Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C99A02F62111EF82F0EBB3762E951A.roa
File: 31C99A02F62111EF82F0EBB3762E951A.roa (raw, json)
Hash identifier: AqAl4t5e97UyDPXrSsqJUXG44zGZ71G4I+ij9lQi6C0=
Subject key identifier: C2:FD:56:0A:DB:CB:11:F8:BB:85:D2:8C:31:DF:98:22:33:57:08:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C99A02F62111EF82F0EBB3762E951A.roa
Signing time: Fri 28 Feb 2025 22:13:10 +0000
ROA not before: Fri 28 Feb 2025 22:13:06 +0000
ROA not after: Wed 26 Mar 2025 22:13:06 +0000
asID: 62240
IP address blocks: 154.196.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93309 (0x16c7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:13:06 2025 GMT
Not After : Mar 26 22:13:06 2025 GMT
Subject: CN=67c234f6-f263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:c2:d2:6c:4f:f0:4d:ed:20:67:fe:4b:06:
10:c1:31:03:a2:ff:c0:77:69:61:86:f9:e0:8f:b2:
ee:78:5e:46:9a:ff:bb:5b:c4:89:9e:0c:c3:d3:17:
30:46:72:9f:64:00:d5:f6:22:87:e9:1d:34:52:89:
6d:d5:7e:df:3e:c2:aa:6a:3e:c4:bd:53:cd:0e:80:
44:8c:21:cc:bf:e0:6f:c4:dc:cb:51:78:10:f4:2c:
ab:f6:eb:9f:58:e0:69:a2:9f:4f:25:84:d5:5d:e4:
16:9b:4e:94:63:6d:52:13:20:dc:14:8a:3c:c9:58:
b0:ee:12:13:1e:6b:0e:0f:64:f5:72:a0:1f:18:63:
7a:bf:20:e2:0a:fd:20:4d:d1:2e:d8:21:b3:99:0c:
f0:62:50:b6:8f:cd:bb:55:ac:65:d1:29:53:1f:9b:
47:2e:ff:a0:ec:6d:cb:83:6c:f4:0a:99:1e:29:05:
80:0e:39:2c:02:63:8f:fc:3c:ec:3b:a2:4a:f4:c6:
b1:38:03:bc:c5:4d:c0:e1:e7:8f:37:ef:de:d0:9b:
7b:46:2d:06:25:a0:08:04:22:6e:a3:45:62:bd:9a:
3b:de:28:8f:e4:3a:6c:aa:4f:d3:c9:e3:b1:ee:9c:
c6:72:77:9f:0d:dd:eb:20:14:f4:90:3b:81:6d:e8:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FD:56:0A:DB:CB:11:F8:BB:85:D2:8C:31:DF:98:22:33:57:08:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C99A02F62111EF82F0EBB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.86.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9b:53:f0:69:b6:19:11:53:0d:70:bc:e8:96:b8:41:f6:25:
63:3f:4c:df:7f:31:d6:89:e6:ba:5e:1f:ae:28:2a:b9:0f:14:
0f:46:7f:d2:ca:52:d4:9b:b7:03:3c:7c:5c:0b:67:00:36:76:
ee:0e:f5:17:0e:f3:5e:9a:b8:77:24:6b:02:b2:ff:5a:f2:8e:
d3:ac:dc:ad:80:e9:b2:b8:09:92:91:b3:49:4e:d5:ca:08:2c:
6c:65:e4:94:d3:f1:d1:45:aa:61:49:86:59:83:4f:89:8f:53:
c4:cd:9b:e9:9b:45:ac:6e:7c:6e:e3:de:c8:b2:3e:97:6f:59:
b0:09:22:10:52:95:f9:6e:c8:1a:7e:d8:78:43:e4:87:ae:6a:
2c:8b:2b:12:cd:05:f1:7a:e8:44:02:19:84:eb:bd:1b:26:9f:
a1:11:33:cd:f0:44:b9:ae:ad:c4:58:46:bc:ad:99:97:32:a0:
26:13:58:e5:d5:fb:ab:cd:be:53:74:a1:ef:f8:ff:83:08:01:
0b:26:45:cb:38:fe:7a:2a:b7:b4:bd:a5:51:d6:bf:de:39:1f:
9a:2f:a9:ec:b2:ac:6b:61:6a:10:ff:0f:18:29:91:14:6f:48:
64:5b:6d:41:d1:c5:4b:82:50:24:92:f4:86:f8:7b:e1:9e:85:
20:b7:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:28:22 2025 by rpki-client