Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A10B51A6F50B11EF97C4CE4A762E951A.roa
File: A10B51A6F50B11EF97C4CE4A762E951A.roa (raw, json)
Hash identifier: BxUSU96LC5NSJBE/zdUjc634NGIBh9HjiC2ks7/KXao=
Subject key identifier: 0D:C3:50:A9:89:EB:FE:AB:88:71:13:28:6D:CB:67:5D:5F:46:6E:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016867
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A10B51A6F50B11EF97C4CE4A762E951A.roa
Signing time: Thu 27 Feb 2025 13:06:17 +0000
ROA not before: Thu 27 Feb 2025 13:06:13 +0000
ROA not after: Wed 26 Mar 2025 13:06:13 +0000
asID: 62240
IP address blocks: 154.196.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92263 (0x16867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 13:06:13 2025 GMT
Not After : Mar 26 13:06:13 2025 GMT
Subject: CN=67c06349-8a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:b8:f5:fa:cc:d3:e5:43:60:f2:d9:e8:14:
70:f1:56:bb:b5:02:e3:01:ca:55:6c:60:72:5e:e6:
3a:f1:c8:2e:c8:56:c6:ba:e9:17:29:a5:63:66:6a:
a8:0a:10:3a:88:7a:99:8a:44:e0:a1:01:e6:f9:42:
2d:b4:68:e0:78:42:03:9c:e3:47:ec:16:bf:67:cb:
a4:d5:62:1e:0e:59:02:99:e5:2d:a4:6f:69:0f:21:
bf:0e:0d:ab:fc:5f:ab:d5:ad:86:9c:1d:45:37:e0:
30:11:cb:2c:b1:dc:e9:9f:5e:21:5b:06:d9:54:ca:
37:34:10:32:d7:f4:b6:51:dc:75:3b:0e:e3:02:24:
e2:ac:82:50:84:be:1f:19:83:3e:02:63:33:b4:c7:
8c:46:14:93:26:d2:cd:f0:cb:87:ff:7c:85:7f:79:
a4:8e:49:7c:9b:01:23:3a:6e:93:07:cc:17:c0:47:
2b:bd:54:75:07:96:56:9c:cc:b9:80:4d:7c:fb:1d:
b0:22:7a:73:5c:e9:ed:fc:4c:e7:0c:29:6c:c2:47:
8c:02:4d:98:6c:e3:28:82:56:e7:83:1f:55:29:85:
3f:51:4d:63:31:98:a7:91:bd:68:d6:fe:86:51:2e:
9f:9a:3f:f9:7e:67:b9:c5:34:b4:11:3f:88:a3:92:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C3:50:A9:89:EB:FE:AB:88:71:13:28:6D:CB:67:5D:5F:46:6E:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A10B51A6F50B11EF97C4CE4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.48.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:a8:4c:d1:85:9d:44:0b:c5:86:af:77:d5:de:34:7d:50:a9:
29:99:6a:7f:0f:a0:35:3b:64:6f:c0:a4:ae:bc:82:05:0b:8e:
95:8e:9b:e8:e5:dc:37:91:6f:46:d8:37:45:2b:23:27:85:22:
bc:83:ba:c3:41:e3:dc:e0:5a:5a:30:05:7a:3f:6b:d8:53:52:
df:67:33:26:e6:ae:4c:b9:d4:10:25:8f:f8:10:60:d5:85:44:
d0:58:c2:d5:35:89:6a:64:d6:17:a4:41:02:99:0f:71:38:94:
ea:3a:e6:f7:08:a2:9d:10:07:11:32:95:34:97:f4:a0:5a:5b:
dc:2e:0b:42:3c:40:cd:01:55:5e:3e:dd:04:6b:77:6c:87:36:
03:81:7f:d2:fe:7b:f3:5c:9a:16:6a:58:12:2f:e1:6b:c9:70:
62:f5:38:45:89:d7:7e:cf:a1:a4:ef:ea:a8:03:55:b4:75:16:
30:fb:76:72:6d:01:44:61:06:12:2a:9f:11:05:18:1f:e3:b1:
07:f1:24:3f:dd:49:8c:66:f2:b2:d6:d9:16:29:e2:f0:1f:6c:
fb:a6:9e:cc:8a:86:86:66:28:4e:cb:51:8a:a2:c9:4c:7d:a9:
32:c2:aa:4c:d7:cc:a8:d3:71:c4:b2:a6:4a:8d:03:cf:c2:54:
e7:58:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:39:25 2025 by rpki-client