Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3056EEC8CDC11EE99ADE8614AD9E6FC.roa
File: C3056EEC8CDC11EE99ADE8614AD9E6FC.roa (raw, json)
Hash identifier: Y4+TtpmDrtUxUJFh9kNgCOfxz+LXGpA8mYSKmcsXjkc=
Subject key identifier: FA:75:69:94:0B:63:6F:FB:BB:C5:8D:69:1C:35:6D:99:18:8A:68:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3056EEC8CDC11EE99ADE8614AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:23:49 +0000
ROA not before: Mon 27 Nov 2023 04:23:45 +0000
ROA not after: Tue 26 Dec 2023 04:23:45 +0000
asID: 62240
IP address blocks: 154.196.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21731 (0x54e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:23:45 2023 GMT
Not After : Dec 26 04:23:45 2023 GMT
Subject: CN=656419d5-2b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:6d:e8:39:e3:a7:bc:1b:4f:ee:98:fd:3e:
41:77:53:00:7d:27:70:46:79:e9:05:38:ca:d6:5b:
79:96:36:c8:41:d8:a8:ac:3c:d4:78:47:e0:32:d4:
e9:e0:26:5a:02:36:04:22:17:b8:9c:57:fa:28:4c:
87:b8:c5:a1:81:e9:37:2e:0e:17:5b:f2:79:47:79:
6b:b5:e1:81:ca:d6:dc:13:6e:64:75:3e:73:29:d0:
a7:2e:f6:40:69:46:d6:1a:15:80:0b:6f:eb:c0:7e:
dd:bc:89:cb:5e:ac:5e:5f:8d:30:dd:03:86:44:1b:
ff:70:1f:76:a7:83:2d:a1:98:fa:0d:37:41:7e:0f:
07:da:ea:d0:45:ef:24:48:43:c0:08:2e:d9:90:bc:
2c:2b:28:84:6a:31:04:36:10:f3:3f:5f:e4:a5:66:
5c:7d:71:05:d3:77:e9:36:62:6f:1c:79:e8:12:e5:
77:60:7d:9d:48:80:54:4f:89:d1:7e:de:e3:aa:08:
f2:ac:23:ba:d2:57:4a:3e:a6:58:ab:58:dc:50:cd:
ab:e8:e4:45:20:fc:3c:c2:8a:f3:b1:8e:fc:73:bd:
12:3a:16:cf:c4:c2:86:5a:04:36:c8:16:e5:5f:94:
06:4f:fe:40:71:d4:56:30:f6:e1:41:53:41:b6:c0:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:75:69:94:0B:63:6F:FB:BB:C5:8D:69:1C:35:6D:99:18:8A:68:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3056EEC8CDC11EE99ADE8614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.80.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:47:14:6c:f5:83:ad:0a:88:ea:09:0b:7c:79:ac:43:68:80:
aa:10:10:b3:36:37:5c:aa:4c:b3:35:29:84:08:0b:bf:78:70:
0d:bf:08:da:6a:54:8d:df:36:20:2e:f4:4c:ab:37:23:c6:c5:
5e:06:49:15:19:84:ee:66:40:5a:d5:cf:83:3a:0a:8f:bb:31:
bb:30:fb:0f:fc:71:98:82:92:8d:73:01:ac:08:01:9b:26:af:
52:ff:5f:78:d6:a6:e2:3b:87:4f:48:a4:2c:d5:5a:89:96:e7:
28:bb:a4:af:fb:e5:d1:d6:18:d1:06:c5:5c:7f:10:6b:dd:51:
b7:15:e6:bf:cf:17:4b:80:6a:62:f6:58:f5:a3:47:7e:4f:e8:
c5:70:26:ca:4c:e6:ae:80:46:13:31:6d:b3:14:8a:7a:4e:fd:
5d:be:aa:be:00:1c:7b:57:0f:08:52:7e:21:25:69:d4:65:b2:
e2:6a:4b:f8:aa:fb:0a:9c:ba:53:83:bc:f5:e4:cc:7a:8b:73:
d1:77:d3:6a:d1:4d:ab:db:3b:2f:14:17:5a:d0:51:61:a6:ad:
af:06:05:41:bc:b7:a5:da:6e:e3:d5:5b:cd:36:40:9f:79:24:
a1:70:6a:70:76:31:f4:17:f4:24:7c:b6:2a:66:d2:96:ba:3e:
ab:44:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:12:30 2025 by rpki-client