Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE2D7E3C8CE211EE88B20F754AD9E6FC.roa
File: AE2D7E3C8CE211EE88B20F754AD9E6FC.roa (raw, json)
Hash identifier: gf4yxX6QQgHifefTKea7PsyKdL3ngWXrvDJpCrz/oH4=
Subject key identifier: 15:AB:E0:B3:64:E2:B6:CF:40:A6:92:68:41:D0:33:60:C9:4A:BF:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5556
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE2D7E3C8CE211EE88B20F754AD9E6FC.roa
Signing time: Mon 27 Nov 2023 05:06:11 +0000
ROA not before: Mon 27 Nov 2023 05:06:07 +0000
ROA not after: Tue 26 Dec 2023 05:06:07 +0000
asID: 62240
IP address blocks: 154.195.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21846 (0x5556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 05:06:07 2023 GMT
Not After : Dec 26 05:06:07 2023 GMT
Subject: CN=656423c3-d718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:2c:82:d7:28:cc:4f:07:92:fb:63:f1:1f:
5d:5c:d2:90:34:47:76:2e:c7:d6:de:27:ca:b1:ee:
41:fe:cb:a8:25:cc:3d:73:ed:dd:58:e2:a0:bc:da:
af:2d:36:4b:bd:70:a8:69:df:c6:bf:4e:c5:86:37:
df:4d:82:2f:e8:e7:3b:82:10:8c:2a:6d:aa:10:5d:
9f:11:02:b4:6e:26:5e:c2:80:3d:76:7f:2f:44:fb:
7b:c6:35:54:7a:5b:36:4e:9f:1f:56:73:8d:5e:73:
3d:69:88:30:74:fb:55:03:96:80:e0:ed:64:c3:03:
98:c2:65:ea:33:dd:ee:91:63:e6:1c:4e:45:38:5f:
32:88:a9:19:c0:c4:eb:49:cd:c8:c9:5b:77:5c:73:
8e:3f:dc:22:bd:f7:70:88:16:16:e7:a5:bf:5b:97:
d2:e6:a5:08:ad:0b:0e:42:a1:46:37:df:07:cc:67:
55:0e:97:ef:3b:c2:18:95:45:c7:35:da:b1:30:90:
31:fa:60:a5:69:bb:45:1f:b3:68:e5:d6:21:86:00:
1a:c5:5f:f7:af:23:2e:1a:a8:d0:b3:c3:2c:eb:40:
94:07:9d:65:fb:fd:48:d3:f8:84:40:16:03:8a:0a:
83:3c:f9:70:a9:4f:27:bd:c9:67:bb:34:0b:00:f0:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:E0:B3:64:E2:B6:CF:40:A6:92:68:41:D0:33:60:C9:4A:BF:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE2D7E3C8CE211EE88B20F754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.182.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ac:61:22:a3:cf:b0:16:c0:c7:a1:b1:1e:65:df:c9:a5:03:
6f:1e:0e:6a:4c:94:33:f3:5a:53:82:c8:81:91:a9:e2:51:e0:
62:ec:33:6a:90:7e:95:0c:62:7a:85:53:97:c0:40:d9:c6:9c:
8e:82:ff:79:1e:07:c5:02:73:a3:79:86:7a:58:de:7b:9f:e8:
a6:1e:1f:37:a3:82:91:bd:4d:c8:91:b9:5e:db:09:e3:44:29:
7b:6b:28:21:2d:07:ea:aa:98:ef:89:b4:13:ee:b2:fa:cb:a0:
b2:75:cd:a6:a1:b9:5c:b9:b1:0e:92:d5:53:4d:6b:8d:81:3a:
d0:e7:e7:95:cb:40:d9:3f:a9:8e:4e:03:39:f1:01:b9:55:15:
6f:26:5d:b2:72:94:c7:ab:3f:45:53:7c:af:76:b0:0e:67:c9:
6a:94:ca:0a:57:e1:85:93:7e:ce:16:2f:00:b3:99:2f:09:a5:
2d:c7:41:c8:08:ba:78:83:86:b7:44:31:11:f7:cd:4b:e3:d6:
ea:84:da:41:76:e3:11:c8:0b:29:51:d0:35:72:c6:6a:ae:1a:
f6:4f:56:62:02:ec:68:d7:b3:8b:08:1f:fa:cc:c1:87:48:5a:
bd:e7:18:f5:47:14:cc:d1:10:84:33:b3:c3:66:c6:f5:6e:97:
0e:05:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:33:53 2025 by rpki-client