Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2803D8C8F53311EFB200AC57762E951A.roa
File: 2803D8C8F53311EFB200AC57762E951A.roa (raw, json)
Hash identifier: O5W6+8kmuLl7x/U3Ei8uA7RAyEmva9R1f8DteOy6Qi0=
Subject key identifier: 26:B9:0C:DD:51:84:B8:E9:FF:5E:61:85:15:12:18:77:68:2C:46:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016968
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2803D8C8F53311EFB200AC57762E951A.roa
Signing time: Thu 27 Feb 2025 17:49:14 +0000
ROA not before: Thu 27 Feb 2025 17:49:10 +0000
ROA not after: Wed 26 Mar 2025 17:49:10 +0000
asID: 62240
IP address blocks: 154.196.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92520 (0x16968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 17:49:10 2025 GMT
Not After : Mar 26 17:49:10 2025 GMT
Subject: CN=67c0a599-419d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:ac:88:af:d4:93:db:85:6f:5b:d9:72:6b:
71:06:f9:e8:e9:0a:24:75:dd:bc:84:e1:ab:09:63:
4f:7b:42:97:c1:44:1e:f6:d5:b1:30:b5:f9:ca:93:
34:1a:d6:d9:bd:b5:dd:20:bc:9b:91:3d:22:e0:76:
33:d5:e8:df:e2:60:d0:a6:cd:b5:ba:a0:44:50:10:
3a:b6:97:82:29:d2:b6:29:22:b3:4e:fb:66:7a:94:
2e:2c:c5:33:b8:f7:b9:13:f6:02:43:4d:37:10:6c:
18:ee:96:8a:2a:2e:d7:c9:9a:6c:22:b3:ec:e2:3c:
20:b5:c4:a1:10:38:15:18:06:11:72:74:cc:df:36:
8b:75:11:60:a9:ae:66:ae:fa:93:5e:27:56:c1:77:
dc:e9:67:c5:19:f2:4e:77:87:f2:b7:f8:5b:12:25:
be:72:98:60:45:78:4e:ce:d3:17:ba:52:be:06:6e:
1c:bc:74:37:e6:eb:f3:ba:58:03:70:42:02:10:9b:
32:e4:5e:e8:70:52:cd:7d:5b:42:89:d4:0e:5e:fb:
85:c0:1a:bd:92:c0:0a:f1:1c:fc:ca:7c:30:99:0c:
66:fb:ad:ed:d8:8a:96:46:dc:c8:d1:64:50:25:3c:
cc:fe:53:1b:5d:3b:21:32:38:8f:a4:0b:2d:ff:bc:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B9:0C:DD:51:84:B8:E9:FF:5E:61:85:15:12:18:77:68:2C:46:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2803D8C8F53311EFB200AC57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.50.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fc:f4:4d:b2:7e:b6:42:57:31:76:28:45:5b:18:45:39:84:
70:a1:d3:f5:87:e9:f4:c2:17:ae:d8:e6:90:ee:fd:5a:9a:6d:
fd:59:3e:fc:fd:7c:e0:80:4c:78:45:0d:93:31:7d:d9:7f:ae:
69:da:68:55:ea:d3:ed:eb:96:27:a0:d7:fd:62:d8:ab:f7:1c:
70:1f:8b:c6:56:b9:d2:5f:29:24:33:93:13:ab:c3:9c:aa:a4:
b5:ee:ba:e6:d8:e2:b3:97:3b:03:87:6e:59:0d:6e:73:57:57:
0f:55:f0:f0:ae:8b:5f:35:d3:ff:c7:d9:83:19:5c:2f:c7:70:
7c:72:94:78:9f:36:b5:28:a9:c3:5d:4b:a7:78:ff:ff:9e:e6:
fa:6e:45:47:89:9f:d4:a1:be:d5:0d:ff:6d:e3:f6:7f:30:86:
e3:5e:d4:ba:d2:f9:ac:30:07:52:73:fa:b6:ca:74:d4:a2:7d:
55:b0:c5:33:61:a5:6b:d5:5b:5a:0c:0a:f2:7d:e9:5d:85:58:
6f:5d:6f:b3:e3:88:12:26:48:cb:bc:06:28:43:94:4f:7b:d8:
c5:e3:3d:27:3a:39:9e:9a:ef:70:b1:48:17:90:14:7e:0e:08:
2e:63:69:7c:5f:76:58:11:6b:05:6a:12:4f:04:db:5d:fd:a4:
b0:7c:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:56:49 2025 by rpki-client