Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E13D0B2878C11EDA33E16A8F1222468.roa
File: 8E13D0B2878C11EDA33E16A8F1222468.roa (raw, json)
Hash identifier: wIbYY+oED6REn268HOJvIWBHr5CdN/sP+5RXRxvRyiw=
Subject key identifier: D9:C6:8C:76:54:7C:B6:54:2A:20:53:89:4F:41:CB:6B:1F:18:7A:32
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B1B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E13D0B2878C11EDA33E16A8F1222468.roa
Signing time: Thu 29 Dec 2022 15:22:07 +0000
ROA not before: Thu 29 Dec 2022 15:22:03 +0000
ROA not after: Fri 29 Dec 2023 15:22:03 +0000
asID: 61317
IP address blocks: 154.16.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2843 (0xb1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 29 15:22:03 2022 GMT
Not After : Dec 29 15:22:03 2023 GMT
Subject: CN=63adb09f-9281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:04:ff:28:7f:dc:62:09:43:bf:37:e6:ff:
b2:d5:7a:be:08:fd:c1:4d:19:6b:0d:0c:17:72:bd:
02:11:e8:7d:ac:b7:4e:7f:5c:af:27:a6:da:d6:be:
48:b7:c5:31:5b:bc:83:8d:ed:23:2c:d6:0d:ee:55:
21:0b:b7:00:7d:3b:7e:30:3e:7e:7f:fb:14:ff:18:
c7:7d:6d:72:50:27:8a:37:24:2a:c0:39:2b:45:85:
c0:09:5f:84:7f:a9:46:f3:b8:e6:95:bc:6e:0e:4a:
02:0b:34:1a:ad:ae:f0:8a:d2:14:e8:c6:08:7a:66:
72:1a:4c:61:01:c0:f4:0d:b5:fa:8c:8b:b6:61:6b:
67:c9:2c:6a:87:73:57:a6:b5:4c:4a:22:ae:13:76:
06:c2:2e:9d:fd:84:eb:5d:6c:89:2c:96:36:78:22:
88:09:c7:1c:b9:6f:6c:b2:80:2a:72:f1:c3:0a:fb:
cc:cf:13:4d:89:3f:75:1f:91:ff:3a:cf:28:8d:d0:
ad:43:2f:c0:e4:ec:97:bb:3c:8a:48:2d:95:e4:2b:
b1:25:c7:25:2c:c1:b6:72:f1:b1:c5:d6:4c:88:65:
f1:df:71:52:6a:77:14:ee:13:9c:e8:a4:11:4f:25:
8d:62:87:1e:3b:ac:0a:b4:a9:04:9c:51:da:cb:e2:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:8C:76:54:7C:B6:54:2A:20:53:89:4F:41:CB:6B:1F:18:7A:32
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E13D0B2878C11EDA33E16A8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.212.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ac:ed:25:63:b1:e4:1d:59:7f:4f:a2:ac:2a:f2:b7:af:6e:
00:e9:fb:31:46:f3:83:8c:f6:3f:7d:17:9e:76:f0:63:0e:5c:
bf:ef:3e:b3:a6:bc:5e:62:9e:16:ba:24:f4:d0:87:e3:fa:36:
ad:5d:7c:d8:64:09:c6:73:0e:87:ef:03:af:a6:d4:57:73:a6:
ae:77:cd:fe:78:56:b1:c1:3a:11:a7:1f:72:ef:5a:81:e0:f0:
94:1e:d7:45:cf:49:8b:3d:14:1d:9b:21:df:dc:84:37:0d:06:
9c:39:9d:11:f0:19:79:87:65:89:44:55:9e:5c:5c:1a:a7:7d:
ff:d4:c8:29:e4:b5:29:dd:e6:d4:6e:a3:9c:59:16:b4:01:2a:
99:d5:27:59:8d:ac:44:17:2d:c3:e6:97:8a:70:94:f6:84:f2:
9a:d7:6b:2e:9c:0e:3f:1f:0d:49:5e:c2:a0:d4:09:cb:c8:fb:
b9:a5:35:af:56:8e:e7:96:31:e3:fa:72:6f:9b:12:4f:ec:a2:
99:e8:3e:99:9c:2b:eb:18:9a:fd:7a:de:e2:1d:14:f6:65:e2:
e3:dc:7c:94:aa:48:4f:46:8a:7e:0a:90:b6:b1:af:29:ac:91:
3b:ab:cf:7a:cd:ce:cc:25:25:1d:9a:b4:ca:2d:b4:fb:c9:42:
85:d0:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:33:54 2025 by rpki-client