Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B88AF240F51B11EF9C6078B8762E951A.roa
File: B88AF240F51B11EF9C6078B8762E951A.roa (raw, json)
Hash identifier: C0KkR+AcWWS3EkTlenvoVp3BiAEGzEYZliioOs9xSOQ=
Subject key identifier: 80:30:3B:FA:08:0A:CA:B0:38:8B:0A:1D:7E:97:68:1D:FA:7A:3C:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0168E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B88AF240F51B11EF9C6078B8762E951A.roa
Signing time: Thu 27 Feb 2025 15:01:28 +0000
ROA not before: Thu 27 Feb 2025 15:01:24 +0000
ROA not after: Wed 26 Mar 2025 15:01:24 +0000
asID: 62240
IP address blocks: 154.196.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92384 (0x168e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:01:24 2025 GMT
Not After : Mar 26 15:01:24 2025 GMT
Subject: CN=67c07e48-8e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:fc:d6:a8:5a:ac:27:62:10:87:2c:08:b0:
cb:83:bd:13:79:10:a3:98:68:2f:ab:9c:06:3f:9d:
18:ce:5a:b8:35:38:34:dd:d9:c7:fe:32:2a:e2:53:
9c:66:7e:ad:2d:12:e4:4c:4c:9d:8d:25:ef:0c:5b:
d5:d0:a2:dd:62:7f:f8:61:c5:54:78:e5:d5:08:80:
c7:37:cc:d2:70:9e:06:99:b4:b1:52:7d:94:1e:74:
a8:5d:15:3a:dc:20:2e:ed:62:f0:f6:0d:32:8a:a6:
8f:c8:85:3c:9d:66:87:ff:89:07:8e:51:1a:9e:61:
1a:b0:7d:58:9b:33:fd:ae:af:19:38:32:50:68:6b:
d8:ac:24:99:78:e5:ab:5e:75:ad:8a:00:43:a2:bd:
bb:7b:d1:d7:ac:a1:ba:af:e9:69:68:0b:9d:a3:c7:
66:a8:62:29:8b:b0:47:d1:09:a2:31:e3:39:94:b4:
8c:5e:88:c8:90:02:49:b7:d3:fd:d4:46:25:d7:b9:
70:31:4e:bc:b1:2a:fe:5d:18:56:d4:04:f0:24:f9:
47:c9:22:64:e5:30:97:38:47:a2:00:33:71:f4:9e:
87:b5:2e:a9:96:fa:ab:8f:cb:10:41:3a:ae:98:8e:
e2:ea:f1:5f:86:c9:d1:a7:92:f8:70:1f:5d:9b:55:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:30:3B:FA:08:0A:CA:B0:38:8B:0A:1D:7E:97:68:1D:FA:7A:3C:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B88AF240F51B11EF9C6078B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.57.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e7:4c:80:9d:e7:12:e3:20:d9:12:a1:04:c3:69:15:66:a2:
e2:16:26:d6:cd:3c:4d:af:07:4e:fc:21:4f:06:98:97:25:48:
fb:f3:0b:b4:02:09:03:3f:20:22:75:c9:2c:ab:7e:43:9f:39:
31:d9:b4:65:0a:8c:0a:b9:8a:39:4d:a2:12:68:d3:92:14:3d:
13:cc:73:54:db:ef:a1:72:fd:ff:e5:d9:d4:7e:99:9f:b7:6e:
d6:5c:39:a3:a1:ce:1b:60:23:ff:d2:e2:87:0f:20:5e:ae:23:
fa:01:d0:f1:d4:70:2e:01:4d:81:8c:5a:bd:55:8d:aa:92:7e:
0f:24:ea:b5:06:19:72:69:6d:74:d1:af:b0:b0:57:40:e3:92:
8a:6c:90:ad:29:ae:94:ee:5a:a6:5a:f4:ce:4a:a2:f3:60:0a:
0f:5d:e6:15:57:29:5b:1c:22:5a:03:d7:18:b6:eb:e8:05:23:
88:02:aa:65:be:67:4b:3c:b3:99:8b:e1:68:ac:54:00:45:2d:
62:68:2a:30:d3:21:ee:c0:b8:fc:e7:a0:62:61:ef:b3:b9:da:
52:7a:6a:7a:43:5f:ce:23:f0:83:d3:19:18:4a:6f:ab:c2:0a:
85:a5:dc:27:1e:4c:85:c5:0b:fc:d6:ec:04:86:6f:87:07:b1:
cb:db:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:23:14 2025 by rpki-client