Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CCA3CCC473711EEA97F24544AD9E6FC.roa
File: 7CCA3CCC473711EEA97F24544AD9E6FC.roa (raw, json)
Hash identifier: tNxnkzHQXHQAZMSTAnV0vaM9NaBHPkQRtdaqn6YRan4=
Subject key identifier: 71:CC:7E:43:47:5B:A1:15:AF:FB:2A:17:6F:FD:BF:CB:7E:3E:A5:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3AD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CCA3CCC473711EEA97F24544AD9E6FC.roa
Signing time: Wed 30 Aug 2023 13:16:54 +0000
ROA not before: Wed 30 Aug 2023 13:16:50 +0000
ROA not after: Thu 08 Aug 2024 13:16:50 +0000
asID: 133199
IP address blocks: 154.204.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15063 (0x3ad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 13:16:50 2023 GMT
Not After : Aug 8 13:16:50 2024 GMT
Subject: CN=64ef4146-e88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:51:c0:8f:00:77:43:5b:38:5b:92:ce:e3:
37:d9:63:22:00:d7:5f:e7:0a:31:ac:d0:41:02:a0:
7c:87:a6:23:c5:a0:98:df:3b:02:96:d9:c9:84:35:
56:6c:4c:c4:0f:5a:25:79:16:98:dd:48:1c:c9:56:
5a:25:bb:13:b6:cb:23:c6:de:0f:fc:53:ef:95:70:
39:df:3b:74:f6:58:39:4a:a7:23:c5:1e:35:6a:a5:
e9:35:80:36:96:38:40:9d:eb:91:fa:2a:da:cf:f7:
2a:44:0c:32:72:e6:f7:b3:3d:8a:22:19:9b:66:8d:
b3:f3:8c:cc:d9:61:93:ee:25:91:bc:f7:43:8f:4e:
47:1f:aa:ff:1e:cc:48:73:ec:54:0d:ae:c8:55:79:
94:10:b8:d9:0f:38:d0:cc:5d:d0:14:8c:74:62:5f:
ef:e5:8e:67:1b:32:64:1d:23:60:5b:45:69:8d:36:
02:9a:a7:14:c5:48:1e:e9:c4:02:f8:e4:a3:e6:f2:
9f:a7:a4:64:ee:14:26:8c:30:25:28:7d:76:97:52:
f3:62:8f:4e:09:07:46:00:6b:10:35:f3:d4:53:ba:
89:02:3d:f5:a9:5f:db:8e:83:4b:07:4a:43:f6:bc:
a0:76:02:5c:8f:12:78:c2:1d:a2:7c:5a:6a:23:37:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:7E:43:47:5B:A1:15:AF:FB:2A:17:6F:FD:BF:CB:7E:3E:A5:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CCA3CCC473711EEA97F24544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.52.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4a:6f:7a:8d:6f:e5:7b:50:1b:78:b2:f4:0b:2c:08:a6:5c:
a9:00:15:09:a7:f7:d4:79:b4:a7:c9:08:06:2d:b9:91:33:33:
d8:a9:76:43:34:09:1c:54:21:da:e2:d9:af:84:88:4c:9c:b1:
e6:39:c8:cf:8f:6f:5c:10:1c:7a:be:83:8c:f7:35:0a:c7:27:
89:9a:72:c0:bc:09:f1:e7:4a:aa:f4:03:27:21:70:57:44:59:
9f:1e:01:30:62:3d:f7:94:7b:b3:f1:bf:ae:3a:77:a6:0a:17:
20:88:4a:14:34:a5:d6:f2:c7:38:3e:92:37:c1:d3:7b:d1:5b:
88:11:1f:17:34:ad:be:f7:02:c2:2f:c8:25:aa:83:71:1f:4e:
bb:36:cd:db:66:94:d0:b7:75:9c:e0:41:15:59:e3:6c:51:36:
21:ae:b4:10:d7:38:27:0d:08:71:3f:5b:a9:c4:15:11:b1:f8:
1a:68:d7:64:8d:42:ca:4e:a1:05:f9:ab:f7:6a:32:92:c7:cb:
a1:1c:0c:f8:50:10:76:31:0b:ab:a8:4c:fe:ef:15:92:4f:e8:
c7:1d:61:17:be:68:7b:24:85:d7:ae:8b:5f:75:5e:da:92:97:
d8:43:2d:d4:25:41:b2:fc:29:a3:7b:06:a7:ff:19:49:e3:80:
97:f5:f0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:46:38 2025 by rpki-client