Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEA0D07C8CDC11EEAA107B614AD9E6FC.roa
File: AEA0D07C8CDC11EEAA107B614AD9E6FC.roa (raw, json)
Hash identifier: hF7vaRWs+nD5KUH7AHXFDkmyLbfK87G4xSLcF3z28ik=
Subject key identifier: 9D:7D:52:F7:53:34:95:9B:1E:9C:DE:EF:02:B8:B6:2F:22:C5:2F:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEA0D07C8CDC11EEAA107B614AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:23:15 +0000
ROA not before: Mon 27 Nov 2023 04:23:11 +0000
ROA not after: Tue 26 Dec 2023 04:23:11 +0000
asID: 62240
IP address blocks: 154.196.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21729 (0x54e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:23:11 2023 GMT
Not After : Dec 26 04:23:11 2023 GMT
Subject: CN=656419b2-79e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:53:00:02:68:6e:02:13:58:08:be:19:03:
71:f5:24:77:6a:1f:70:47:2d:bc:0c:78:76:d7:78:
0f:74:22:cc:4f:e2:41:c3:8f:b7:a1:40:34:3a:70:
98:c2:cf:78:cc:be:47:9e:b8:bd:09:7e:09:97:03:
d0:f5:37:ac:4d:ab:ef:96:2f:42:38:1d:a2:bf:53:
ba:9e:d8:d2:3e:5d:27:25:68:c0:74:30:ec:39:9b:
84:57:b2:65:26:3d:12:be:17:51:26:71:7e:45:23:
09:0f:66:77:8c:72:ee:85:53:4c:6b:82:24:15:8d:
16:50:f9:df:7c:44:ef:4f:f1:be:c6:73:3a:6e:a7:
a7:3b:1f:8d:93:44:03:2e:e6:3b:b2:63:f3:07:92:
45:f7:6e:9d:64:31:75:76:48:60:f2:f7:2e:a1:7f:
ad:37:41:93:10:aa:7b:d7:14:ad:b7:f8:8a:dd:1b:
34:8c:2a:2d:90:c8:cc:72:4d:08:90:55:47:16:92:
43:22:96:c6:3a:4b:e9:42:72:09:12:9d:d0:30:e4:
6b:2f:9c:95:81:71:bc:2f:39:12:1a:67:50:56:25:
0f:48:50:10:68:41:1c:4a:53:89:c8:b0:59:a1:4d:
ce:04:3f:77:bc:02:dc:d1:11:a5:e6:6a:10:90:d4:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7D:52:F7:53:34:95:9B:1E:9C:DE:EF:02:B8:B6:2F:22:C5:2F:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEA0D07C8CDC11EEAA107B614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.65.0/24
Signature Algorithm: sha256WithRSAEncryption
be:07:5d:95:ac:69:9f:31:2b:fe:b8:65:04:3c:99:c4:c7:48:
11:a1:47:e4:2e:f0:df:15:0a:12:8d:55:34:9a:44:88:84:b8:
56:5a:40:41:72:5d:9e:31:e7:05:30:44:7c:dd:43:c7:40:17:
35:c6:97:02:29:1c:0f:6a:3d:4b:c6:30:7a:a7:96:18:37:5c:
c4:37:8e:85:3f:02:97:ee:f0:ee:c7:f2:75:dc:a7:1b:4a:20:
2b:be:38:d0:12:dd:89:53:90:3a:ed:6e:9c:42:cc:f8:35:fc:
f3:de:8a:f7:5b:eb:80:12:01:fc:87:b8:9e:ba:b1:25:c3:69:
91:2d:ff:fe:da:6c:7d:c5:04:33:de:94:90:53:6b:af:e2:3a:
fb:6f:0e:85:22:b1:36:15:14:09:65:cc:9c:5a:0c:6c:26:90:
fa:45:0c:06:44:5a:f3:98:24:f1:7a:fd:ab:ff:74:f6:43:ff:
76:6a:1b:0d:a4:3f:92:ee:88:4c:8d:e7:82:7e:56:f8:5c:2c:
e2:68:5a:c1:9d:d7:2f:37:74:53:1b:b8:37:25:ce:59:ec:7c:
00:56:f7:fa:59:bb:00:d5:f3:15:5e:b0:67:fd:cc:38:da:59:
69:b6:ff:8b:40:19:15:ac:c1:1a:1b:2d:d8:a1:eb:af:88:b3:
9b:d8:f3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:01:57 2025 by rpki-client