0:d7:11:f0:89:8f:82:6b:59:
e9:1f:f3:f4:50:5c:13:2f:ae:60:91:09:f5:ed:f6:6b:46:75:
49:1a:86:aa:f2:d7:81:07:bb:3d:08:72:a3:7d:ba:2a:ab:52:
cb:6b:06:72:21:a8:3f:75:42:3c:e4:ae:82:5c:95:70:c7:25:
e0:dc:ff:9f:8f:c0:c0:06:0e:bb:b8:3e:3a:ef:12:9e:8e:b9:
e5:84:7f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:21:00 2025 by rpki-client