Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFE977D0F4EC11EF9B8F4978762E951A.roa
File: AFE977D0F4EC11EF9B8F4978762E951A.roa (raw, json)
Hash identifier: KPWjOJgKX/hSxuE3RR4OYd3p8Wom6EQJM65XXpfvr6U=
Subject key identifier: BD:34:4A:88:0C:A9:80:1A:7B:BD:A3:55:83:B3:47:36:8A:F2:42:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01672D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFE977D0F4EC11EF9B8F4978762E951A.roa
Signing time: Thu 27 Feb 2025 09:24:47 +0000
ROA not before: Thu 27 Feb 2025 09:24:40 +0000
ROA not after: Wed 26 Mar 2025 09:24:40 +0000
asID: 62240
IP address blocks: 154.196.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91949 (0x1672d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:24:40 2025 GMT
Not After : Mar 26 09:24:40 2025 GMT
Subject: CN=67c02f5f-07db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:1e:c9:9c:ad:53:3b:c7:b1:57:65:a9:d3:
bc:7b:e3:a1:0d:4b:1e:11:41:b3:24:4e:cc:8a:5b:
a9:d1:1e:d8:74:a8:31:56:44:33:91:93:d9:1f:a9:
77:8d:85:2f:11:58:87:23:96:5a:55:6b:2f:4f:e6:
7b:72:a9:13:50:f4:f9:37:88:88:d6:18:f0:b1:b6:
50:89:11:54:0f:fc:07:b9:67:fa:4c:2a:25:c2:58:
e1:89:3a:cc:6a:fc:42:b9:24:dd:73:19:af:8a:de:
5a:f0:11:4b:40:c9:c6:98:d0:eb:5a:dc:83:e7:cb:
24:5b:ee:41:c5:3f:8f:75:fe:20:c3:03:08:2c:04:
ff:e8:95:a6:d3:e0:22:d4:b5:e8:de:0d:3d:54:1c:
76:e4:f3:e7:c5:ce:44:6a:b1:6c:72:96:03:4b:f9:
ed:ad:46:dc:86:50:2b:7c:67:69:cc:f8:ba:e4:b2:
a8:6f:1f:c8:68:b0:5a:3a:30:bd:9e:bd:45:ae:66:
82:66:bd:3f:49:f4:fb:4a:a1:94:27:ff:62:33:43:
e5:e2:71:21:bd:70:48:a4:d4:3b:db:40:5e:1d:fa:
6b:4d:8f:7e:dc:11:ae:89:48:eb:cd:1b:0e:68:5b:
ee:ee:88:e8:40:32:28:fe:b8:41:f3:39:32:da:bc:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:4A:88:0C:A9:80:1A:7B:BD:A3:55:83:B3:47:36:8A:F2:42:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFE977D0F4EC11EF9B8F4978762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.68.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:d5:67:02:48:80:52:bc:21:76:58:4c:1d:a2:83:fa:49:d1:
86:95:34:3a:4a:05:ab:1e:85:5a:f6:f1:1a:a7:88:1c:ae:fa:
f3:04:11:15:7b:d6:46:9f:08:16:d8:62:f7:4c:9d:cf:13:80:
1d:9a:7d:b7:21:0c:38:cd:d8:c4:32:4d:9f:dd:3e:62:43:af:
59:ac:54:d8:ce:7f:5c:5f:1c:b9:06:4d:51:ee:f2:3c:8e:24:
9f:db:0a:de:1b:87:3f:ee:38:00:05:42:67:93:28:70:b3:92:
57:4f:26:e1:f0:7f:eb:69:fc:fe:c2:c8:f5:4f:d5:1c:14:0f:
8c:40:a9:8e:1a:21:ed:3a:ed:d2:9f:10:2a:57:cd:69:85:80:
67:9f:dc:b7:9b:7e:a9:c9:36:32:8e:8a:85:8c:8d:23:bd:b1:
b2:07:8a:16:f6:e6:8b:fd:8f:c3:b4:84:df:19:c6:2d:6d:be:
45:8c:3c:c7:18:63:5b:20:4a:28:68:6a:61:12:7a:bc:ea:b1:
58:9b:39:25:75:15:4a:e9:f5:d1:a6:96:66:d1:a6:7b:ad:b9:
d8:20:dc:77:25:78:f5:a7:30:3b:75:74:b2:ef:f1:db:5e:b6:
7b:f7:b9:c1:96:fc:15:81:26:04:9a:61:ab:f9:20:21:10:79:
0e:62:6d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:59:28 2025 by rpki-client