Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8CA63C0EA4311EC839E309AF1222468.roa
File: B8CA63C0EA4311EC839E309AF1222468.roa (raw, json)
Hash identifier: ovaOVymzitkxKxpzPZOracJSjM3sJ8SF3HE0AOJeY2s=
Subject key identifier: A3:7B:DD:CB:97:F5:91:BC:2D:6E:17:8F:72:94:EE:D9:74:82:37:E7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0895
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8CA63C0EA4311EC839E309AF1222468.roa
Signing time: Sun 12 Jun 2022 11:35:13 +0000
ROA not before: Sun 12 Jun 2022 11:35:09 +0000
ROA not after: Mon 12 Jun 2023 11:35:09 +0000
asID: 398464
IP address blocks: 154.16.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 12 11:35:09 2022 GMT
Not After : Jun 12 11:35:09 2023 GMT
Subject: CN=62a5cf71-8689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dc:a3:27:df:4c:d0:b0:19:8a:8b:e5:64:2a:
3c:a2:9b:40:e5:e7:63:80:6a:87:af:c6:b8:40:61:
2f:c4:6b:74:5d:54:f9:aa:46:88:cb:83:fb:ea:19:
4f:d3:2a:8f:8a:bf:fd:12:01:2e:44:65:1b:24:9d:
d0:3d:78:65:62:cf:5d:f1:bb:67:41:47:98:d9:9f:
92:dc:d6:b9:fc:c6:dc:98:52:6a:dd:00:e4:71:86:
76:aa:b1:20:fc:1e:e5:6f:bc:9f:82:37:39:bd:28:
93:34:4a:79:6e:72:65:fa:9c:d6:57:2e:c4:71:a2:
28:0e:45:59:70:1c:1f:25:4c:f3:de:22:ac:7c:47:
1a:94:93:8c:c1:2f:1a:69:3f:eb:6c:57:6d:9f:eb:
f4:c2:0b:c5:41:c9:4f:4c:18:f5:d7:25:3a:59:86:
b0:15:7f:c1:8f:9a:6f:32:3b:a5:68:03:fb:07:2a:
3e:27:56:63:f8:cd:75:ea:bd:8d:91:47:cf:99:db:
28:5e:57:4d:e3:5f:37:3a:c6:e0:01:0c:c0:79:c9:
59:bd:c2:32:c3:ad:0b:8b:c9:94:a2:7b:43:3e:0a:
c3:60:40:25:6a:57:0e:c8:ce:23:6c:86:64:68:06:
62:33:48:c8:95:ed:a2:58:25:cf:69:da:be:13:ec:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7B:DD:CB:97:F5:91:BC:2D:6E:17:8F:72:94:EE:D9:74:82:37:E7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8CA63C0EA4311EC839E309AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:28:6f:e9:a9:11:14:62:48:5d:e0:8a:b6:dd:87:dc:cb:c3:
8b:ec:41:d9:65:99:35:c2:f2:87:36:05:03:49:66:84:d1:5c:
81:44:44:38:b9:54:5e:9f:6d:10:29:12:a7:7a:ba:7c:18:2b:
25:3c:bc:c0:90:0b:43:d4:11:d3:dc:d4:f0:0b:c0:e8:fa:be:
a2:e8:3e:f5:83:55:b2:60:4a:f8:9c:a3:ca:1a:b8:b0:d3:c3:
3e:a6:2e:0d:fd:4b:31:15:5b:24:45:b7:be:7e:6c:61:03:d5:
68:14:d1:e7:32:3b:50:76:32:9d:b0:7d:57:38:d3:eb:a6:d8:
99:5b:bb:40:13:e4:01:46:a7:87:f7:e0:9f:82:98:18:d1:e5:
52:9a:01:cf:8b:5b:af:33:c8:04:6c:4f:d3:c8:6c:ca:92:eb:
a7:61:72:52:93:63:a7:c3:d0:35:c3:0e:5c:11:ae:2b:d0:41:
b8:dc:d8:52:79:0c:11:66:a2:af:d7:18:aa:a5:a6:6d:2d:a3:
9e:2e:84:c7:39:a7:8f:8e:0e:0a:dc:ba:1d:ce:46:fa:08:87:
7f:e0:25:83:f3:a1:01:2c:e6:84:3f:6b:33:4a:48:be:2f:f3:
67:67:a4:b5:d6:06:4c:f9:8b:08:e5:cf:09:9d:26:bd:a7:cd:
ba:fa:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:58:07 2025 by rpki-client