Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426D0A1AF4FA11EFB509FC57762E951A.roa
File: 426D0A1AF4FA11EFB509FC57762E951A.roa (raw, json)
Hash identifier: q9IAAdLB2O1Suw/AIHt7X71WqaDl732VxVPh8BqUTDM=
Subject key identifier: 22:13:0F:42:31:79:9D:E2:D6:CA:6F:95:87:80:F7:35:28:18:6F:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016800
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426D0A1AF4FA11EFB509FC57762E951A.roa
Signing time: Thu 27 Feb 2025 11:01:57 +0000
ROA not before: Thu 27 Feb 2025 11:01:53 +0000
ROA not after: Wed 26 Mar 2025 11:01:53 +0000
asID: 62240
IP address blocks: 154.196.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92160 (0x16800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 11:01:53 2025 GMT
Not After : Mar 26 11:01:53 2025 GMT
Subject: CN=67c04624-5e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:bd:4e:e8:ef:7d:e1:4e:7c:c1:24:bc:2e:
ee:3b:60:88:0c:c3:8e:44:ae:d2:68:ce:f5:3b:bd:
ff:0a:04:5b:df:72:49:37:44:5f:e0:74:b1:38:e7:
86:15:76:39:4a:95:3c:f2:d8:23:f5:52:01:9e:cf:
bd:6a:bd:11:e3:e6:31:7c:c8:cb:bb:32:bc:19:a2:
c2:0c:d3:e8:f5:3c:c6:94:b9:8a:6f:97:f2:96:5f:
56:76:eb:74:6b:ee:70:72:78:00:0f:8a:b4:e0:a9:
68:70:67:a8:3d:dc:4d:b7:08:a7:6b:d8:b2:ba:54:
35:3e:3c:74:b3:c5:f2:09:08:58:98:33:51:fb:1a:
11:b2:45:20:20:ba:5a:b9:bb:3a:92:6c:e8:92:04:
5e:00:13:0c:5c:c7:db:8e:6a:b3:0f:aa:6c:73:88:
6d:b0:ef:f4:7a:1d:0f:5b:ac:5f:af:cc:d9:f4:58:
73:8d:8d:bb:80:da:ba:b2:16:78:50:fb:00:3d:31:
db:f4:80:3c:78:9d:7a:a4:9c:08:1a:e5:a0:97:e2:
1f:6d:c3:b5:67:70:ce:04:eb:cb:43:61:98:40:9b:
b2:a4:26:8b:35:64:e5:6c:f2:5a:d0:16:47:ce:e1:
ba:77:fd:a5:72:53:9c:d2:1d:79:b7:ba:3a:f0:d0:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:0F:42:31:79:9D:E2:D6:CA:6F:95:87:80:F7:35:28:18:6F:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426D0A1AF4FA11EFB509FC57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.40.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4c:01:11:86:e9:8e:10:d8:9c:e5:22:f6:e5:ab:0c:59:08:
51:5c:28:76:72:18:e4:c0:26:7f:f1:8d:5c:31:76:12:46:21:
54:83:99:0c:00:a4:31:d8:db:57:77:d1:36:b5:de:eb:5b:e9:
89:e6:9e:a2:54:28:c1:b5:c1:bb:e7:1f:4c:7d:63:9a:ea:d4:
1d:b6:52:9f:a7:07:fc:58:ac:bf:1f:56:80:4f:ca:fd:7d:13:
bf:b0:3e:dd:b6:7d:42:50:ff:59:99:87:f9:d0:2b:de:54:fb:
01:ab:9c:5e:db:d2:da:25:5a:94:07:ee:ee:4a:03:b3:59:6d:
00:96:e3:e2:10:8e:9d:78:aa:e1:e8:91:8f:02:29:05:71:71:
e1:8b:30:76:3d:68:73:c4:1d:8f:66:49:df:33:96:86:21:34:
78:85:6b:89:e6:c3:2d:d4:82:e5:19:a3:6d:b1:0f:af:d9:b6:
f3:bc:fc:c3:88:2a:db:05:86:7f:fd:04:0c:54:7f:b6:8d:ed:
56:11:a7:72:4a:52:17:c6:6f:a8:26:1f:d1:52:45:be:0e:81:
0e:38:48:fe:36:e7:c9:8b:db:46:56:e6:c6:91:bf:39:1c:7e:
61:20:22:73:9b:ff:59:44:71:14:64:c4:c0:4a:ac:b0:19:b8:
c9:10:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:26:22 2025 by rpki-client