Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE7448A8A8611EEA96DE0694AD9E6FC.roa
File: 2FE7448A8A8611EEA96DE0694AD9E6FC.roa (raw, json)
Hash identifier: yP/92EIDOOuAy/+iTORn9Y+0zVFhoBc/EE5PjstcRGA=
Subject key identifier: 4D:01:6B:51:0B:1A:C9:21:10:93:5B:05:9D:2C:2B:70:6C:19:F4:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5304
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE7448A8A8611EEA96DE0694AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:59:03 +0000
ROA not before: Fri 24 Nov 2023 04:59:00 +0000
ROA not after: Tue 26 Dec 2023 04:59:00 +0000
asID: 62240
IP address blocks: 154.196.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21252 (0x5304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:59:00 2023 GMT
Not After : Dec 26 04:59:00 2023 GMT
Subject: CN=65602d97-8071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:ba:af:e4:b8:82:d2:4e:33:07:0b:91:f1:
e3:b6:d1:0e:e3:86:63:d3:7c:7a:12:70:00:54:0e:
29:19:19:88:f4:df:32:0d:73:b4:03:ac:f6:7e:72:
5e:6f:99:f7:2b:ba:d1:33:67:ab:fa:0b:ed:fc:a9:
dd:11:36:77:d6:99:51:8e:55:ff:c5:4f:9f:a4:08:
8f:6b:a3:2e:c1:6d:45:c5:56:29:fd:49:15:22:b7:
e0:d2:30:51:50:82:2b:37:ba:56:5b:e0:93:24:2c:
ff:00:dc:6c:35:bd:f7:1d:f6:3f:00:d8:0a:93:cf:
91:94:36:6b:29:f7:8a:c4:22:ec:80:1e:db:73:47:
61:be:87:14:de:60:67:ae:f2:c0:35:1c:eb:9d:b3:
d2:2d:85:26:b1:21:42:e9:aa:2e:26:99:fd:ff:87:
29:6a:95:2c:b7:c5:8b:1f:b2:cf:f5:87:26:c4:8b:
75:56:2d:05:da:0d:a7:d2:b7:86:64:e6:ec:98:f6:
ec:c9:68:6d:f0:80:ae:00:1c:3a:34:12:41:12:bc:
48:b6:f7:26:40:ae:53:b4:37:60:58:6f:53:c3:16:
53:d1:61:46:1b:e1:1b:5e:ea:be:b0:f4:86:25:e9:
d6:25:66:a5:a2:2f:a1:4b:50:4e:41:2d:67:ee:10:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:01:6B:51:0B:1A:C9:21:10:93:5B:05:9D:2C:2B:70:6C:19:F4:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE7448A8A8611EEA96DE0694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.60.0/24
Signature Algorithm: sha256WithRSAEncryption
74:54:18:87:48:b4:58:75:99:66:a3:e4:0e:0e:dd:d7:57:28:
40:e2:f4:5e:9f:cc:c0:ae:12:98:c0:96:c1:14:f6:7c:05:03:
f2:9f:98:5d:1c:8d:3b:96:e6:07:23:b9:2b:ba:62:49:e2:13:
9f:75:aa:e9:5c:d5:25:d1:b0:d4:d9:04:62:f4:be:bc:a5:81:
58:2d:80:7c:35:8c:c5:6f:c4:68:da:74:a5:62:10:ad:0b:bb:
eb:3d:62:1e:9c:20:c2:14:e3:20:36:d2:df:2c:4f:16:75:0c:
49:51:0f:95:76:f0:fb:e2:c0:91:f1:c3:f5:1d:cb:48:69:84:
bf:21:b7:d3:5b:cd:9b:65:ff:bc:ee:6e:71:40:1c:9d:9b:a5:
e1:2f:39:b5:63:89:12:32:bd:96:7e:29:df:4d:3f:ab:51:13:
ce:eb:dc:db:86:41:34:7e:c2:87:5b:8c:95:23:7d:68:94:66:
9f:9b:25:c2:59:50:bd:67:ca:94:aa:3e:84:96:a6:c8:c2:29:
07:3b:2d:69:41:ed:d0:29:28:52:f6:ae:ae:21:6d:9a:e7:3a:
af:24:46:72:dc:62:36:b6:88:95:2b:d5:47:06:ba:5a:e3:7f:
3d:68:bc:23:af:35:04:2f:44:e0:99:5e:dc:86:25:32:05:74:
f8:9e:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:04:03 2025 by rpki-client