Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C45EF270F51F11EFAD2E4454762E951A.roa
File: C45EF270F51F11EFAD2E4454762E951A.roa (raw, json)
Hash identifier: 9o7WXEkEHU9kwCduyfECWBzxO9tU5j+VCACHeEsoB/o=
Subject key identifier: 41:E4:D7:04:BD:E5:32:52:54:C9:2F:2A:38:31:A1:8D:AA:84:49:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01690A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C45EF270F51F11EFAD2E4454762E951A.roa
Signing time: Thu 27 Feb 2025 15:30:26 +0000
ROA not before: Thu 27 Feb 2025 15:30:22 +0000
ROA not after: Wed 26 Mar 2025 15:30:22 +0000
asID: 62240
IP address blocks: 154.196.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92426 (0x1690a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:30:22 2025 GMT
Not After : Mar 26 15:30:22 2025 GMT
Subject: CN=67c08512-7cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:b0:fa:8f:83:ce:4c:7e:72:80:2e:16:bc:
0d:db:a3:aa:bf:ce:1a:b3:cf:bd:15:87:d8:80:bd:
2d:6e:50:cf:2f:79:95:b8:29:bc:af:22:df:18:4c:
22:7b:3a:d4:7f:ec:d5:3f:51:e8:7c:2e:eb:5d:c1:
2f:d2:15:a2:55:3f:05:0d:15:81:39:e5:f0:23:4a:
3b:30:18:9e:f0:03:fe:24:cb:ef:fc:71:44:2a:ce:
e0:7a:ec:1c:e3:55:26:e2:e5:29:df:df:9b:51:a5:
40:0a:30:e7:5d:78:df:cc:a2:b0:70:8c:da:20:09:
7e:69:b9:8b:7a:3e:76:e1:fb:a7:33:cd:33:7b:40:
39:e4:95:aa:6c:a2:61:bd:b8:fb:64:db:1e:e8:12:
3c:ff:c2:86:8f:fe:ef:99:fe:2e:bd:ee:47:fe:38:
b5:f6:29:ae:b8:3b:a0:84:10:9b:06:4a:16:ba:cc:
a8:07:6e:24:8b:c3:76:7b:2b:2f:bc:30:9f:fe:cf:
16:b4:da:da:75:50:98:d7:9a:b4:74:1c:a6:56:01:
95:6f:49:b5:97:57:a3:e5:36:54:d2:50:e2:91:1a:
02:a0:82:16:59:08:c6:fa:8f:72:0e:37:4b:d8:d7:
82:8a:42:7d:fc:5b:ca:c9:96:3c:f0:a3:75:c9:a1:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:D7:04:BD:E5:32:52:54:C9:2F:2A:38:31:A1:8D:AA:84:49:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C45EF270F51F11EFAD2E4454762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:3a:80:f7:07:22:61:08:5f:30:99:fa:05:d0:3d:76:6b:f0:
3e:4b:c7:c5:b0:94:f0:e9:d9:eb:9d:e9:2f:0a:de:70:35:17:
30:21:90:d3:a8:39:f0:97:e2:1a:45:48:f5:98:a1:c8:d2:ae:
96:9d:36:6e:9b:e9:5c:e7:3a:a2:63:75:1e:55:49:16:fb:76:
68:b6:76:52:a3:b0:4b:ef:af:66:1d:7e:c2:1b:73:f8:be:cc:
fb:32:1f:ca:c7:33:6e:0f:5b:54:9f:c4:ea:b0:5f:be:1d:df:
13:89:cc:a6:5b:90:1f:bd:f4:d0:0e:97:f4:17:a1:26:cb:32:
f7:f6:eb:1e:73:06:d4:5f:49:d2:49:77:34:79:64:65:4a:97:
f8:e3:e7:97:32:d3:77:70:ee:48:9a:f5:6c:5c:9f:65:26:4a:
0e:c5:eb:15:0e:72:84:5d:78:08:a9:9b:28:3e:d2:fe:9f:e7:
73:36:c4:2b:b3:a9:b8:c7:48:46:77:93:22:77:b0:6b:5d:34:
45:4a:ed:9b:31:cc:3c:f2:3f:dc:15:30:24:14:b7:86:38:5d:
a8:a5:ce:7c:90:76:9f:86:f3:fa:ce:a4:e0:50:4e:67:eb:34:
ea:4d:fe:73:f0:8d:cb:83:56:c5:fe:5f:5f:78:df:73:5e:9e:
8a:2f:66:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:44:26 2025 by rpki-client