Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B9264A8A8911EEADC846734AD9E6FC.roa
File: 13B9264A8A8911EEADC846734AD9E6FC.roa (raw, json)
Hash identifier: ob+hXdkKBDxrPYUEQUEXlQIitkT1V2HbkHUgI8dABzs=
Subject key identifier: C6:02:71:30:8B:95:BD:39:0B:EB:97:D4:99:DF:75:84:40:AC:6F:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5326
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B9264A8A8911EEADC846734AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:19:44 +0000
ROA not before: Fri 24 Nov 2023 05:19:41 +0000
ROA not after: Tue 26 Dec 2023 05:19:41 +0000
asID: 62240
IP address blocks: 154.196.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21286 (0x5326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:19:41 2023 GMT
Not After : Dec 26 05:19:41 2023 GMT
Subject: CN=65603270-2df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:08:e9:8e:c9:c6:b1:bd:0f:ad:8c:62:61:
44:c5:ae:ac:6c:83:be:d3:c6:16:50:a2:8d:5d:ef:
2e:8e:34:13:15:b4:bf:7d:91:7d:6f:ee:40:31:cd:
2f:c5:de:5d:1d:8e:e7:84:94:7f:e9:08:ca:0e:98:
47:9d:2f:7a:4c:03:e6:d2:0d:82:24:6c:b2:75:0a:
11:7b:75:e3:ef:59:77:50:52:a4:dc:c4:79:f7:e0:
8c:79:4a:3d:45:4d:d2:02:e4:14:e1:82:4a:bf:ce:
e1:0d:59:b6:78:9f:07:bf:d8:b3:6b:21:f8:aa:3e:
27:07:41:88:10:ae:f9:44:af:f7:3a:87:bb:9d:59:
80:e9:f2:d5:a8:00:5b:98:08:51:08:82:60:53:61:
9b:ee:11:c8:ff:1e:d8:7f:7c:6a:c2:35:34:df:6b:
d6:2d:2c:fc:26:bd:f6:50:1b:75:2c:a1:75:d5:5a:
e5:c7:13:4f:a0:1d:d3:28:d7:6b:ad:44:6b:23:c3:
96:85:66:fe:56:62:65:0c:6b:e7:30:0f:14:2c:fe:
bd:75:97:58:84:3a:73:b5:dc:5c:24:46:f4:24:2a:
cf:21:8d:e2:ad:bf:a9:59:6b:24:52:07:03:2a:30:
ee:0a:ef:62:65:3c:e9:bd:43:32:60:c9:71:c1:6b:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:02:71:30:8B:95:BD:39:0B:EB:97:D4:99:DF:75:84:40:AC:6F:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B9264A8A8911EEADC846734AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.63.0/24
Signature Algorithm: sha256WithRSAEncryption
52:81:e9:aa:4f:44:fd:81:1c:aa:96:ea:31:e2:0b:eb:54:b4:
1a:3e:bf:29:c5:e4:e3:85:03:6b:26:da:ce:a7:90:de:19:1e:
c6:79:d3:b8:3b:af:1a:8d:ef:c6:f1:65:1d:ac:41:f7:d4:64:
26:23:d5:15:c1:dc:b8:d4:e0:4c:ee:ee:94:f8:5d:98:5c:cc:
f7:b0:05:8b:0f:65:0e:5f:38:c3:ab:c2:fa:f5:9e:50:ef:26:
1c:c8:a8:a8:7b:42:7f:0c:ce:95:12:5b:0b:3b:ac:33:4e:91:
f6:f0:f8:08:54:4e:12:f3:8a:b9:9d:44:bc:a5:d3:49:ea:0d:
bb:29:91:99:b9:93:72:70:f6:7c:3f:a8:c0:ac:bf:1e:bd:5f:
fe:ea:72:9c:a4:fe:24:83:11:09:f6:74:10:39:ce:2e:63:76:
d4:74:31:90:ae:22:dd:7a:36:c6:8d:75:54:fc:d5:cf:8f:b6:
68:d0:4c:df:9a:f2:b5:3b:36:40:74:c6:90:7f:7d:f2:11:dd:
97:5e:a9:f0:8d:60:ac:f5:76:8e:ad:ac:50:de:ff:14:83:21:
38:21:b0:4e:1b:8c:f6:b0:db:66:4a:82:51:46:1e:73:f9:28:
12:4c:d1:42:75:0d:bd:dd:47:b7:a7:2e:45:c0:a2:78:9e:69:
69:cc:29:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:42:12 2025 by rpki-client