Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A53266188A7F11EEAC8254534AD9E6FC.roa
File: A53266188A7F11EEAC8254534AD9E6FC.roa (raw, json)
Hash identifier: XCporKlBXpl2SsEvxviU3cDSzl0gq4ntdoilp0ZbfoY=
Subject key identifier: DA:A4:AF:54:15:AC:F0:C3:62:30:D9:92:8F:46:55:CE:7F:B3:C5:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A53266188A7F11EEAC8254534AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:12:13 +0000
ROA not before: Fri 24 Nov 2023 04:12:10 +0000
ROA not after: Tue 26 Dec 2023 04:12:10 +0000
asID: 62240
IP address blocks: 154.196.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21170 (0x52b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:12:10 2023 GMT
Not After : Dec 26 04:12:10 2023 GMT
Subject: CN=6560229d-857e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:84:d1:3a:f9:fa:d1:63:0c:cb:32:70:20:
16:13:f7:90:21:32:a5:56:4d:04:69:f3:86:63:c0:
9b:b7:bd:2e:d4:f5:ae:0a:70:a0:84:b5:b6:01:7f:
02:e4:47:a6:ff:d8:65:53:06:76:19:e5:67:f5:ea:
96:e0:4c:fc:44:f2:5b:45:e5:da:9b:e7:94:d4:10:
7b:34:83:f8:7f:4c:12:80:0b:ca:8f:45:f0:9d:22:
51:9a:58:a2:2c:68:21:06:f5:85:f8:9b:b6:33:80:
dd:c2:d0:4d:43:a2:fb:c5:c2:f0:ff:05:b2:b2:27:
63:f7:be:43:b3:1b:b1:88:23:8d:e0:17:72:25:0b:
61:f7:95:9d:81:54:60:6f:c5:22:8a:a6:1d:04:68:
1d:a4:1d:36:3c:e8:d9:ca:b1:42:e4:4d:97:bc:b4:
80:32:9f:13:09:59:69:16:72:b3:23:f7:e3:86:b5:
d4:31:65:3e:62:9c:8c:c9:d1:a6:20:2e:42:43:d9:
a8:c4:7f:e8:84:bc:86:ca:0d:58:e8:95:25:11:9e:
b6:3f:e3:ba:f7:b6:74:d2:6d:5b:8a:ec:15:e9:c6:
79:7b:6d:37:c9:f2:da:ff:e0:30:85:e0:60:15:60:
5d:a4:53:4f:95:f8:2c:8a:cc:fb:1e:0b:da:de:c2:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A4:AF:54:15:AC:F0:C3:62:30:D9:92:8F:46:55:CE:7F:B3:C5:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A53266188A7F11EEAC8254534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.43.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:84:46:33:84:24:48:7f:e6:fd:22:80:0e:48:d8:17:fb:a2:
66:5c:2d:c9:6d:00:b4:c9:50:03:ec:c0:ef:fd:b9:42:af:7d:
2b:cd:de:73:5c:8d:5f:07:1d:a8:6a:58:ec:f8:75:4e:94:e6:
34:2b:b1:22:f9:9e:1e:87:b2:9f:cb:d9:c4:3f:5e:6f:d7:99:
2a:69:83:c7:5a:35:7d:05:a7:ca:75:69:2d:37:89:22:03:8c:
ab:e8:b7:2e:63:d9:ca:eb:e0:f4:e3:5e:19:7c:d3:b7:2d:5f:
25:42:f9:1a:e8:62:d0:10:0a:c8:c4:d2:5c:7a:16:fa:9d:cb:
19:92:fa:8e:50:3e:48:7d:69:09:d0:11:8b:2e:5f:d8:7b:ff:
ad:1d:20:26:c4:bf:ad:2f:9f:4a:c5:87:a6:be:b8:38:b7:39:
ec:cc:56:b0:b7:94:8d:31:5f:0d:20:e6:42:4b:78:74:7e:43:
94:08:43:ab:1d:bb:12:e4:63:c4:d9:db:b9:69:7a:10:97:78:
c2:ea:58:7d:6b:4c:00:44:9f:6f:c6:7b:5c:c2:74:93:77:ac:
b8:c2:31:a7:8e:81:4e:32:f7:d8:c1:de:d2:24:c5:ac:e4:46:
e0:80:e4:b7:f0:23:f4:f4:da:83:3a:84:a9:6a:0f:32:04:90:
5e:4c:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:26:15 2025 by rpki-client