Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/347C0092F4EF11EFA084B78A762E951A.roa
File: 347C0092F4EF11EFA084B78A762E951A.roa (raw, json)
Hash identifier: zjr8MihCzQf8UbrVMq6Z3ktAwgazjLcRf2AP/QlvfYI=
Subject key identifier: 46:02:A3:C8:6D:28:CD:38:74:57:50:82:58:21:65:00:25:35:B5:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016753
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/347C0092F4EF11EFA084B78A762E951A.roa
Signing time: Thu 27 Feb 2025 09:42:49 +0000
ROA not before: Thu 27 Feb 2025 09:42:44 +0000
ROA not after: Wed 26 Mar 2025 09:42:44 +0000
asID: 62240
IP address blocks: 154.196.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91987 (0x16753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:42:44 2025 GMT
Not After : Mar 26 09:42:44 2025 GMT
Subject: CN=67c03399-f24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:5d:b1:10:44:c4:f3:01:02:bf:d4:ab:a8:
c2:97:fc:3f:75:1b:c6:b8:38:f7:d3:25:9e:9f:16:
6e:5d:5e:77:2f:ae:2f:1a:6c:90:37:7d:52:75:e9:
42:af:13:de:86:31:65:44:85:03:d1:cc:26:4b:8c:
fb:c9:97:dc:03:fa:7f:c8:f7:d2:a5:36:4a:e1:32:
af:e1:11:6c:f7:7f:30:0c:f6:33:5f:97:f8:1e:4e:
c8:6d:ce:ac:7e:7a:9a:e4:71:1f:b3:8f:c9:f2:1c:
47:0c:64:64:ff:d6:9b:89:01:cd:29:93:d7:70:e0:
cf:ca:5c:fb:d2:66:50:66:70:4d:b2:8c:39:fe:d6:
24:a7:b0:fb:41:7e:5a:8a:44:2a:12:65:20:c9:da:
9d:c1:25:b4:36:04:95:82:c7:82:1f:78:dd:c5:37:
8f:ad:6a:81:bf:70:30:40:08:17:7c:ed:a4:32:ed:
9b:0b:e3:18:92:eb:7a:77:72:59:5e:ae:0e:07:f3:
e0:04:59:fe:7d:3d:9c:e4:10:be:c5:ea:77:16:ef:
8b:b9:00:1c:97:d0:04:e3:cc:26:a2:6e:25:cd:1a:
03:35:83:4e:58:e0:59:97:5c:81:33:f4:9e:98:7e:
78:ff:37:e2:cc:e8:dd:df:f9:d1:a0:78:c0:48:03:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:02:A3:C8:6D:28:CD:38:74:57:50:82:58:21:65:00:25:35:B5:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/347C0092F4EF11EFA084B78A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d7:18:34:b2:c8:53:b9:9d:b5:42:5d:83:41:af:ac:d1:50:
bf:b4:47:59:95:9f:1d:df:5d:8a:fc:94:c5:47:dd:e3:44:29:
a8:7a:31:ff:77:52:29:a8:00:f1:1a:f7:6c:d6:b2:4c:c1:af:
9e:2d:34:b5:88:8f:9a:f3:dc:47:62:6b:3a:0e:a5:34:e1:38:
36:ea:32:b8:82:5d:ca:d7:bd:48:e6:1d:48:3b:26:60:96:5e:
7d:21:6e:3a:92:d0:7b:af:57:9d:e7:5d:d7:81:f3:c1:ba:16:
f2:93:70:0f:e0:92:00:b6:d8:a5:f3:72:79:2c:96:18:72:77:
f2:c6:d7:c8:e2:39:ec:7c:e6:86:84:3d:e8:f4:96:b3:f9:e9:
d5:89:7f:71:50:97:4b:2b:d6:b1:d7:00:fa:7b:50:e3:bb:17:
be:82:7f:57:7b:82:a7:a0:72:bf:8c:4f:b5:cf:09:cb:3a:13:
17:42:0e:b2:67:c2:74:f7:9f:92:d7:e5:07:8e:40:a2:f7:f2:
eb:30:41:75:3c:d9:a0:8c:44:5f:6a:d0:9a:77:e1:14:7d:7f:
06:a6:9a:d4:f3:27:cf:1d:b3:0a:98:18:79:5a:03:d1:63:c7:
6c:af:af:82:65:61:5b:49:6f:6d:c5:9e:17:2c:cd:6e:45:3d:
a6:df:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:18:00 2025 by rpki-client