Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A786CFAF4FC11EFB6271E62762E951A.roa
File: 1A786CFAF4FC11EFB6271E62762E951A.roa (raw, json)
Hash identifier: 7LxggVMYneHuQVy/rZQrbLx6fV1GTVwTkCtEiMKFxSk=
Subject key identifier: 7A:50:7B:DE:B7:28:42:47:35:9F:2E:22:5D:7E:54:37:E5:5D:E1:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01680A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A786CFAF4FC11EFB6271E62762E951A.roa
Signing time: Thu 27 Feb 2025 11:15:09 +0000
ROA not before: Thu 27 Feb 2025 11:14:48 +0000
ROA not after: Wed 26 Mar 2025 11:14:48 +0000
asID: 62240
IP address blocks: 154.196.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92170 (0x1680a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 11:14:48 2025 GMT
Not After : Mar 26 11:14:48 2025 GMT
Subject: CN=67c0493d-7d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:84:33:49:98:ad:48:4d:2d:34:65:ca:2c:
eb:28:ac:ab:30:df:88:78:f2:14:ea:61:95:29:bc:
7c:d3:99:95:6f:aa:d3:1c:2e:ac:23:19:b0:a6:48:
23:7a:3c:6b:0e:2f:0b:0b:69:99:04:6e:29:b4:a8:
77:b4:96:e7:5a:84:4f:46:1d:50:cd:b3:61:17:15:
7b:ae:3b:65:56:79:06:d3:f0:b6:bd:77:64:7b:c0:
41:80:7d:c3:20:d1:6a:1c:0e:c2:2a:41:0c:6b:f8:
e3:eb:e5:0e:03:06:58:7a:cc:79:38:32:9d:9e:45:
f0:15:cf:90:f9:5f:e1:90:e7:e9:01:06:75:4c:19:
1e:a5:66:71:cd:02:a5:7f:4e:dc:9c:fc:15:4d:02:
cb:69:00:e6:2e:43:b3:cf:bc:0f:3e:0a:13:3f:d9:
b6:28:03:d5:e2:3a:ab:e9:9e:e6:dc:0b:20:81:e0:
89:cb:3d:71:7a:d6:94:f7:1d:43:74:8a:b6:f5:67:
a1:dd:ca:81:98:55:b8:43:3f:0f:70:58:eb:3f:38:
fa:42:07:b3:21:f3:b7:10:3b:ad:b8:ae:e6:b1:08:
81:ea:6e:fb:bd:eb:e0:94:63:59:2d:2d:c7:3f:49:
76:b6:1e:e7:03:4a:72:a9:91:00:ba:5e:a3:32:61:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:50:7B:DE:B7:28:42:47:35:9F:2E:22:5D:7E:54:37:E5:5D:E1:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A786CFAF4FC11EFB6271E62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.45.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6b:c8:ba:69:89:7a:41:3f:93:e2:8a:74:80:d4:a9:72:ca:
93:1f:46:eb:3d:23:54:85:e9:1b:06:d8:b0:9b:72:13:55:b2:
2a:7a:be:c0:09:61:9c:6b:b6:24:f1:af:e4:e5:7a:5f:c6:b9:
a3:84:28:13:24:b9:1c:83:a9:f7:96:6e:93:b3:f1:c1:ee:d7:
bd:ca:f5:aa:a8:a9:69:90:ae:cf:cf:b4:7c:6b:2a:01:5b:40:
fb:1b:f2:c7:f7:0c:66:a1:9d:cd:7f:3c:a2:7d:6b:8e:df:86:
d3:f4:76:04:62:0c:f3:dc:ed:ea:64:ae:e8:db:2b:00:df:a9:
50:8b:05:8c:6d:ae:aa:69:a1:6b:d4:ed:0d:e7:91:de:76:66:
1b:a5:94:43:ab:91:65:ef:af:69:b6:b3:86:2b:48:56:6d:48:
62:1f:f2:eb:db:9c:d1:ae:af:fc:e6:06:4f:64:b8:6e:ef:90:
f9:d9:28:dc:c5:56:60:84:93:b4:a9:7e:a5:45:f7:bc:64:fe:
b3:43:91:e8:f7:ae:7d:d0:23:b8:65:f5:2e:f9:70:94:57:2c:
91:2a:d7:b0:92:04:d4:62:d1:b8:20:5d:b2:21:5a:78:13:65:
51:ba:94:54:cc:39:af:e3:aa:e0:d1:e4:95:0d:69:3a:c6:6f:
c9:26:b6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:01:21 2025 by rpki-client