Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10AEA406F50F11EFA10C0D62762E951A.roa
File: 10AEA406F50F11EFA10C0D62762E951A.roa (raw, json)
Hash identifier: Z785HK8vcyGSM5TMHefOY9n+sBE2Jhl69XSjOljpeQg=
Subject key identifier: 7D:91:12:A6:24:29:84:BC:8C:94:12:BA:00:33:CB:29:F9:45:EC:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016889
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10AEA406F50F11EFA10C0D62762E951A.roa
Signing time: Thu 27 Feb 2025 13:30:52 +0000
ROA not before: Thu 27 Feb 2025 13:30:49 +0000
ROA not after: Wed 26 Mar 2025 13:30:49 +0000
asID: 62240
IP address blocks: 154.196.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92297 (0x16889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 13:30:49 2025 GMT
Not After : Mar 26 13:30:49 2025 GMT
Subject: CN=67c0690c-015d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:50:f1:a0:dc:6b:12:d0:eb:10:c5:99:c5:
c2:86:8b:18:a5:98:33:59:8d:6d:9c:c8:87:b7:4f:
42:09:46:e4:d6:a8:b8:65:48:26:ce:82:4b:95:64:
24:ea:e0:f0:49:e5:46:50:8d:08:e6:6a:fa:c6:36:
79:d4:a7:44:ef:b9:97:d6:4b:c8:66:61:d5:5e:3d:
00:fb:b9:b2:1f:3a:77:e6:a1:7b:a6:27:e4:02:3a:
db:4e:d6:0f:10:4e:ee:24:54:f3:5c:af:b5:c3:6c:
a6:ef:fb:d5:d9:dc:50:4b:ed:cf:ef:b0:c2:f4:55:
95:7b:e6:d6:f8:f5:7a:2f:a7:c4:5b:bb:c1:0f:04:
7b:ce:f3:39:d2:a1:f5:0e:1d:cb:c4:c8:77:81:16:
1a:63:09:ab:50:6b:31:31:4a:73:56:85:65:8a:91:
f6:45:74:e9:27:88:22:1a:07:c9:65:5c:92:be:3b:
57:e5:ea:59:9c:cd:1b:5b:c5:3d:0c:b1:75:21:0e:
1a:1b:e9:a9:c8:bf:b3:11:92:51:ed:98:71:48:52:
80:61:4e:ec:dd:96:cc:3a:60:70:0b:a3:68:5e:2c:
85:58:53:5d:8b:5d:27:81:56:b3:24:e2:f9:50:a0:
ad:99:3a:c8:51:7a:54:50:16:92:75:19:33:11:4f:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:91:12:A6:24:29:84:BC:8C:94:12:BA:00:33:CB:29:F9:45:EC:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10AEA406F50F11EFA10C0D62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6b:7e:11:37:42:2c:f9:ed:86:8c:cb:99:da:4f:ec:06:db:
ac:c6:19:18:04:c3:1a:c6:9d:44:ce:f2:ec:6d:6e:fc:62:c2:
95:09:00:10:f1:5b:5c:51:2c:9a:d2:1a:ca:72:74:89:5e:bf:
31:a1:75:fb:22:ee:f7:23:c0:0f:b2:38:42:fa:b9:c4:a6:e6:
19:b5:98:c5:97:23:1c:41:d6:f4:63:ef:b5:3c:f1:d9:46:82:
2c:ed:62:6b:0b:ab:e4:e4:67:f0:c5:ca:2a:14:ce:8c:b7:b7:
d7:52:f5:f1:3d:9d:93:f7:88:22:95:c8:7b:e3:1c:39:c9:50:
d7:22:89:f0:d1:0f:62:d4:36:e2:21:5f:4c:b0:d9:dd:0f:f7:
7d:24:05:e4:91:fa:1f:3d:cb:bc:ff:d5:52:82:62:69:6a:98:
64:ca:d3:d7:3a:62:66:37:84:b1:2b:f0:e4:7b:5b:f7:30:9a:
cf:fe:e2:75:ce:61:0a:4b:85:8d:74:86:b4:71:60:87:c6:e8:
3e:e6:9d:d4:86:71:91:28:5c:7d:94:c4:de:09:5b:fe:fd:6a:
c9:e6:fb:ae:74:a8:6e:04:85:4e:9f:56:37:49:77:37:31:ec:
10:58:42:51:f7:e9:db:cc:46:2d:7b:0d:72:7d:e4:98:35:22:
c0:fa:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:30:59 2025 by rpki-client