Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27716EC08CDE11EE8C686E664AD9E6FC.roa
File: 27716EC08CDE11EE8C686E664AD9E6FC.roa (raw, json)
Hash identifier: JOOSC1/MZ1YW3IUUIhGR9IsCV1oTuCnysQW52kRpghU=
Subject key identifier: C7:80:E6:A0:79:E8:A8:45:A9:CD:C5:86:0E:F1:87:49:5E:44:50:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5506
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27716EC08CDE11EE8C686E664AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:33:47 +0000
ROA not before: Mon 27 Nov 2023 04:33:43 +0000
ROA not after: Tue 26 Dec 2023 04:33:43 +0000
asID: 62240
IP address blocks: 154.196.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21766 (0x5506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:33:43 2023 GMT
Not After : Dec 26 04:33:43 2023 GMT
Subject: CN=65641c2b-9c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:c7:a5:36:e6:0f:3b:ec:a3:00:6a:58:33:
8b:7d:13:0a:a8:21:73:9e:e2:73:ab:f4:e2:4d:2a:
d8:f8:2a:3a:72:5f:ec:03:b4:62:c3:02:7d:a5:10:
fc:27:f1:d1:a9:b4:80:85:b7:aa:fb:fc:94:2a:70:
ed:2e:94:86:95:a4:88:03:67:27:86:34:0e:e6:1f:
dd:4f:07:15:68:2a:44:42:f6:8a:d7:45:a3:7d:68:
10:1d:9d:d0:f1:35:14:16:5a:0d:39:78:c9:ba:d4:
9d:ce:2b:8e:c8:ad:e5:05:4e:59:15:1a:bf:d9:37:
04:85:89:cd:fe:c2:02:bb:95:e1:b3:86:fd:d9:e2:
ce:b4:e6:cd:1c:25:49:fc:c7:c9:2a:0c:f5:fc:7c:
e3:0f:71:d6:e2:44:f3:15:5f:a2:f4:62:c7:18:00:
eb:00:b7:98:33:67:0a:1d:02:dd:32:0a:af:5a:eb:
72:c8:3d:c5:0f:b5:69:27:b3:a9:5a:e5:e9:06:0b:
18:11:ca:4a:9c:92:c5:91:57:f0:9e:7f:b7:4d:dc:
07:3a:79:f3:da:80:aa:05:d9:71:02:f3:41:7a:5a:
7a:d5:6d:d3:32:c1:ea:b4:34:f1:78:17:d5:bd:02:
98:8f:f6:1c:be:a8:93:6c:c3:12:52:c7:56:ca:10:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:E6:A0:79:E8:A8:45:A9:CD:C5:86:0E:F1:87:49:5E:44:50:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27716EC08CDE11EE8C686E664AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:82:25:f6:cd:c4:0c:c8:38:56:f4:c1:02:83:30:7f:0c:a4:
05:11:bc:85:ff:ed:02:a3:94:51:b1:3b:cc:dc:df:c5:92:93:
ac:fb:bf:9a:e6:e3:80:01:1f:70:a7:8f:c9:70:4a:f3:ab:a5:
7e:9a:ac:82:15:22:c3:6f:61:9e:53:62:88:cb:7b:0d:34:e8:
ec:2f:01:b8:ca:87:cc:c5:38:bc:fa:bb:96:4b:e4:28:0f:07:
8d:50:88:c6:fc:2a:08:cb:e9:a9:c8:d0:25:7e:9b:b1:b6:ce:
49:42:67:b4:b9:08:55:cb:75:32:98:9d:54:84:bc:cc:4d:18:
b9:64:90:da:aa:09:b2:2f:e3:a0:f4:2a:d1:0a:4f:e2:04:e4:
6c:1b:50:eb:cb:6c:08:66:a9:ff:79:d2:0b:82:82:bf:8d:36:
3f:eb:63:ec:d0:43:dd:12:af:dc:65:5f:42:94:b8:35:83:e9:
7b:ae:d6:ba:b3:57:58:71:65:5e:e5:f8:2d:aa:cb:3b:16:c0:
41:23:07:6c:90:37:ef:bd:23:4f:45:ef:29:8b:8b:25:1a:ac:
87:3c:eb:f5:31:7f:76:bb:57:2e:35:24:e2:a5:84:6e:cb:61:
f6:38:fd:15:90:7d:6f:69:23:07:41:1c:f9:78:da:fc:24:22:
9c:16:30:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:48:11 2025 by rpki-client