Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9976DAFAD9BF11EDAEC16D0A306D8C1D.roa
File: 9976DAFAD9BF11EDAEC16D0A306D8C1D.roa (raw, json)
Hash identifier: Im3eGBOjnfqOlw6rddug6ZyDK8vbE9+BR3SumuaLB0U=
Subject key identifier: 17:DA:6E:CB:7E:23:9A:43:8B:8F:5F:3A:38:B2:57:00:BB:C1:11:46
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D52
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9976DAFAD9BF11EDAEC16D0A306D8C1D.roa
Signing time: Thu 13 Apr 2023 05:54:06 +0000
ROA not before: Thu 13 Apr 2023 05:54:01 +0000
ROA not after: Tue 15 Apr 2025 05:54:01 +0000
asID: 206505
IP address blocks: 154.16.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3410 (0xd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 13 05:54:01 2023 GMT
Not After : Apr 15 05:54:01 2025 GMT
Subject: CN=643798fd-8014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1c:8b:94:5f:52:bb:2b:8d:68:58:0f:08:8d:
86:df:3a:4d:02:5a:9f:20:9a:b5:e6:57:b0:dd:07:
9e:8d:1a:2e:bb:14:5a:3a:cd:ea:2b:9c:c2:fa:52:
a8:02:56:98:f2:d8:17:be:b4:81:d4:07:45:dc:85:
b5:31:81:0b:5e:4c:57:46:d7:ea:83:0c:cb:04:50:
a2:9a:ae:2d:1e:35:d3:44:e0:94:b9:91:a8:11:17:
e3:02:c5:ca:56:ac:e3:ba:c6:7c:8c:b9:95:bf:2b:
f6:7a:3f:b6:a3:ca:ec:37:fa:a7:e3:03:c7:d2:34:
cd:65:ee:ab:18:21:83:cc:35:6d:38:41:ba:f6:c8:
d1:15:25:55:90:2d:89:0b:08:c0:06:5d:a1:9b:07:
87:59:5f:3a:04:01:49:25:8d:c1:e6:3a:6e:7f:39:
ba:b5:98:b3:45:05:14:95:31:89:22:d2:a4:a4:4b:
c2:7e:c1:51:1c:83:ac:b9:5d:61:41:86:88:6e:4e:
ea:88:7a:80:c2:b6:9a:49:1f:41:e0:4b:a0:f3:aa:
cf:dc:e5:96:ae:ae:7d:a1:65:86:2c:23:ae:c8:35:
ca:e8:48:bb:fa:07:19:93:25:d9:42:3a:da:f5:e4:
67:6d:3d:00:4f:62:29:5b:9d:d6:5e:e2:ca:35:91:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DA:6E:CB:7E:23:9A:43:8B:8F:5F:3A:38:B2:57:00:BB:C1:11:46
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9976DAFAD9BF11EDAEC16D0A306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:1f:e0:a3:e9:43:d6:6f:e3:3e:4d:70:94:e4:45:9f:b7:47:
44:07:8a:5f:ac:56:4b:41:8d:8c:32:1b:16:61:db:15:8d:e1:
4e:04:9f:ae:45:28:fa:cc:fb:27:57:6c:bc:2b:00:00:ea:2e:
11:27:f2:52:94:81:96:79:80:32:aa:96:cc:da:70:b8:09:d9:
7a:a3:4e:51:2e:c0:b0:58:29:2a:74:70:be:7e:28:59:e6:37:
8a:8b:f3:a2:4f:f5:b9:1b:e3:a5:fe:34:23:c8:cb:ba:e1:95:
0e:35:a0:cf:5d:e1:23:08:ce:df:09:3c:52:6d:9d:6a:44:1c:
6c:ca:55:e6:d7:53:f8:ed:29:e3:af:78:04:b7:ae:3d:50:db:
0e:65:c4:0e:9b:9e:d7:0d:89:4d:ba:5a:67:2b:eb:97:e4:2b:
30:a9:82:2b:54:7a:7b:e1:cc:6a:e9:e4:a1:c0:e5:67:cc:d1:
42:8f:85:bb:d7:ac:35:0e:f8:de:ab:97:aa:7f:41:ff:25:0c:
66:4c:20:d0:a4:cf:f3:f4:ee:9c:f2:56:8f:ba:b4:8d:c3:48:
b5:64:da:0f:06:17:8e:a9:2c:82:ce:51:bb:38:ed:cf:c7:35:
23:5e:be:ef:70:4b:11:58:f5:8a:23:d1:ec:6a:6c:c5:02:cf:
ce:cd:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:08:21 2025 by rpki-client