Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DE226FE8A8311EEABB0CB604AD9E6FC.roa
File: 6DE226FE8A8311EEABB0CB604AD9E6FC.roa (raw, json)
Hash identifier: Jv3YHOSoGualF/9gkk3MGqlRlykt1xfnEJHkzkPETHg=
Subject key identifier: 49:9D:AD:61:0D:52:12:EA:8C:FF:38:D9:64:C9:D9:27:67:6F:87:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DE226FE8A8311EEABB0CB604AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:39:19 +0000
ROA not before: Fri 24 Nov 2023 04:39:15 +0000
ROA not after: Tue 26 Dec 2023 04:39:15 +0000
asID: 62240
IP address blocks: 154.196.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21220 (0x52e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:39:15 2023 GMT
Not After : Dec 26 04:39:15 2023 GMT
Subject: CN=656028f6-026e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:ca:28:d3:c7:a4:56:15:81:1a:35:05:e4:
28:0d:fd:e5:ae:05:5c:f3:3b:10:be:e0:21:e6:81:
6f:ff:6a:cb:79:bc:13:a4:68:d2:0b:fd:de:d3:a1:
c2:06:5c:84:be:51:f2:b1:76:06:6a:db:c3:10:ac:
04:d9:50:2f:6c:2e:a8:73:a4:b3:b2:33:63:8d:e5:
92:11:c1:f8:3c:d6:84:e2:6e:f7:f1:dc:94:84:6d:
cd:ed:70:e4:9f:8b:01:55:ed:62:f3:b9:22:ea:2d:
4e:61:c8:a6:8b:58:c0:24:9e:a8:71:c6:c3:3c:dc:
a8:e6:9a:02:11:14:56:b5:70:27:15:be:86:6e:37:
fa:58:9b:5f:74:eb:09:19:87:56:7f:cc:bb:75:cc:
df:89:e6:33:dd:15:99:08:48:eb:cd:97:05:92:7e:
15:05:5e:fb:1a:ff:72:39:a2:50:28:eb:74:68:6b:
06:88:13:36:14:a1:7c:56:1a:75:90:77:b6:ba:dc:
fd:ba:d7:0a:29:f5:7c:71:3c:dc:a0:b1:a1:00:5c:
5b:1e:c5:dc:5e:02:1c:f6:f3:88:70:74:8a:ec:fc:
a9:9b:7f:9c:17:ed:af:1c:2f:b4:59:d4:63:7f:3a:
41:ba:e5:79:0b:83:ab:8e:ae:73:23:0d:57:26:bb:
b5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:AD:61:0D:52:12:EA:8C:FF:38:D9:64:C9:D9:27:67:6F:87:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DE226FE8A8311EEABB0CB604AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b8:08:a5:ab:c3:6b:a3:30:5e:fa:75:0d:e1:b3:84:55:b4:
9c:09:7d:07:90:df:79:30:25:e7:c2:77:28:a5:48:ab:39:16:
a1:aa:8f:8d:8b:f1:bf:88:91:ab:39:b7:46:c0:42:ce:74:42:
57:da:44:45:5e:e2:56:46:9e:3e:d9:64:e4:3e:5e:f5:e1:7f:
a5:d6:a7:b4:5d:ff:64:51:96:78:4f:68:7d:dd:e4:aa:aa:93:
ca:3b:30:3f:ed:bf:78:ce:d8:5c:46:12:ee:b3:62:db:73:3b:
35:10:9a:ba:92:d6:ef:3c:49:4a:40:54:35:86:99:f5:4b:75:
ae:c8:95:4e:9a:4e:c1:6c:62:4c:17:45:4c:62:bc:80:37:93:
c3:19:31:22:1c:9e:72:79:96:d9:04:80:f9:cc:6f:e2:08:19:
46:b4:15:cd:e1:ce:c7:67:b4:95:cd:66:99:37:a4:5f:61:63:
2e:a9:64:d7:e1:c4:0f:ad:d2:59:95:18:32:55:93:30:0c:e0:
98:32:6d:55:21:f9:ba:cd:0a:80:8b:d4:c6:ee:7d:63:fa:87:
31:47:72:4c:4d:a3:8c:2c:05:98:e5:de:8c:c2:4a:f5:da:4e:
38:f6:d6:54:47:76:b6:ce:0a:ac:48:3c:bf:10:ba:26:9d:88:
9f:33:33:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:28:23 2025 by rpki-client