Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7AAE8488A8E11EEB49E91854AD9E6FC.roa
File: A7AAE8488A8E11EEB49E91854AD9E6FC.roa (raw, json)
Hash identifier: z/nDxdzSIgtb0Gx0kMnMKzQoD9CAaVgvQ9enRbM8rgg=
Subject key identifier: 97:47:3C:D3:33:53:48:50:B1:4D:A0:51:9D:D3:9C:85:90:4D:13:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5378
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7AAE8488A8E11EEB49E91854AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:59:40 +0000
ROA not before: Fri 24 Nov 2023 05:59:37 +0000
ROA not after: Tue 26 Dec 2023 05:59:37 +0000
asID: 62240
IP address blocks: 154.196.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21368 (0x5378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:59:37 2023 GMT
Not After : Dec 26 05:59:37 2023 GMT
Subject: CN=65603bcc-4170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:0c:a6:6f:51:ca:53:03:f1:93:78:a1:07:
4a:be:09:d1:3a:a5:cb:9c:ca:51:ae:b0:b9:1e:05:
8f:b9:03:0b:9d:e3:99:e7:fa:a6:56:64:15:57:2d:
4a:46:7c:9b:53:55:7b:46:95:ae:2a:d0:f6:3a:04:
c9:ff:11:7f:a7:7c:90:1c:18:89:5f:01:81:b4:4f:
c5:c3:b9:fb:fe:80:c3:51:82:73:8d:29:1e:35:db:
86:fd:33:bb:01:ef:da:dd:8f:ec:c2:d8:e1:9d:f3:
cb:48:8d:76:93:4d:6f:ec:ef:65:4f:6a:2b:9e:9b:
90:cc:f7:ae:e0:46:dd:c1:79:61:c8:19:d4:66:37:
45:98:42:e2:55:4c:7a:a0:99:ba:7e:4f:85:7e:81:
a2:d1:da:49:0d:6d:b6:7b:4b:a0:78:17:3d:cf:e6:
85:c5:c2:88:4a:fc:72:0b:66:b3:03:82:34:f4:f3:
8d:c5:2e:f7:fe:7c:4f:b8:f4:ef:8d:9b:b1:b6:75:
18:c6:cc:5c:dc:8d:cc:73:eb:67:86:4b:16:88:03:
ff:5f:32:19:06:06:79:69:f0:a3:75:94:3d:26:97:
0a:e8:b9:0a:9f:93:bc:9e:4a:5b:12:2b:c4:c9:db:
02:f7:85:63:04:49:42:98:92:9f:53:03:bf:75:50:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:47:3C:D3:33:53:48:50:B1:4D:A0:51:9D:D3:9C:85:90:4D:13:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7AAE8488A8E11EEB49E91854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.34.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4d:28:b4:9d:ba:1c:7b:7e:f1:43:45:9f:ad:28:ef:b6:4f:
89:9b:23:b1:de:af:1a:c2:0e:ae:7e:78:26:fb:b9:08:45:a8:
12:26:fa:40:ec:ab:54:c1:d6:c8:6d:c1:04:e5:2f:df:7a:1c:
92:a3:e4:5c:e8:23:24:4f:59:de:9b:ba:56:fa:aa:91:c3:0a:
39:e2:f3:50:42:63:40:70:d8:32:fa:24:5c:7b:a1:60:1a:04:
f5:77:53:1a:0c:2a:fc:2a:f2:f0:86:bb:d2:19:ef:46:c9:c3:
ec:a1:bd:bb:bf:1f:f4:9a:26:20:e9:b3:a5:3b:95:a7:79:c0:
32:22:02:d6:dc:23:f6:69:84:f9:87:da:f3:44:d0:c0:6a:a9:
8d:8f:7a:b6:61:00:8c:42:13:88:0b:6d:20:21:a8:e6:97:5d:
49:3d:8a:39:35:de:c5:5a:d9:e6:d1:bb:cb:96:22:62:8b:3a:
50:00:f7:29:91:72:2f:07:9f:72:65:ad:33:37:ba:89:61:8c:
c1:11:aa:16:bd:25:1a:85:b3:dd:f0:b1:ca:08:24:00:fd:e3:
3d:01:95:c9:fc:df:40:6b:29:3a:c1:1e:6d:cb:df:01:d6:e4:
57:0c:35:a1:34:f2:0d:e8:a5:5a:2a:d7:60:c0:27:40:09:2c:
c1:aa:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:38:59 2025 by rpki-client