Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/691A64AE8CDD11EEAA78E3634AD9E6FC.roa
File: 691A64AE8CDD11EEAA78E3634AD9E6FC.roa (raw, json)
Hash identifier: hhMjWpr2lz+i5IFkcpCSVyPZestXTyj9qQW9KMEvnAE=
Subject key identifier: 64:67:CA:CB:87:AB:10:87:00:B3:A9:46:CD:EE:27:99:FB:ED:D5:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/691A64AE8CDD11EEAA78E3634AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:28:27 +0000
ROA not before: Mon 27 Nov 2023 04:28:24 +0000
ROA not after: Tue 26 Dec 2023 04:28:24 +0000
asID: 62240
IP address blocks: 154.196.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21748 (0x54f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:28:24 2023 GMT
Not After : Dec 26 04:28:24 2023 GMT
Subject: CN=65641aeb-492e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:1e:08:4f:2b:ac:df:cb:5d:af:60:4e:f3:
d8:53:09:ef:5d:f5:a6:5a:73:0e:98:0d:94:bd:25:
5d:01:8e:22:c9:70:c4:8a:d1:3e:78:13:01:05:f9:
58:80:a7:5b:d3:b7:78:b1:36:df:66:e9:8e:6e:0a:
65:80:2f:0a:b3:a9:d6:bc:50:4b:f7:12:f4:af:97:
76:52:5d:bb:c3:35:a1:f0:46:77:22:b0:f8:12:04:
da:f6:30:df:a6:d0:57:1e:2b:69:ed:58:b2:09:0a:
98:3c:3d:8b:44:ed:72:be:65:a3:5b:a8:0b:e0:40:
b2:03:8b:32:50:ce:ac:70:28:26:b4:58:eb:4d:9d:
03:d9:e0:cb:be:04:27:47:ee:ae:8c:3a:26:c3:cb:
c7:6e:d6:04:87:4b:34:57:ec:0b:bd:81:9e:22:2e:
21:52:03:31:75:87:2a:04:38:7d:fd:0b:1e:c3:6c:
4a:17:40:4c:c3:33:51:e5:2b:44:d1:da:32:fd:5f:
33:bc:41:d8:14:07:8d:9e:e1:81:ce:c2:47:94:11:
45:dd:d6:72:6b:18:52:8d:7f:5b:e1:0a:bd:d1:a5:
da:35:d0:8b:ca:db:05:9f:31:67:3b:2e:1a:90:5c:
60:a6:53:bf:06:aa:9a:01:1e:c4:6f:5c:4f:85:e3:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:67:CA:CB:87:AB:10:87:00:B3:A9:46:CD:EE:27:99:FB:ED:D5:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/691A64AE8CDD11EEAA78E3634AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e0:b9:bf:0a:a5:d5:4b:74:ae:e0:0b:63:d6:c7:94:7f:8a:
f9:ef:c7:f2:51:84:e7:b7:cb:28:10:ba:6e:53:3f:93:6e:d7:
5d:16:ec:eb:d8:b3:e2:e2:49:68:73:e8:37:19:15:ad:a2:5b:
a9:ec:c9:68:c5:c9:3a:31:94:5a:6a:50:b0:b7:3b:e3:68:49:
36:6f:3d:a6:3d:ea:93:09:e9:4e:f2:4f:96:e7:8c:13:08:e8:
6a:ab:ff:19:1d:54:2b:9d:cf:b4:0f:55:1c:b2:12:7c:19:e5:
9b:2c:29:b6:bb:cf:69:66:05:d9:5d:d0:72:62:9f:47:5d:df:
f5:4f:27:cf:6c:c3:0d:e1:ff:c6:f4:a6:27:a9:2a:b6:42:26:
06:b8:b6:17:64:71:bd:b4:37:97:e5:5a:49:25:e6:70:af:29:
f5:75:54:59:93:9c:5c:b0:f9:23:1e:cf:9d:8c:ed:d8:0f:ec:
04:7a:2b:6d:3c:7d:c0:33:ef:61:5d:b1:a6:19:7d:95:44:32:
e5:9d:57:a9:0f:9d:16:49:23:eb:a8:d6:61:f4:91:c8:49:e6:
86:91:63:57:5e:1c:ba:b6:03:87:b3:c2:52:58:ad:7a:35:09:
a0:0a:d2:8b:79:36:3c:ab:65:b5:e0:88:29:8c:a7:54:2a:f4:
31:ab:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:16:10 2025 by rpki-client