Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F5CCBBCF51111EF82710F70762E951A.roa
File: 0F5CCBBCF51111EF82710F70762E951A.roa (raw, json)
Hash identifier: RhQhTzCjb0j09w7Nzgl3i+z0oyplWSQDiZu+pBPd9cA=
Subject key identifier: B7:3E:65:F2:7A:91:1C:5B:5B:59:34:83:E2:26:F7:B5:DA:78:92:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01689A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F5CCBBCF51111EF82710F70762E951A.roa
Signing time: Thu 27 Feb 2025 13:45:09 +0000
ROA not before: Thu 27 Feb 2025 13:45:06 +0000
ROA not after: Wed 26 Mar 2025 13:45:06 +0000
asID: 62240
IP address blocks: 154.196.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92314 (0x1689a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 13:45:06 2025 GMT
Not After : Mar 26 13:45:06 2025 GMT
Subject: CN=67c06c65-24b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:0c:67:f0:ec:fa:ed:c5:87:b2:71:a4:1d:
63:2b:74:09:eb:a5:1a:c3:9f:8d:c4:e8:50:e7:52:
57:b0:15:49:8e:9c:d4:7e:ca:87:91:69:11:7c:ee:
ed:d2:36:8f:63:96:3c:95:fc:2b:ef:86:c6:df:03:
b5:ce:d8:59:38:8c:8e:50:40:37:0f:05:28:bb:30:
f0:a8:62:39:71:94:17:ac:25:d0:c9:6d:44:29:df:
f0:b5:bf:87:3a:62:6e:c8:93:2a:1b:20:ce:68:32:
2d:d7:ca:fd:f9:20:22:f6:72:05:18:de:a2:4c:0b:
a2:eb:49:c1:78:97:60:23:2c:c2:65:57:58:6d:22:
89:b3:58:8c:ec:5c:d5:88:74:2b:59:9b:ed:5f:30:
96:6b:e5:f4:af:f9:95:b2:c6:fb:6c:7c:c2:13:79:
e1:97:a0:a7:49:b3:0a:0e:79:09:ce:c4:71:0a:dd:
8f:42:4f:e4:1c:7b:d2:dd:fd:a4:d9:de:ec:b9:d0:
69:26:1a:20:ff:1b:8b:f2:99:0b:d0:a5:bf:9d:06:
47:64:a0:c5:26:26:d0:f7:dd:e8:5a:ea:17:09:42:
4e:87:10:ef:0f:7a:ac:28:69:4f:06:97:fa:b3:7b:
84:15:37:44:c8:6b:10:c9:35:e6:f8:a9:fe:f7:4f:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3E:65:F2:7A:91:1C:5B:5B:59:34:83:E2:26:F7:B5:DA:78:92:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F5CCBBCF51111EF82710F70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.24.0/24
Signature Algorithm: sha256WithRSAEncryption
13:46:f3:e9:ab:09:d5:6b:ef:41:ca:f1:cc:01:66:f0:10:ee:
fe:78:26:10:4e:12:66:c7:26:77:3d:71:20:59:fd:d0:f2:ac:
6d:fd:67:c7:7d:44:3b:5c:30:aa:e8:e3:b8:7d:73:06:db:22:
ec:56:e7:25:17:a9:b9:60:69:35:fb:1b:4e:f6:27:ee:b1:1d:
f2:a1:af:e7:7d:e8:d7:f0:09:e1:be:bc:b6:6b:ef:2c:52:46:
8a:bc:49:25:5f:6f:0e:e6:b6:a0:69:d1:f4:41:d6:55:4f:7c:
32:d8:33:d9:ac:16:dd:8e:72:34:86:75:63:95:87:ad:fc:ab:
37:9e:80:12:e0:c6:25:03:71:33:e1:66:e7:20:87:69:be:09:
55:a6:f2:c9:55:7f:b9:6e:c7:24:e6:bf:9a:6a:15:4e:ef:3a:
aa:af:7b:66:28:0e:f5:31:2f:75:2b:48:b2:16:8a:3e:12:f4:
d1:ba:91:b1:d9:fd:49:0f:db:d7:15:51:a5:9f:d8:5b:18:a7:
a9:47:29:69:4b:02:4c:95:1f:dc:d6:8f:d2:85:f7:67:ab:f2:
7a:1b:13:a8:91:2f:96:4b:cc:5b:a3:6c:95:ca:0a:7b:3a:99:
94:5f:6a:7e:64:29:9b:e1:c1:d1:95:2f:6e:30:16:ee:73:96:
07:50:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:59:29 2025 by rpki-client