Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A447A6968A8411EE91D58D644AD9E6FC.roa
File: A447A6968A8411EE91D58D644AD9E6FC.roa (raw, json)
Hash identifier: 9RN2Ar9sGBX+95rFHzUlobI4iYYeg+KTN3LAzsMqJ+Y=
Subject key identifier: 2B:B1:C2:31:3A:F9:6B:C8:61:03:43:07:6A:42:0F:B3:DE:46:BE:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A447A6968A8411EE91D58D644AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:47:59 +0000
ROA not before: Fri 24 Nov 2023 04:47:56 +0000
ROA not after: Tue 26 Dec 2023 04:47:56 +0000
asID: 62240
IP address blocks: 154.194.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21234 (0x52f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:47:56 2023 GMT
Not After : Dec 26 04:47:56 2023 GMT
Subject: CN=65602aff-ab36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:c6:c6:ce:cd:2e:f1:17:a1:22:3b:ec:38:
af:07:be:64:4e:7d:ae:e4:d7:87:15:a0:b2:da:14:
c6:ee:fe:ea:33:c2:60:e3:c5:fa:23:68:7d:94:88:
d2:90:1a:16:62:77:c3:64:12:78:86:82:38:9c:70:
65:dc:a5:17:5e:cc:21:6b:b7:5b:9b:d8:91:c3:fd:
c2:d2:b8:ba:3e:1a:41:1f:db:ea:7b:79:bf:ad:0d:
97:73:27:41:e7:6a:a4:3a:77:1f:f6:2c:4f:26:d6:
59:d6:dd:68:4d:57:08:85:21:20:bd:10:6c:0d:ab:
a4:70:b5:ba:37:c9:a1:12:c8:5d:f9:43:7a:80:16:
6d:16:23:74:64:3a:46:2a:15:20:39:13:a7:6d:75:
6d:6b:a2:34:31:b6:94:04:d4:04:9d:f8:25:9c:56:
ad:9b:f4:18:eb:04:02:d6:38:1a:11:0a:73:f3:75:
55:2f:84:ed:2a:9e:cd:2e:c3:a8:f6:cd:ce:cb:8d:
78:63:12:1a:75:00:60:e0:f8:34:f9:fa:0a:91:8c:
fa:58:23:d6:2c:23:55:cf:69:0e:da:bf:3e:2d:fd:
b0:05:06:42:ca:e3:24:37:5e:4d:e6:60:f6:b8:dd:
6a:93:52:61:58:27:5f:7e:6c:9e:eb:1a:dd:f6:01:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B1:C2:31:3A:F9:6B:C8:61:03:43:07:6A:42:0F:B3:DE:46:BE:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A447A6968A8411EE91D58D644AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:72:bf:aa:d1:d7:5c:34:4e:1a:f8:21:7f:2f:d8:43:91:25:
c5:04:2c:b5:54:cc:24:c5:c7:de:86:59:c6:5f:f2:4f:4f:be:
08:e4:a2:bd:9d:2f:78:92:7f:ba:ad:ca:7d:50:d1:68:97:a6:
88:f1:15:50:86:a6:1f:22:b8:18:a3:7e:06:f3:04:6e:8d:6e:
38:ba:ec:69:f6:9d:b7:f2:0c:40:af:69:01:ae:d8:8a:f9:15:
47:68:1f:a0:6f:bf:d1:8e:49:e1:91:89:4b:ab:84:24:b7:0b:
64:69:92:2a:c5:e6:2e:d3:2f:1f:19:9c:33:9a:73:8c:d6:16:
68:eb:08:ff:12:3b:6c:76:10:a4:8c:0d:ae:57:81:5b:98:5e:
f1:b2:40:cc:1d:1f:8b:63:58:d4:98:31:c7:d1:3a:1e:d2:fe:
c6:23:04:68:a8:92:1a:6f:3b:7a:24:0f:99:f8:06:51:66:a1:
50:39:6b:ad:6b:ca:ec:47:f7:72:b4:42:bb:45:c9:94:2c:c0:
01:6d:12:f1:a6:35:76:53:78:43:0c:65:d5:9d:af:ea:53:89:
c3:6b:af:33:f5:eb:4d:78:9c:b0:a2:cf:05:78:51:69:ca:70:
b9:a5:8b:59:fb:1e:4d:c4:ab:d0:70:5c:3c:0e:4b:92:6e:98:
1b:3c:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:14:03 2025 by rpki-client