Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EA5ECC2F51F11EFB47D7953762E951A.roa
File: 5EA5ECC2F51F11EFB47D7953762E951A.roa (raw, json)
Hash identifier: wANk0HFxnruFq7s7QOEnHX4vdQGFvFxiatckHMKLPdM=
Subject key identifier: E2:D3:13:B7:22:63:B0:D6:0E:5D:57:EE:04:E2:31:8E:EF:FB:FF:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016906
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EA5ECC2F51F11EFB47D7953762E951A.roa
Signing time: Thu 27 Feb 2025 15:27:35 +0000
ROA not before: Thu 27 Feb 2025 15:27:32 +0000
ROA not after: Wed 26 Mar 2025 15:27:32 +0000
asID: 62240
IP address blocks: 154.196.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92422 (0x16906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:27:32 2025 GMT
Not After : Mar 26 15:27:32 2025 GMT
Subject: CN=67c08467-54bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:bc:65:df:80:d0:68:94:b6:1d:66:61:70:
94:d8:41:66:12:4d:a6:27:7a:0b:a9:ec:44:eb:f8:
c8:cc:6c:9f:e9:c8:44:87:51:a3:01:b9:c8:c3:2a:
47:e1:61:8a:56:72:eb:04:df:ce:08:ed:b8:b5:22:
5d:55:67:0b:52:e8:73:2a:d7:8e:0d:be:e9:97:86:
15:dd:96:fc:51:21:88:21:a7:16:97:2f:9a:86:c1:
5e:0e:42:9a:27:06:b1:43:44:6a:8c:0d:ca:29:02:
20:b0:66:0a:04:35:8d:1d:bf:62:92:33:3b:88:16:
9f:57:54:c4:ba:07:0a:54:e7:3f:42:67:db:34:dd:
d3:0f:5f:3e:95:83:f9:7d:8b:e6:14:e7:de:69:bc:
b1:44:3b:28:d0:8f:b9:ff:77:e2:97:66:ee:d6:c8:
b9:0f:20:03:1a:45:2f:34:50:2d:d9:a4:7c:cb:56:
f3:14:65:3f:91:66:49:90:9c:d8:a1:3b:c7:7d:23:
48:6e:00:84:5b:a0:14:52:7a:7d:c2:d3:1e:2c:5e:
53:e9:a0:7a:6a:7b:50:aa:94:38:c4:ff:8b:f3:0f:
8d:65:cd:8a:4d:e4:38:a6:11:a2:20:c7:b4:1c:fe:
42:15:2b:7a:c4:ad:42:a1:65:6c:89:69:b4:f9:ce:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D3:13:B7:22:63:B0:D6:0E:5D:57:EE:04:E2:31:8E:EF:FB:FF:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EA5ECC2F51F11EFB47D7953762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.69.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:c3:82:41:56:47:85:d2:85:ef:f0:e8:61:34:07:35:bb:14:
f1:bc:9f:d2:9d:04:6b:1b:c9:96:27:d1:70:9a:78:cc:cd:c0:
63:7f:af:8f:52:48:c8:ec:4c:0d:ad:04:0a:93:3b:9f:40:01:
76:5a:7b:f0:ef:ba:a6:be:0e:f8:e2:78:09:2f:c6:b6:dd:65:
dc:5f:b6:6c:a3:85:42:42:d3:9f:d5:5e:81:ff:7b:2c:4e:37:
97:e6:15:fc:0d:38:8f:42:07:ed:20:32:a0:03:a6:e4:b8:a5:
11:4e:e7:a5:e8:ea:58:f4:e4:7b:50:f8:2e:c3:2b:ee:52:49:
7d:3a:9f:43:c5:f8:d6:1c:4b:2d:2e:d5:50:59:81:fe:d2:ab:
d0:37:c1:6e:c5:98:ca:c8:42:a5:9f:fd:4e:47:60:e3:13:78:
12:6f:2c:cf:4a:2e:5c:41:cd:e6:1d:93:e0:49:84:96:36:ea:
fe:0a:40:86:35:16:1b:f9:ad:07:47:ea:d9:7d:b3:60:74:40:
0b:ea:91:fb:bb:4a:c4:90:e4:39:1b:de:42:43:e4:20:76:c3:
5c:c3:43:dc:2b:fc:7a:37:1a:e9:4b:35:4d:1b:e4:b5:f6:c0:
65:1b:be:cd:d5:89:18:2a:46:fb:ad:a6:98:ac:48:ca:f0:9a:
96:36:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:46:23 2025 by rpki-client