![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/67B8915635CA11ECB7B4FB2DD8A014CE.roa
File: 67B8915635CA11ECB7B4FB2DD8A014CE.roa (raw, json)
Hash identifier: eosicFG2NSuviO16TG3RiesF12izD2SmmWiOAbZni+Y=
Subject key identifier: 98:6C:4C:DC:09:BA:20:12:1D:49:0F:B0:76:9F:18:39:78:2F:C2:10
Certificate issuer: /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial: 24
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/67B8915635CA11ECB7B4FB2DD8A014CE.roa
Signing time: Mon 25 Oct 2021 19:33:18 +0000
ROA not before: Mon 25 Oct 2021 19:33:15 +0000
ROA not after: Wed 24 Jan 2024 19:33:15 +0000
asID: 22822
IP address blocks: 2c0f:fed8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636185AF
Validity
Not Before: Oct 25 19:33:15 2021 GMT
Not After : Jan 24 19:33:15 2024 GMT
Subject: CN=6177067e-955a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:4d:f2:9f:ce:90:36:a8:09:9d:c5:d0:08:
cb:31:eb:76:33:d4:0c:47:b6:55:7d:c1:47:ab:cb:
83:9c:20:5e:4a:ef:fb:51:c2:f4:85:96:e3:cb:fb:
54:cd:89:f2:cb:33:b5:88:e2:47:fa:65:0c:26:5f:
a7:be:c1:91:f5:79:c7:5f:25:12:1a:bd:04:d8:d4:
e9:e8:d4:04:30:5d:d7:c7:3f:aa:46:97:62:11:cf:
42:99:bb:a3:84:c1:e0:e2:a0:37:7d:e1:da:be:e2:
bf:a5:9b:52:f9:56:60:99:e8:3e:6e:a8:69:ba:f1:
43:46:e8:45:de:66:05:d5:c3:0f:66:90:73:dd:6e:
ae:c6:e4:4e:c1:2e:0b:c6:ec:7f:c2:84:65:34:f3:
71:46:40:e5:df:ea:fe:e8:e6:6a:15:0a:10:cf:02:
e4:77:f0:c0:2f:e1:99:5b:c2:a2:28:5b:3c:26:21:
03:c1:e8:80:bb:ba:24:86:2d:4a:a6:7b:f7:b7:b2:
a1:e6:d1:70:b4:1d:79:ab:d4:98:cf:14:a5:70:3c:
31:1d:ff:22:24:cc:41:4e:9f:b9:44:cb:de:8f:38:
b1:6a:7d:c8:45:34:08:d4:7f:d1:fe:8d:a0:47:66:
f3:28:9e:73:cb:fd:fb:3b:bc:9d:8e:ce:ea:63:48:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6C:4C:DC:09:BA:20:12:1D:49:0F:B0:76:9F:18:39:78:2F:C2:10
X509v3 Authority Key Identifier:
keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/67B8915635CA11ECB7B4FB2DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fed8::/32
Signature Algorithm: sha256WithRSAEncryption
b2:71:cc:60:aa:79:a6:ef:86:d1:bd:c4:46:82:68:c7:6f:46:
20:a9:5f:6b:a9:c6:da:b3:5e:b9:98:fe:b2:21:40:5b:ea:ab:
6b:a0:87:e8:d9:53:32:b6:b1:86:84:92:b9:81:0d:16:d4:28:
c3:a5:87:f6:e6:dc:c4:9f:c3:9c:88:e3:a8:f1:00:99:16:7c:
c1:04:e0:e5:4e:52:89:86:c5:d5:f8:b8:a2:4c:62:d3:31:db:
a0:39:68:0e:9b:ac:b0:c9:e1:03:b8:2f:06:1e:cc:c2:a5:b0:
59:f1:df:28:1f:db:27:ae:08:80:d8:57:41:bc:b8:71:ba:32:
aa:5f:b2:cc:8d:9b:b3:d3:6c:6f:52:72:ea:eb:e5:c7:c9:0f:
9a:62:97:3d:f2:d1:9c:da:88:bf:ff:28:da:3e:a6:d6:19:b6:
61:ce:f8:fa:b8:ed:e6:a6:2a:af:21:c6:4c:27:df:f4:d9:d6:
f4:51:e6:31:3d:ce:11:a9:33:c5:db:72:c4:20:63:80:8f:9c:
8d:07:e3:f0:fe:16:01:65:ec:84:71:23:65:b4:30:0b:18:13:
10:ea:6a:8a:96:b8:67:b5:e2:c7:ae:dd:60:b2:6a:cc:c4:08:
c6:f8:08:06:b6:3c:4e:65:02:b2:fe:63:95:70:82:69:11:bb:
2a:5a:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:53:46 2025 by rpki-client