Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94A35A3E8CDA11EEA837B55A4AD9E6FC.roa
File: 94A35A3E8CDA11EEA837B55A4AD9E6FC.roa (raw, json)
Hash identifier: ShJAIoVR9qR3Otao3XRVmCAcp7LUUP6qIFvHpJEWyzA=
Subject key identifier: 03:B7:FB:E4:6D:88:FC:54:F4:73:9D:DC:A0:6F:1E:50:9C:6E:B9:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94A35A3E8CDA11EEA837B55A4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:08:12 +0000
ROA not before: Mon 27 Nov 2023 04:08:09 +0000
ROA not after: Tue 26 Dec 2023 04:08:09 +0000
asID: 62240
IP address blocks: 154.196.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21676 (0x54ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:08:09 2023 GMT
Not After : Dec 26 04:08:09 2023 GMT
Subject: CN=6564162c-7e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:94:06:d3:60:82:c3:23:04:b8:8d:36:76:
c5:95:f9:3c:a2:30:f8:03:f0:16:f6:4d:ab:7c:3c:
8a:06:ba:d3:5a:b0:33:08:2e:33:5d:d5:d8:77:c3:
97:ee:c0:47:31:19:33:b9:22:b0:9b:16:ed:3a:0d:
54:5b:cb:71:5f:e0:cc:6f:17:ec:81:c6:06:6f:b5:
51:dc:cf:65:c6:24:f6:3e:42:63:0f:95:fe:d5:71:
70:64:50:c1:05:98:3d:a2:26:77:33:dc:63:e8:7f:
3f:d9:61:e7:4c:d2:74:17:7c:c4:ae:bd:03:ce:78:
8a:0b:2d:51:13:d5:37:62:6c:f7:41:cc:b5:7d:99:
c9:fc:e3:5d:48:4c:d6:2b:81:11:a7:dd:ec:09:29:
ec:e4:47:39:36:ed:97:6e:44:40:8e:ed:ec:3e:62:
a6:00:5e:9d:14:40:65:08:12:6e:af:f4:53:e6:05:
a9:0f:24:6f:88:d9:f6:b2:31:8e:02:99:3c:da:8e:
30:74:f4:27:ba:60:34:df:bc:3a:d4:ff:b3:2f:d2:
7e:e1:af:2a:37:8c:d0:36:ed:64:de:d2:b2:a6:3a:
bb:13:e3:25:d5:79:bc:f0:16:ba:22:a6:22:a5:82:
b6:e2:26:84:83:e1:0c:8e:95:53:85:39:f9:48:3f:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B7:FB:E4:6D:88:FC:54:F4:73:9D:DC:A0:6F:1E:50:9C:6E:B9:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94A35A3E8CDA11EEA837B55A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:60:dc:ef:5e:d1:61:8d:21:e7:dc:24:33:bd:29:e7:5f:cf:
1c:b5:19:79:f1:78:52:a5:89:d3:38:f2:e9:2b:ad:58:6e:86:
73:ef:62:dc:e2:62:53:d2:5b:70:14:eb:7b:b0:1b:14:8f:01:
88:fe:93:94:66:89:a2:d4:9d:0f:0d:5a:c2:82:44:67:75:25:
c3:d5:a3:7a:25:f7:b4:81:79:1f:77:da:77:b5:aa:0d:c8:1c:
8f:4d:17:75:84:e5:cd:85:d6:2d:b2:ff:66:7f:07:cf:05:fd:
8d:00:b3:98:b4:64:8f:6c:1c:e8:b1:df:16:9d:ce:82:37:4a:
5e:0f:1d:d0:93:07:bc:3d:b8:b3:65:de:54:54:64:07:0e:3c:
73:f1:89:bf:88:98:61:eb:fd:67:00:2a:8d:13:b0:81:c0:f8:
34:1f:28:43:da:5c:88:33:0f:f1:0b:ba:ac:2f:b0:f5:ac:12:
c0:d4:59:a2:29:c3:05:d8:a7:e1:fa:77:46:0d:f7:f0:c8:6d:
1d:89:4d:21:d1:17:1d:b7:1e:aa:05:7f:49:da:e5:8d:21:92:
71:a6:60:d3:f4:90:b9:ff:31:5d:93:b0:72:c0:e7:f2:76:79:
9b:5d:7f:1e:f2:d1:a5:e8:be:4a:db:a1:19:41:c2:f3:4d:d4:
38:36:aa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:12:29 2025 by rpki-client