Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266405768A8E11EE8FA6BB834AD9E6FC.roa
File: 266405768A8E11EE8FA6BB834AD9E6FC.roa (raw, json)
Hash identifier: yL2J5v/YbGDoUeCEA2CzdusEQ9+kaIV42d9RyV+jWYw=
Subject key identifier: BC:A0:53:E9:31:F1:E8:14:0C:B1:67:E8:D2:A2:3F:77:B4:4E:6E:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5370
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266405768A8E11EE8FA6BB834AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:56:03 +0000
ROA not before: Fri 24 Nov 2023 05:56:00 +0000
ROA not after: Tue 26 Dec 2023 05:56:00 +0000
asID: 62240
IP address blocks: 154.196.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21360 (0x5370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:56:00 2023 GMT
Not After : Dec 26 05:56:00 2023 GMT
Subject: CN=65603af3-5810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:89:b7:d6:8e:21:48:bb:a0:bf:bc:68:16:
65:18:0c:6e:67:41:dc:26:52:0a:da:f1:eb:14:1e:
89:e5:43:7e:d2:d6:1e:65:b7:f8:f1:bf:6b:91:a9:
44:49:79:c9:74:82:05:03:28:95:e4:da:3c:cc:07:
e5:34:13:2e:a4:bd:8a:4b:84:8b:1a:8a:8e:2d:99:
61:dc:90:63:92:f7:be:dc:e8:d6:d8:ed:ca:da:f3:
3e:d9:ee:64:28:57:8a:2d:33:3a:fd:05:16:29:46:
bd:16:05:e7:e8:0a:02:d5:e4:5d:5b:31:38:af:48:
c4:75:c1:77:a2:f7:12:fd:33:69:69:3d:79:3d:27:
37:df:96:d0:32:ab:6d:00:cf:15:ca:ac:63:47:07:
5e:54:3e:1f:b4:ce:f3:7b:4b:23:04:fb:9d:27:49:
ec:ed:c3:a3:0d:4e:99:ef:dc:dd:c1:58:ee:d7:b3:
19:0c:35:59:0b:ed:f4:70:b5:e8:97:f8:9a:d4:99:
d2:66:3d:c2:7f:e4:29:18:39:f4:ed:55:7c:63:a9:
d5:76:18:53:c1:e5:b3:06:b5:84:5b:d2:92:ae:54:
fe:41:0c:0b:d5:5f:e8:fd:20:73:ae:3f:4e:05:8b:
48:e5:31:dc:8b:23:f7:c3:d4:24:8b:75:71:58:15:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A0:53:E9:31:F1:E8:14:0C:B1:67:E8:D2:A2:3F:77:B4:4E:6E:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266405768A8E11EE8FA6BB834AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.16.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:fb:27:43:44:8d:61:c7:48:35:d1:9b:2d:fd:8c:0b:87:9d:
25:17:f4:cd:08:bd:0c:48:46:6d:01:79:3f:08:70:40:d8:aa:
8f:ef:61:fd:95:b3:3f:4f:e1:d3:4c:07:61:55:da:9d:e5:cf:
b6:fe:30:5e:bf:a8:ab:e1:a3:be:9f:79:41:2d:db:7b:f3:ee:
4d:7b:d0:de:4c:f4:36:0b:38:ba:9a:a1:14:97:32:9e:e0:d3:
af:94:f3:ae:7f:86:5f:74:0d:b5:c3:5e:1c:5d:b7:dc:92:61:
47:ec:ae:b3:45:5f:aa:80:5a:2a:ed:90:24:7d:00:de:2a:4e:
bf:29:d4:66:37:2b:00:b4:92:d2:1d:ca:c4:f5:bf:fe:a8:3a:
92:47:7e:ef:7f:f6:65:3d:11:e0:dd:eb:a2:57:8d:73:ec:01:
74:03:6f:e1:05:68:c9:74:5b:a5:26:84:b2:3b:cd:24:6e:5c:
b0:86:3c:14:96:be:a7:7b:f9:c9:ea:f3:2a:3b:e9:59:a8:93:
c0:5c:54:16:8c:64:5f:e8:48:03:a6:4e:75:af:b0:5c:4a:95:
dd:c8:d1:fa:5c:23:70:64:b6:10:b6:f6:9b:40:c3:03:5c:4c:
ed:0c:c7:42:e1:a5:08:2c:0f:f4:83:ec:b8:7e:40:3a:4c:26:
55:42:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:26:20 2025 by rpki-client