Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF2D8B4A8CDA11EEBD1E325C4AD9E6FC.roa
File: FF2D8B4A8CDA11EEBD1E325C4AD9E6FC.roa (raw, json)
Hash identifier: Gf0cVr0QrPoLv1gZPJab3koq5O5BTK+ZCjDGxoUdARo=
Subject key identifier: CE:96:9C:36:1F:87:E1:66:1D:D7:39:8B:8C:E5:9F:1D:5D:59:19:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF2D8B4A8CDA11EEBD1E325C4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:11:11 +0000
ROA not before: Mon 27 Nov 2023 04:11:08 +0000
ROA not after: Tue 26 Dec 2023 04:11:08 +0000
asID: 62240
IP address blocks: 154.195.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21688 (0x54b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:11:08 2023 GMT
Not After : Dec 26 04:11:08 2023 GMT
Subject: CN=656416df-b803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:92:07:50:44:3d:61:41:a7:ce:0b:71:f1:
68:ca:86:af:d9:90:70:77:fa:0c:f4:6f:f0:9c:d5:
d7:04:28:ae:15:ea:2d:12:15:b0:09:47:62:cb:d3:
db:09:ca:59:3e:f5:c3:00:92:d0:e4:29:3a:3b:b5:
d6:b6:47:27:61:6c:76:c2:6f:8b:04:59:af:52:04:
4d:08:b4:6a:3b:3b:e6:4a:80:ea:51:08:ee:32:c4:
44:67:af:4a:b7:1e:10:ec:fa:07:e1:7a:3d:68:58:
0e:1e:b9:ec:43:5d:cc:e6:7f:7f:7b:ce:d7:45:2b:
03:4e:36:1a:5f:d7:26:29:4c:41:b8:11:6c:7f:46:
40:36:5f:f7:03:49:7a:32:d4:d5:35:20:df:26:9f:
a5:11:49:c9:13:98:b7:3b:e3:e4:05:f4:c6:b3:0f:
17:6a:20:a6:72:43:4e:25:b4:ff:f3:08:bb:94:59:
3d:27:5e:96:54:65:81:9c:af:04:21:37:11:0b:0d:
37:2c:a8:6d:9b:21:31:68:75:c9:61:76:f4:97:34:
bd:fb:94:28:76:ce:71:df:20:69:29:90:2f:16:b7:
70:2c:c3:68:62:6d:02:94:b7:b2:de:38:81:1d:85:
a5:03:2f:69:88:3d:06:77:d6:df:32:01:b8:b9:8f:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:9C:36:1F:87:E1:66:1D:D7:39:8B:8C:E5:9F:1D:5D:59:19:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF2D8B4A8CDA11EEBD1E325C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5e:a0:1c:a9:51:68:39:72:5b:de:ff:16:53:13:10:8c:72:
b1:4e:d3:81:ae:33:81:7e:1d:da:ef:d5:c2:0c:66:65:e6:bd:
19:68:36:9a:e2:ac:84:11:0c:46:31:49:b6:cc:6d:64:e0:43:
e6:2c:af:bd:31:5b:b9:e8:03:a7:31:99:d4:7c:51:ad:54:7f:
b8:26:a3:d4:9d:9a:88:4f:6e:47:f1:fc:4c:72:00:67:5b:1d:
bf:c6:eb:2d:a4:6c:d4:25:8c:64:c1:7b:80:c6:da:02:7e:3f:
9a:fd:ce:76:99:1e:0f:e2:94:55:2b:0a:79:ad:52:69:71:d3:
b2:a4:83:50:4b:e2:a0:15:21:c8:f4:83:c5:2f:3c:cb:7d:3c:
cc:96:c6:b6:fb:ca:e8:9d:b3:4e:5a:f6:74:e1:85:ba:16:1d:
32:af:01:50:eb:98:a9:e7:9a:eb:f9:a3:f9:43:d7:b9:1f:8f:
8d:07:cc:6a:c2:a2:d6:6f:af:b0:f3:58:6f:df:4e:3c:78:29:
9e:16:1a:9d:8a:f6:6f:94:6a:6d:82:09:7f:6d:e2:b3:b8:34:
61:74:4b:95:01:3d:cd:6a:c5:a0:2c:ae:b5:34:21:cd:58:d1:
24:f3:f6:d7:32:db:31:c3:2c:b3:86:17:35:9a:05:ee:6e:75:
42:c3:24:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:32:56 2025 by rpki-client