Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AA7778CF61C11EFB75C8992762E951A.roa
File: 5AA7778CF61C11EFB75C8992762E951A.roa (raw, json)
Hash identifier: Enzkc+8E1/717lL/T0O+l5IlVheAEZFS7AitkKaUMQk=
Subject key identifier: 3F:75:85:52:2B:78:B7:18:88:AA:45:0E:2F:AD:48:7F:F7:E6:53:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AA7778CF61C11EFB75C8992762E951A.roa
Signing time: Fri 28 Feb 2025 21:38:31 +0000
ROA not before: Fri 28 Feb 2025 21:38:27 +0000
ROA not after: Wed 26 Mar 2025 21:38:27 +0000
asID: 62240
IP address blocks: 154.196.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93263 (0x16c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 21:38:27 2025 GMT
Not After : Mar 26 21:38:27 2025 GMT
Subject: CN=67c22cd7-60fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:0d:3a:e4:b5:05:b3:dc:04:9d:c2:73:47:
57:4d:30:a4:52:e6:12:2e:2e:aa:cb:f3:56:a6:9a:
3b:4c:a5:09:fa:c5:d2:7c:f6:c3:ad:62:00:5a:75:
6a:cd:79:aa:2c:02:d5:0b:75:2b:6d:82:ae:ab:da:
fe:5b:a2:f4:01:89:2c:72:1e:19:b5:82:ed:34:21:
30:8c:dc:b7:15:dd:5e:ca:98:d4:95:ec:b2:4e:dc:
b4:22:81:93:6a:e8:b1:24:e9:9a:b9:9a:8a:3b:ff:
87:a0:8c:a8:c7:ca:09:d1:f8:20:81:cf:ce:d8:a8:
2d:20:d5:10:81:0d:70:12:eb:bb:d3:79:88:ba:a5:
a8:c3:66:1c:c6:7a:28:01:52:d6:d6:b0:d4:95:cf:
73:98:32:60:61:8c:39:bc:ed:c3:3b:a5:96:c2:a9:
a3:a7:0e:a6:6d:fe:bd:4f:68:dc:e3:44:75:b6:e9:
86:03:e5:6b:b1:6e:54:70:29:07:18:02:64:48:89:
9e:3d:01:b0:0e:39:db:a3:d5:f2:b1:78:11:f8:8c:
87:a9:e7:5a:0b:09:55:bb:5f:d3:6f:1a:e8:59:af:
4c:7f:ab:40:07:22:de:5d:bb:db:dd:14:3d:ad:b3:
19:29:26:40:a6:e9:52:e1:92:07:ec:87:59:e0:81:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:75:85:52:2B:78:B7:18:88:AA:45:0E:2F:AD:48:7F:F7:E6:53:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AA7778CF61C11EFB75C8992762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.70.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4c:ec:73:68:62:fc:72:cb:a0:7c:7a:75:96:7e:4f:af:f2:
86:02:86:90:66:f3:d6:9f:84:03:75:0e:f1:be:ea:c0:ba:e0:
d4:ca:d9:19:78:f7:2c:74:fd:ac:65:69:62:c7:7f:dd:85:6c:
84:3d:91:9b:5a:1c:9e:eb:a0:93:74:a6:5e:28:0d:bd:b8:76:
11:07:f0:74:dd:65:23:0f:d5:b5:55:d6:85:b6:8b:52:0c:f9:
47:c3:a0:f6:11:78:03:86:0d:37:b7:fd:5b:61:b4:c7:c9:95:
4a:3f:c0:a9:f9:76:e8:bf:35:81:d2:bc:71:d5:14:e5:7b:09:
f6:0d:0e:ae:fa:0f:ef:aa:7d:b8:d3:cf:96:49:a9:89:a5:d6:
4d:8f:62:d1:31:77:b4:83:b3:5b:05:af:2b:88:af:9f:35:5c:
d8:ce:6c:2a:a0:c3:5b:ac:d2:85:32:15:80:b4:de:6b:1e:38:
32:bf:5f:91:96:fe:72:b3:66:cf:88:50:30:4b:79:6d:6e:68:
ce:cc:97:b6:23:c8:a4:af:db:8d:5d:ab:d6:3e:bd:48:97:2e:
85:28:f3:f4:3a:3b:69:e2:60:c3:a9:0b:82:20:76:71:af:cf:
fb:4a:98:65:3b:f4:a1:a3:01:ec:74:d0:39:9c:f1:38:81:24:
1e:c3:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:20:46 2025 by rpki-client