Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/164543E48CDC11EEABF0B15F4AD9E6FC.roa
File: 164543E48CDC11EEABF0B15F4AD9E6FC.roa (raw, json)
Hash identifier: ktkeKLIACu41dayHED5RSnqucAIBw6PqMXFkNXfLH+Y=
Subject key identifier: 82:45:3E:D7:88:F9:8C:19:FA:26:38:31:DE:3E:F5:67:B6:63:1E:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/164543E48CDC11EEABF0B15F4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:18:59 +0000
ROA not before: Mon 27 Nov 2023 04:18:56 +0000
ROA not after: Tue 26 Dec 2023 04:18:56 +0000
asID: 62240
IP address blocks: 154.196.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21715 (0x54d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:18:56 2023 GMT
Not After : Dec 26 04:18:56 2023 GMT
Subject: CN=656418b3-e9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:a3:06:bf:41:22:3c:13:01:12:a5:b0:4c:
41:b9:c1:fc:8e:3c:ee:a2:aa:c2:fc:44:5d:47:cb:
50:14:20:43:87:c4:d6:b1:f6:09:25:e2:91:16:a5:
23:35:19:83:2d:29:b5:f9:04:d3:61:4b:81:0e:46:
f3:20:0c:00:a8:ac:4a:f4:c2:0b:47:03:df:d4:4f:
01:5f:d9:62:e8:d2:a0:a3:82:d6:13:91:25:e7:25:
04:92:83:8a:c8:bd:ae:fa:73:38:ad:8a:ce:d4:e3:
fa:00:fd:22:ff:24:78:5b:dc:a4:92:c7:c7:1d:3a:
9f:f2:f8:f9:2b:43:01:a4:71:fe:02:b4:88:62:71:
37:fd:64:a0:82:fb:be:f8:03:ac:8e:49:b4:a2:c6:
23:b8:fa:b0:75:ee:8c:ed:77:1f:6c:55:5a:0a:98:
7a:82:be:8c:4a:b0:1d:88:1a:39:9c:84:7a:a4:a3:
89:bc:ec:ba:76:dc:61:c8:95:c3:13:8f:95:20:f2:
9a:cb:2d:4e:4f:73:3c:91:3d:8e:15:78:56:b6:af:
84:90:0b:91:c4:cd:10:65:89:74:b5:c2:17:99:1f:
4a:c7:1b:dc:a7:e0:af:52:70:a3:a3:2d:19:eb:34:
99:bc:d2:da:5f:82:58:54:71:96:70:0d:18:aa:ed:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:3E:D7:88:F9:8C:19:FA:26:38:31:DE:3E:F5:67:B6:63:1E:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/164543E48CDC11EEABF0B15F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.86.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6d:21:cc:63:7c:e0:d5:1e:ff:db:06:80:85:da:ba:b0:4f:
36:94:24:5c:e9:15:04:e0:c5:5c:80:ef:ca:60:28:6c:5a:e4:
20:a9:60:e1:cc:88:46:45:3e:90:2a:d0:c3:c3:b3:1e:2a:3e:
f8:fb:2a:58:cd:ce:bd:17:9d:69:e4:7f:0d:aa:13:6c:0c:22:
9c:5a:98:22:ae:b5:e9:cd:e1:93:2a:e8:bc:11:12:68:fa:e1:
d8:f7:84:9d:a2:3c:7f:8a:b4:e0:1d:47:cd:4d:02:86:51:ae:
a8:15:b5:4b:3e:fb:5c:67:65:5f:62:dc:2a:51:89:0f:27:6c:
72:93:e5:f9:6f:43:b9:7d:44:85:6c:5e:93:2e:0d:29:d4:46:
e5:7c:10:fd:3c:e0:ca:64:fd:85:c9:ff:33:a0:0e:9c:0c:ae:
f1:08:f5:61:c8:cf:f5:7d:c7:ef:f2:ba:dd:6f:e2:6c:f9:ce:
df:ba:5d:c1:d7:22:1f:30:ef:62:f5:59:eb:36:fc:18:66:7f:
de:ba:6f:66:62:e2:36:f7:be:65:d6:d7:6d:84:4b:b7:cb:23:
fb:d6:fb:da:79:a8:03:89:e2:29:a6:b7:a9:6b:87:db:3e:37:
0f:0f:55:d3:8f:1f:34:e6:d3:26:fb:79:da:0d:d3:00:f1:26:
67:85:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:10:02 2025 by rpki-client