Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC8ABD08A8711EE9B35A26D4AD9E6FC.roa
File: 5EC8ABD08A8711EE9B35A26D4AD9E6FC.roa (raw, json)
Hash identifier: X3NHQvcnn7bmSBUiT55TXr3rWCJqQDewygvHvuqwcPY=
Subject key identifier: E2:AA:79:97:BD:EC:FA:48:E4:6C:86:48:BA:6E:38:67:1E:1A:7C:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5312
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC8ABD08A8711EE9B35A26D4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:07:31 +0000
ROA not before: Fri 24 Nov 2023 05:07:28 +0000
ROA not after: Tue 26 Dec 2023 05:07:28 +0000
asID: 62240
IP address blocks: 154.196.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21266 (0x5312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:07:28 2023 GMT
Not After : Dec 26 05:07:28 2023 GMT
Subject: CN=65602f93-6e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:fa:62:6a:72:55:89:c5:2c:e8:a8:f8:c5:
f4:dd:64:b4:0b:5c:65:97:b2:06:e9:48:51:88:b5:
71:d6:7a:d1:fe:10:d2:b3:5d:00:1e:9f:c6:2d:7f:
1e:46:a6:36:b2:28:06:25:2b:53:2c:87:3c:fe:e4:
47:65:b6:8f:08:24:30:12:4a:ac:75:23:2a:ec:36:
2d:c8:78:d8:6c:0c:81:79:dd:ac:21:3f:8e:df:70:
fc:00:c8:57:67:ea:d4:2d:dc:d1:20:46:16:5f:b9:
ec:0d:4e:c9:ec:2d:82:f5:10:98:2b:cc:08:84:67:
33:17:ab:c5:83:07:8e:86:2f:6c:71:66:af:b7:9f:
88:bb:c6:90:13:3e:13:13:cf:12:20:8d:bf:14:24:
3c:b5:25:58:e7:d9:30:08:5c:2b:d9:b7:81:c5:ef:
b9:7e:89:0a:66:af:7d:3c:fe:4f:ac:1f:e9:c3:82:
f8:cb:2f:d0:97:0b:08:79:f5:f6:22:6b:db:39:d8:
da:90:9d:44:03:bc:e1:6a:5a:1f:35:29:37:86:10:
4a:c4:77:03:18:68:26:fd:7d:9f:d9:68:9c:cb:0d:
09:ca:a9:1b:af:79:5a:98:fc:2d:b0:81:85:00:df:
a1:bc:0a:83:e0:c4:9d:85:cc:ec:4d:00:6f:94:76:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:79:97:BD:EC:FA:48:E4:6C:86:48:BA:6E:38:67:1E:1A:7C:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC8ABD08A8711EE9B35A26D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.61.0/24
Signature Algorithm: sha256WithRSAEncryption
04:68:82:34:d9:9e:83:a2:12:88:0c:a6:ac:4e:d8:b7:e7:57:
1f:4f:b4:04:5f:2f:6d:de:26:be:91:6b:82:09:49:e9:88:11:
7c:a3:db:80:14:74:9e:d4:ca:5e:6d:93:cb:05:cf:0a:e2:a6:
fe:43:29:53:e2:64:05:93:ff:97:53:5f:ae:80:fd:a1:c9:0d:
55:80:4d:72:60:e4:46:16:9d:b5:21:ff:e5:bd:75:f0:09:cc:
24:46:12:51:56:40:80:f2:44:ec:ab:a5:57:5c:e9:eb:4b:5f:
96:a9:30:31:69:2f:78:e6:4a:36:c6:b2:66:2b:f0:e1:42:14:
03:a7:fd:98:6c:42:6c:12:51:4d:f1:7c:d3:68:4f:c2:54:a5:
3f:79:42:f3:d3:87:f9:0c:6c:6f:fb:88:c5:00:84:d9:26:50:
73:37:5d:0d:a8:67:9d:ae:8b:fb:f2:a5:5c:83:ea:40:65:26:
d7:f6:00:50:4b:c1:99:48:ed:3e:f2:94:85:8e:03:2c:f5:fb:
9e:2c:af:bc:96:c9:c7:0f:b5:a0:93:f8:b2:c5:b7:2c:ea:48:
51:7b:be:f9:50:31:0c:a4:fd:11:42:e4:57:8a:c5:0f:b8:1e:
0a:9a:5f:dd:a8:1b:0e:26:db:63:a6:f9:ad:c7:23:1e:22:71:
c3:5c:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:14:33 2025 by rpki-client