Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F84342A8CE111EEA360CE6F4AD9E6FC.roa
File: 0F84342A8CE111EEA360CE6F4AD9E6FC.roa (raw, json)
Hash identifier: LoT7HCBgLSqR6y96n50Zo1XlLXo+tlnJwXioY6R0rtU=
Subject key identifier: D7:DE:08:C6:17:66:99:36:C8:AC:FD:4D:4F:4F:E8:C3:7B:9E:8D:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5540
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F84342A8CE111EEA360CE6F4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:54:35 +0000
ROA not before: Mon 27 Nov 2023 04:54:32 +0000
ROA not after: Tue 26 Dec 2023 04:54:32 +0000
asID: 62240
IP address blocks: 154.196.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21824 (0x5540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:54:32 2023 GMT
Not After : Dec 26 04:54:32 2023 GMT
Subject: CN=6564210b-4e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:84:31:e0:4c:2e:3f:17:69:93:86:46:ac:
6e:1b:91:d5:69:75:c7:ab:9e:49:a7:6b:47:b9:3e:
54:c3:12:c3:44:77:fc:f1:49:01:a9:3e:e4:24:77:
c8:64:79:34:4c:b9:95:9d:11:7c:1a:65:b3:cb:16:
c4:10:a3:c9:30:d5:86:d6:fb:96:b6:39:67:7b:b1:
e3:9c:c7:5f:bb:63:28:d0:28:5e:44:46:f2:e9:2a:
02:97:e2:51:a8:62:06:5e:9f:42:61:cb:aa:6e:db:
42:6f:c4:4c:60:3a:cd:b4:e2:a7:85:3c:f9:e5:5b:
94:fc:c8:1c:1f:a8:be:88:f3:da:6b:bb:b6:64:cd:
85:95:f3:87:3e:54:95:e3:70:af:01:25:27:ad:b3:
fc:59:6b:6a:a4:07:5b:25:70:b1:51:64:00:57:d0:
2b:58:c0:a0:9a:88:c6:a9:73:3d:27:0c:fc:e5:ed:
b8:38:3e:08:9f:af:79:03:15:3f:58:5e:fa:c0:5c:
d4:8b:eb:f9:94:cf:dc:e0:97:88:f4:37:07:be:f6:
74:7b:70:e6:6d:36:d7:ca:de:78:19:83:77:c1:84:
55:39:7d:d0:8d:7f:38:c3:b3:98:38:40:12:99:eb:
84:e2:7d:06:08:d0:48:4d:2d:27:27:c4:e0:6e:86:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DE:08:C6:17:66:99:36:C8:AC:FD:4D:4F:4F:E8:C3:7B:9E:8D:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F84342A8CE111EEA360CE6F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.70.0/24
Signature Algorithm: sha256WithRSAEncryption
be:89:99:4b:c9:82:7b:4a:9f:c3:29:5e:3b:7c:7f:e6:02:58:
1f:71:b8:3e:b5:42:ac:56:e7:19:83:69:70:eb:95:97:7f:94:
78:f5:3f:ce:98:e2:4d:f2:b0:c9:a7:02:37:da:fe:ad:b1:2a:
35:1d:b1:dc:7b:60:09:27:97:38:b8:2c:a3:15:4e:6e:f6:74:
9a:ee:53:a3:ec:cc:1c:bc:d7:8d:01:30:dd:05:cb:06:d6:5f:
ce:01:f9:69:c1:25:3c:7f:0f:8f:ab:91:b4:33:a7:2d:54:c0:
ca:d6:94:f2:e3:e7:2b:58:f7:cd:69:0b:b6:e2:eb:f7:71:1e:
aa:47:4e:9c:1d:47:24:54:dc:e9:6d:ce:1d:18:1b:e4:ba:22:
9e:e4:2a:14:47:44:ff:7c:98:51:af:92:d9:53:c1:59:80:1d:
07:9f:c5:a5:59:14:6e:bb:49:9c:65:51:f2:53:0f:47:14:bf:
09:63:92:68:48:3c:e0:7c:01:13:d8:75:1f:4b:75:08:c5:27:
d1:a1:56:70:b9:49:be:f2:ef:69:d9:5f:b6:1c:95:d9:30:1a:
db:0d:31:89:2e:14:86:ae:7b:59:f2:06:82:4d:0e:e6:bc:ec:
21:cd:05:d9:8a:84:14:b5:9c:17:62:06:fa:09:29:ad:3d:57:
0f:ce:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:59 2025 by rpki-client