Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6219E6A2AB3011EB92813583F8AEA228.roa
File: 6219E6A2AB3011EB92813583F8AEA228.roa (raw, json)
Hash identifier: sGnYaH4InzywQz5moTnXKXF5YrWAptT1s7tQ1EFgErs=
Subject key identifier: B9:B9:66:EB:3A:C0:9B:9D:B6:08:4B:93:C4:66:7B:23:52:FE:1C:44
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0570
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6219E6A2AB3011EB92813583F8AEA228.roa
Signing time: Sun 02 May 2021 10:23:06 +0000
ROA not before: Sun 02 May 2021 10:22:59 +0000
ROA not after: Mon 02 May 2022 10:22:59 +0000
asID: 1239
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 2 10:22:59 2021 GMT
Not After : May 2 10:22:59 2022 GMT
Subject: CN=608e7d8a-be2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:25:6b:e9:85:b4:e2:f7:2e:9d:64:35:63:
a3:0b:fd:58:f2:26:6f:6c:c5:ef:30:e8:34:6a:4c:
52:61:e7:56:a2:a7:0c:49:78:d7:f8:44:a0:c7:18:
21:d1:b9:21:4e:3b:15:1b:11:11:09:16:9d:8b:c3:
c1:d7:c2:5f:e0:10:ec:d3:f6:24:09:a9:99:50:e7:
3d:72:a5:06:c7:4a:62:2e:62:31:12:8d:bc:94:e7:
f4:94:07:ad:1b:3b:8d:c2:15:ef:68:6b:14:ea:5e:
5e:d3:d6:23:6d:3b:d1:f2:09:b7:c3:ba:d4:07:62:
30:64:0f:45:b6:a4:c2:92:a3:89:b1:4a:c6:84:fe:
b3:d0:8d:44:81:8d:50:9a:c2:1d:50:dd:76:bb:91:
5d:d1:ba:49:54:91:1d:7e:55:ce:46:31:03:60:14:
30:36:51:14:ee:08:c8:e1:c1:93:1b:66:2a:28:2a:
20:d0:d7:47:a3:2d:f4:d4:aa:29:b8:a5:ed:33:7c:
ae:08:d4:ac:57:48:0b:ac:17:c3:7a:a3:87:b8:7b:
0c:18:f6:7c:78:cf:66:ef:4c:83:25:01:af:14:6b:
36:0c:ba:18:8c:97:07:31:01:e5:65:ea:9d:51:15:
f6:3f:60:7e:6a:a0:ef:97:82:47:d1:fa:c8:65:50:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B9:66:EB:3A:C0:9B:9D:B6:08:4B:93:C4:66:7B:23:52:FE:1C:44
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6219E6A2AB3011EB92813583F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d1:f3:98:d4:20:ad:f1:8a:ec:af:4d:6d:10:ac:82:32:4e:
8d:e4:b8:6b:c5:ff:18:d7:c5:5c:61:31:f1:a6:b3:e9:fc:3a:
85:c9:80:4e:2e:76:d9:24:f9:f1:10:c7:ae:09:5e:6a:9a:94:
8d:8c:20:2b:9f:54:54:f3:b4:84:8f:1b:9a:a2:e9:ae:cd:05:
dd:62:da:6c:0d:df:65:69:f5:99:1c:3c:9d:e1:bc:7d:cd:d7:
0b:b5:3c:16:f9:d4:21:32:d2:97:34:f0:d9:76:66:71:05:f9:
1e:dd:ba:8d:b0:fe:09:3c:6a:e8:af:99:59:10:e0:72:c1:55:
01:86:db:96:a2:2b:d7:16:c0:82:4a:fb:ac:27:6a:f5:d3:2a:
83:17:c5:31:2b:dd:f5:a7:64:7e:0b:cd:ef:3d:56:a6:71:ee:
cd:a4:a1:2d:04:99:2a:5c:01:56:bc:f5:b7:44:40:fa:dc:8c:
e7:44:4c:96:95:e0:c7:9e:c5:e7:8e:f1:2b:a1:54:ed:40:6f:
0b:1b:9e:15:ac:57:1d:e2:15:6b:57:a4:49:37:48:65:96:e6:
7c:99:7f:76:51:99:41:3f:a5:fc:36:ba:69:41:2e:d2:5e:71:
24:2f:6c:82:6a:59:68:f9:86:78:1f:51:5a:1f:8d:a8:ee:65:
70:25:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:42:57 2025 by rpki-client