Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27D888CCF61D11EF8B183197762E951A.roa
File: 27D888CCF61D11EF8B183197762E951A.roa (raw, json)
Hash identifier: tl8x2fpye6QzQcvxRAlP7OZ4K9lm9c3/O98WPrqgihU=
Subject key identifier: 07:DB:0A:01:58:8E:D1:A8:C1:B6:6E:AB:90:6A:A1:8C:79:7D:D5:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27D888CCF61D11EF8B183197762E951A.roa
Signing time: Fri 28 Feb 2025 21:44:15 +0000
ROA not before: Fri 28 Feb 2025 21:44:12 +0000
ROA not after: Wed 26 Mar 2025 21:44:12 +0000
asID: 62240
IP address blocks: 154.196.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93269 (0x16c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 21:44:12 2025 GMT
Not After : Mar 26 21:44:12 2025 GMT
Subject: CN=67c22e2f-056c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:d7:fc:51:79:11:c0:38:ad:0a:92:bf:e8:
ef:a5:be:06:a8:fc:78:17:4d:a1:14:92:58:16:3f:
5a:cc:c0:8b:a7:cd:22:90:62:60:35:64:fe:6d:28:
ee:e0:c1:06:42:19:38:27:69:30:16:50:b9:ac:70:
2d:0b:37:51:80:69:36:6b:ac:27:b4:5e:d4:dd:98:
68:ba:8c:27:5b:b3:d6:60:ba:df:3e:05:b3:78:83:
3d:f4:c1:07:8b:44:b6:f3:7d:8c:64:d7:7c:d0:56:
56:63:74:52:8c:ca:b0:08:48:21:52:2d:e7:37:46:
79:9f:27:a5:b0:bd:7f:96:c1:15:e9:b6:f3:09:32:
c0:a5:1b:03:38:e3:5c:69:93:88:66:c0:4a:83:f1:
02:07:da:3d:95:c4:97:c4:ed:98:cb:e2:58:39:eb:
f9:04:de:bc:90:b1:fe:27:7b:0f:d4:89:1b:5c:ce:
30:d0:de:6b:03:dc:9b:31:6d:d3:d0:ae:40:f5:11:
c2:81:f6:e5:40:c1:22:e1:2f:b5:0d:d1:93:3a:6e:
1e:e8:f5:20:3b:6e:86:8f:e7:c8:9d:52:a2:41:9e:
e4:ee:30:b1:a4:70:7e:be:bc:2e:33:f7:86:2e:b2:
fe:59:f4:29:c1:1f:0f:64:52:c1:7f:87:09:81:70:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DB:0A:01:58:8E:D1:A8:C1:B6:6E:AB:90:6A:A1:8C:79:7D:D5:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27D888CCF61D11EF8B183197762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.79.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e1:e6:26:69:a9:df:3e:e2:22:60:da:c4:16:c4:8b:c2:8f:
84:e2:2f:c8:e6:c9:59:7f:d9:25:0f:37:d3:2c:a7:f2:c3:96:
8c:3f:d0:85:f4:8c:12:e7:90:b6:28:f4:83:f3:58:2e:fa:82:
34:62:af:60:15:e2:0d:c0:44:a3:1c:bc:00:cf:17:22:b3:21:
ab:27:5d:cf:98:83:91:da:f8:cc:f8:1e:14:44:3b:43:df:53:
89:24:3b:4d:95:43:20:55:4a:12:d5:72:99:4f:51:cc:fc:28:
40:3d:d1:9c:78:2e:11:18:2a:04:63:c0:89:6a:92:0c:44:db:
f9:78:ab:ec:05:10:84:b2:fb:2d:9f:c6:de:d4:58:57:6a:be:
10:81:42:d7:b5:82:bf:bd:4a:c1:e1:78:4f:2f:6a:26:9a:fa:
ef:3d:72:83:db:e0:44:2c:61:73:94:f6:2f:0b:eb:57:9f:80:
37:b6:4d:56:e7:82:0c:07:73:a1:d3:88:cb:d3:6e:c2:de:3e:
6d:d9:32:a1:c2:12:c0:27:09:dd:45:38:a2:0f:95:8c:93:a8:
55:e5:fe:fe:cb:aa:d8:2f:39:55:04:68:81:fc:ee:99:2d:34:
09:c6:02:ac:0c:80:b8:b3:80:58:f5:ee:c9:a7:6c:29:48:13:
7e:b4:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:21:09 2025 by rpki-client