Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CE1C1308A9811EE9B466C264AD9E6FC.roa
File: 3CE1C1308A9811EE9B466C264AD9E6FC.roa (raw, json)
Hash identifier: sxGv+uVB/iA7HY1UXro1V18oy8WZj43DhgtkOzjW5mY=
Subject key identifier: 2A:6A:71:0D:4D:12:E5:86:EE:C0:5D:14:17:00:08:BD:97:C6:A5:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5430
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CE1C1308A9811EE9B466C264AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:08:16 +0000
ROA not before: Fri 24 Nov 2023 07:08:12 +0000
ROA not after: Tue 26 Dec 2023 07:08:12 +0000
asID: 62240
IP address blocks: 154.196.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21552 (0x5430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:08:12 2023 GMT
Not After : Dec 26 07:08:12 2023 GMT
Subject: CN=65604be0-41e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:b1:54:06:fa:8c:23:ff:09:27:27:53:82:
6f:54:1a:86:79:69:c7:39:06:6f:3b:2a:f0:df:40:
9a:bf:77:0e:9d:38:70:c9:fb:1e:5b:9a:cd:ff:b8:
83:cc:7c:36:84:95:82:98:11:c9:58:f1:1e:0d:83:
88:e6:80:4a:70:6d:98:4f:c3:c4:90:fb:95:61:6a:
8e:fd:f5:94:7b:a5:20:9d:6c:44:3d:d5:8e:ca:a8:
45:99:be:fe:90:bd:8a:4b:e5:bc:91:af:be:39:03:
8b:98:6a:08:1a:0c:e6:cc:87:0e:5f:e9:12:90:55:
50:40:4c:04:bd:3d:ee:2d:2b:21:6d:d3:84:89:0f:
53:3e:d7:63:8b:2b:2a:39:0d:17:dd:20:18:6b:ca:
34:2b:d1:53:66:eb:f8:f1:96:6e:c5:ed:4e:ff:63:
ae:e6:df:78:cc:8e:96:80:28:3d:f8:89:bd:3d:dc:
0c:d3:2c:8b:15:af:34:ad:bd:67:0a:0a:1d:1a:df:
79:83:df:54:19:4e:77:da:b9:93:ef:87:2c:6a:df:
83:01:77:8c:0f:40:48:63:50:d2:aa:d9:8a:ff:04:
80:d6:32:47:1c:d6:27:a9:ef:36:3e:0b:2d:98:1c:
bc:45:48:c6:54:7a:f1:4c:7c:69:a8:de:9a:cb:d1:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6A:71:0D:4D:12:E5:86:EE:C0:5D:14:17:00:08:BD:97:C6:A5:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CE1C1308A9811EE9B466C264AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ab:bb:69:fb:33:67:69:63:99:f7:60:b1:75:43:f3:99:8b:
ea:22:7b:9e:9e:60:ed:44:e3:c5:67:15:c5:0d:a8:08:bc:3b:
4d:fd:c5:c0:93:69:12:0c:10:5c:74:d5:b9:50:9b:53:3f:15:
2a:cc:eb:86:10:ec:da:35:5d:bb:11:46:4b:df:19:2d:b9:ec:
5b:a4:db:66:31:79:81:75:24:08:17:1f:dd:df:9b:23:25:4a:
5b:3f:6a:84:29:e7:11:5f:f7:cc:c6:ae:93:fb:2d:4e:b8:9a:
6f:0e:63:ca:96:55:04:56:0b:39:9c:2b:0a:a9:2e:2a:c3:87:
41:7d:0c:3a:01:97:09:21:9d:79:8c:86:24:75:97:09:c9:41:
c1:af:40:7a:e3:a6:5d:59:50:a6:41:47:c1:df:8c:49:7f:80:
73:ba:cc:4b:04:d2:83:27:42:a9:aa:bc:a7:0d:af:f7:23:61:
50:aa:45:6c:42:2d:4c:a0:ac:aa:ee:cb:68:35:19:ac:7f:66:
a3:b1:83:bf:08:db:17:67:d5:f6:b5:a0:0e:64:75:13:49:d6:
af:a8:01:93:f6:8c:f6:71:34:ca:3a:36:fa:0e:91:af:e2:13:
98:a0:e1:90:0d:86:30:ad:72:84:10:2c:62:95:c3:39:77:9c:
c1:7e:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:01:21 2025 by rpki-client