Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7573CAF62011EF9171E3AE762E951A.roa
File: 5D7573CAF62011EF9171E3AE762E951A.roa (raw, json)
Hash identifier: P0b4r4/7tG3fpmgX1EIh4hMOws4eQxQgBqr0/K9vvgg=
Subject key identifier: 8B:A0:B1:48:12:17:AF:55:8C:5E:9F:4C:3C:23:6A:5F:35:A7:34:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7573CAF62011EF9171E3AE762E951A.roa
Signing time: Fri 28 Feb 2025 22:07:14 +0000
ROA not before: Fri 28 Feb 2025 22:07:10 +0000
ROA not after: Wed 26 Mar 2025 22:07:10 +0000
asID: 62240
IP address blocks: 154.196.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93301 (0x16c75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:07:10 2025 GMT
Not After : Mar 26 22:07:10 2025 GMT
Subject: CN=67c23392-6a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:16:1d:e4:3d:c9:ae:5a:82:df:eb:4c:8f:
48:34:b0:bd:27:63:59:f7:66:b4:5c:91:c8:45:1d:
d6:6a:b5:02:4c:0e:e1:54:ba:8b:fb:28:55:e0:f4:
36:cd:c5:1d:4e:98:64:18:32:7a:b7:da:e0:a4:6c:
00:fa:29:27:af:58:46:b4:78:d1:c0:65:7d:ea:bb:
22:d3:5e:50:12:99:7e:7c:0b:bd:cf:ba:0e:95:bd:
65:6f:9f:2b:da:d3:c4:81:e6:51:3d:8f:c6:70:c6:
9e:5c:ae:a4:c3:63:9f:3e:ce:46:0d:34:22:41:f3:
62:2c:28:68:b3:68:57:b6:18:f6:39:3e:6f:6c:74:
65:3a:c1:7b:ed:6c:7e:2f:3f:dc:32:08:5b:fc:d0:
7a:a3:b4:fb:34:e1:a4:f7:b2:3b:8a:0c:39:20:f2:
d9:5b:d5:df:7f:7e:5f:4f:c7:a9:4d:a6:7e:0d:ed:
e5:c0:85:62:e1:09:99:ff:5f:12:1b:12:56:73:ba:
63:24:ee:10:6b:f1:29:75:ea:5a:ff:6f:36:33:01:
f1:34:ab:f5:3f:fe:5b:9a:f9:95:c6:c0:0e:84:c1:
50:1d:f5:be:98:2e:8f:81:2e:7c:89:d8:32:d1:eb:
7d:d9:3f:3f:15:cf:52:4d:ac:05:01:18:05:cc:61:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:B1:48:12:17:AF:55:8C:5E:9F:4C:3C:23:6A:5F:35:A7:34:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7573CAF62011EF9171E3AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7f:c1:88:ed:23:f0:41:eb:99:b8:5d:6b:71:a2:10:6d:bf:
ab:5f:46:36:00:a5:77:5f:0c:bb:33:38:fb:f2:03:08:7e:ec:
04:b1:68:89:b9:38:db:fe:4d:a2:03:c9:d5:a6:48:d7:1c:ba:
33:ad:1e:34:c5:17:e8:7a:4f:34:d3:44:10:93:7f:8a:43:6a:
c8:65:a3:5f:fa:0b:ea:fd:41:dc:5f:39:cc:cc:54:04:e5:70:
77:5b:7f:78:7b:5c:7f:12:fc:a0:d2:f7:d4:87:d4:1b:0c:23:
9a:5b:64:e2:bf:df:97:65:6a:5c:c4:79:db:1b:db:d0:b7:40:
65:60:14:bf:80:2b:b3:19:47:6c:e2:b4:cb:13:92:b3:01:38:
78:c0:19:e4:34:03:98:70:ee:a2:26:0f:57:52:9d:78:99:8f:
a6:5a:01:77:b0:33:3b:aa:9b:76:d7:f3:7e:75:0a:a0:df:bf:
d7:49:9f:af:47:1f:e6:e0:0c:ea:c5:78:32:16:b8:2f:8a:37:
6b:f6:9f:37:ae:0c:9f:f4:40:cb:58:c9:b0:e2:26:ed:96:ba:
c8:1a:2d:ff:b1:73:4b:e9:93:f9:0a:17:91:9c:95:4f:75:3d:
86:ba:f5:1e:a6:60:ec:76:fb:95:7d:d3:81:40:f9:a3:73:ba:
b8:65:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:01:54 2025 by rpki-client