Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4638A87AF51D11EF84FD5745762E951A.roa
File: 4638A87AF51D11EF84FD5745762E951A.roa (raw, json)
Hash identifier: eUc3+rW5fpQ6wIS1QCY7vvkPeuSXAYhfIb66icrI70E=
Subject key identifier: C8:49:18:C3:7A:7B:20:BF:79:A7:2E:90:D6:09:00:61:E9:E2:34:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0168F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4638A87AF51D11EF84FD5745762E951A.roa
Signing time: Thu 27 Feb 2025 15:12:35 +0000
ROA not before: Thu 27 Feb 2025 15:12:31 +0000
ROA not after: Wed 26 Mar 2025 15:12:31 +0000
asID: 62240
IP address blocks: 154.196.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92400 (0x168f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:12:31 2025 GMT
Not After : Mar 26 15:12:31 2025 GMT
Subject: CN=67c080e3-293e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a2:17:52:0d:4b:bf:da:42:5e:af:53:f7:83:
be:2c:9d:24:2d:73:c4:8e:23:2a:47:a9:9a:8c:88:
78:9b:8b:0a:83:e5:19:7d:73:1a:62:ab:79:2d:9e:
5a:60:e2:8e:dc:2d:55:71:65:53:23:3e:41:4f:5e:
31:2c:92:74:75:ce:ed:0b:60:28:0f:6d:b0:56:14:
70:e3:16:72:5a:fd:cd:d6:f1:5b:5a:aa:35:94:eb:
f4:e7:bf:e7:1b:79:92:9c:fc:bf:81:21:82:c8:f4:
b7:a9:41:9c:41:45:d1:27:c1:03:58:bd:55:cf:55:
25:f8:cc:5a:68:c7:95:8c:1e:96:42:8f:5c:86:cc:
46:5d:a6:b4:24:1f:26:2c:9b:c2:73:a9:6a:a1:68:
df:de:ae:a5:7f:94:2b:10:2a:6b:17:1f:bc:9a:a2:
22:46:74:53:26:fd:54:cb:e3:b3:54:d3:52:43:83:
51:59:79:b4:61:39:ff:d6:90:ea:a4:ec:7e:92:0b:
9a:7a:83:5e:9c:33:13:9c:b4:70:5a:17:0c:88:6f:
d6:6e:3c:ec:07:4d:83:05:c8:7e:74:e9:74:bd:94:
a8:c3:51:7d:6d:bd:5b:a1:07:2a:1b:b4:d9:aa:27:
e0:05:e6:63:d2:1c:1c:aa:aa:a2:97:67:83:63:53:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:18:C3:7A:7B:20:BF:79:A7:2E:90:D6:09:00:61:E9:E2:34:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4638A87AF51D11EF84FD5745762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.61.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3e:a7:70:63:16:fe:f1:36:5d:55:97:27:31:e6:53:26:a6:
ea:b9:df:a6:5c:c9:2a:f6:14:07:ec:9b:27:23:44:ac:7f:e3:
e9:5a:8c:3f:eb:46:6b:38:e0:83:c6:88:31:e8:95:b9:9e:f3:
95:f0:29:fb:0b:8d:8d:0a:fa:27:62:05:b0:5f:36:57:7a:54:
15:e0:d5:2b:18:cd:0c:ef:49:68:a4:99:34:54:3f:9d:e8:7d:
d2:00:bf:60:c7:e5:21:d4:2c:84:62:09:13:39:57:de:ab:ea:
5e:a7:ed:fb:6c:29:6f:7b:29:76:08:1f:01:66:e1:6a:c6:21:
2b:15:42:3e:4e:a6:8b:e6:1e:e3:73:2a:5f:e7:8f:e0:76:b6:
53:4a:54:a5:8d:64:fb:05:bc:83:88:26:03:41:1a:2f:66:f9:
c6:8c:4e:07:4d:b3:82:b3:7c:74:1b:72:03:9d:f3:91:a2:b8:
86:bf:ca:10:f2:f8:ef:0e:0e:94:0b:99:88:9e:b1:ab:78:d6:
f9:35:93:66:a7:a2:84:65:40:b4:15:e5:f7:e8:d0:1b:b7:fd:
7e:90:97:5c:30:ec:56:10:0c:bc:2c:ac:70:3d:b7:0f:8e:35:
6c:45:7b:33:5d:65:ba:4c:c9:ca:3e:df:fe:55:a2:7e:af:a8:
44:48:c3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:48:18 2025 by rpki-client