Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F0D5C948A8911EE90FDB2734AD9E6FC.roa
File: 3F0D5C948A8911EE90FDB2734AD9E6FC.roa (raw, json)
Hash identifier: Q1nDzfYPnEqXJzHCIMxTLbNc7zXcMpmgC6XpxxI/8m4=
Subject key identifier: 7D:E1:36:F2:E6:98:62:AE:DF:D9:A3:1A:54:2B:5A:B3:BF:E6:E6:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5328
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F0D5C948A8911EE90FDB2734AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:20:57 +0000
ROA not before: Fri 24 Nov 2023 05:20:54 +0000
ROA not after: Tue 26 Dec 2023 05:20:54 +0000
asID: 62240
IP address blocks: 154.196.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21288 (0x5328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:20:54 2023 GMT
Not After : Dec 26 05:20:54 2023 GMT
Subject: CN=656032b9-e524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:2e:c7:5c:41:ee:96:7f:ee:d4:b5:3d:78:
2e:14:fd:a2:8e:52:eb:8a:f5:70:87:46:ad:5e:fa:
6a:29:d1:51:84:45:a5:e3:b0:f5:00:a0:d2:d4:32:
e8:ff:1c:d6:49:75:5a:45:96:30:db:6c:a3:41:ba:
82:ea:e6:1b:ff:10:57:e0:bd:37:61:2c:54:82:98:
d4:00:3d:15:3e:16:ec:cd:c5:f9:ec:28:09:90:36:
95:c8:40:2c:90:2b:c6:1b:32:49:f5:42:c6:de:29:
05:52:a1:b0:d3:e6:af:45:88:97:b5:ce:56:0d:d1:
ba:77:d4:74:27:29:d4:d1:a8:11:87:0a:c2:27:0a:
2b:b6:ff:e8:8a:8d:84:78:5a:af:b2:43:67:03:8f:
6c:23:6a:81:cf:e2:09:9e:b4:ac:b0:b1:35:8c:46:
97:8c:e8:9b:d1:4a:a8:5c:b2:f3:7a:60:f1:9a:dd:
f6:05:f8:70:19:97:78:fd:4a:95:48:4f:17:f9:f3:
91:7b:41:d0:8d:83:8e:ff:a2:23:de:52:16:64:81:
3c:cf:5f:31:0f:0f:6e:f6:ee:56:9a:fb:16:8b:c0:
81:5d:91:5e:0d:0a:4f:99:9b:da:03:70:df:2e:23:
be:7e:03:06:64:d5:ce:88:27:90:59:65:6d:5c:89:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E1:36:F2:E6:98:62:AE:DF:D9:A3:1A:54:2B:5A:B3:BF:E6:E6:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F0D5C948A8911EE90FDB2734AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.40.0/24
Signature Algorithm: sha256WithRSAEncryption
36:49:f2:b7:2d:59:9e:8e:61:48:bf:bf:c6:d2:c8:4d:96:93:
3a:79:9e:0d:77:01:46:54:e0:e8:0f:7a:64:5d:46:1f:b0:86:
e4:2e:72:75:4c:08:08:4d:2c:a4:bc:98:59:d9:72:43:7a:f2:
bb:71:1c:f0:a1:96:5c:0f:dc:a0:70:67:22:ce:9c:cf:ad:97:
2c:d6:ad:a6:5d:3a:6a:13:23:65:45:d7:e2:e1:68:f9:7b:8d:
37:71:9a:1f:04:ca:7b:79:a1:40:b3:be:6c:08:95:97:5e:4c:
4b:2a:c3:cd:7f:29:e3:95:9f:86:5b:3c:1b:50:22:cc:a6:9a:
77:2a:8a:ce:88:8c:7c:f0:d9:18:87:32:99:06:0c:d8:d8:64:
5d:1c:85:0d:e6:d6:01:1b:9d:b5:95:c3:52:0b:34:69:aa:ec:
57:2b:23:f5:00:b3:f3:19:34:dc:4a:91:a2:e3:25:8e:df:c5:
26:c0:59:6e:74:ca:8f:f3:8d:75:ee:e1:fa:e5:46:00:1c:ef:
7e:92:7f:f3:9c:2e:35:0d:d6:ae:43:3c:e1:97:7a:6a:82:9d:
76:82:59:3e:d6:24:a8:f6:4a:5c:5d:ee:9b:58:12:86:f3:41:
fa:ed:c1:f0:d6:f4:a4:a9:25:99:03:7b:cb:34:7b:21:71:f7:
32:f0:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:53:51 2025 by rpki-client