Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50B582AF53511EFBDBAD169762E951A.roa
File: B50B582AF53511EFBDBAD169762E951A.roa (raw, json)
Hash identifier: WFTlbrVpRDrZWpHMqmVJBZKQ5yNfrfH7KdOwLAWViAc=
Subject key identifier: 43:47:55:4E:30:00:7D:1E:84:F0:AB:12:73:4C:C6:83:B6:07:88:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016970
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50B582AF53511EFBDBAD169762E951A.roa
Signing time: Thu 27 Feb 2025 18:07:29 +0000
ROA not before: Thu 27 Feb 2025 18:07:25 +0000
ROA not after: Wed 26 Mar 2025 18:07:25 +0000
asID: 62240
IP address blocks: 154.196.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92528 (0x16970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 18:07:25 2025 GMT
Not After : Mar 26 18:07:25 2025 GMT
Subject: CN=67c0a9e1-5514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:e0:c8:1d:6e:37:ea:22:da:60:f0:3f:c3:
7d:13:bb:96:10:23:f5:94:68:c7:0c:21:ac:57:73:
95:9a:6c:d8:00:cb:3e:cf:78:db:22:ee:38:f3:0b:
4e:de:04:08:c9:a0:c5:a1:62:79:01:cf:77:f6:25:
5d:59:f2:57:9a:3f:9a:78:61:da:29:d3:63:19:3c:
e4:c4:66:9b:92:24:fe:e0:11:2e:9b:22:a1:4f:bb:
d3:6b:70:33:86:b2:fe:f0:0b:48:56:ad:71:37:b6:
f3:7e:e9:de:dc:90:6c:7d:aa:56:34:29:4e:55:d7:
fe:2b:ca:26:29:44:c6:03:40:eb:24:58:6e:c6:57:
c7:d1:32:47:de:b8:5b:65:4c:56:33:12:a7:5b:4b:
d4:c0:b4:4d:04:68:fe:66:f7:0d:12:fa:10:a7:a8:
2d:21:07:36:98:fa:e3:8d:6d:85:fe:5d:f6:23:c3:
a4:f1:7b:c2:ca:b4:94:2e:62:4e:5d:a0:dc:72:9d:
76:2d:13:ed:10:46:b9:e8:0d:08:6f:2c:5c:c2:5a:
ec:eb:85:b8:c6:74:05:d9:0f:22:bf:27:4d:bb:30:
66:55:59:40:ec:8d:13:0e:d0:43:28:e7:a0:11:c0:
8d:7c:90:f4:ab:31:e0:a5:54:c8:45:06:b3:83:29:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:55:4E:30:00:7D:1E:84:F0:AB:12:73:4C:C6:83:B6:07:88:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50B582AF53511EFBDBAD169762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8a:5b:ef:f3:d2:cf:9b:cf:fa:ff:0f:42:67:06:5e:7b:19:
6d:8c:3b:c6:9f:a6:26:9c:fc:93:5f:b5:4f:50:f2:90:8e:4c:
58:b1:af:86:c3:89:8d:f2:70:f5:96:85:0f:f8:e0:59:a1:4c:
bf:ee:48:94:0d:7a:c6:9b:66:6f:df:28:12:1f:3b:4e:a5:3d:
79:c7:38:8e:c4:dd:df:74:1e:81:9d:c6:4e:6b:ed:05:5b:36:
28:50:53:fc:39:5b:c3:f2:d0:b5:e7:5d:e8:6b:bc:0e:34:ae:
8f:b7:b8:3a:69:d2:b6:6d:67:2b:82:dd:a5:78:88:32:ef:b9:
d0:67:42:51:c8:23:33:0d:b6:e6:9f:56:8c:91:e0:7e:42:dd:
e3:7c:dd:02:54:55:b1:3c:2a:96:0b:dd:1b:76:94:74:4e:b9:
e5:dc:e9:c1:77:19:fa:ea:54:f6:81:2e:39:b7:2d:51:b3:63:
28:5d:19:44:69:04:ac:6e:72:47:35:65:2c:41:d9:0f:1d:77:
d8:54:de:8e:e0:b0:16:b1:55:fe:06:d8:c3:e3:ee:1b:3b:81:
91:9b:40:b8:f1:a1:bd:0d:71:bf:97:66:ae:61:27:c2:ab:23:
b6:3d:64:59:b8:b1:1a:23:82:12:54:6d:e6:a6:1f:d5:b2:a3:
a3:c3:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:31:55 2025 by rpki-client