Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D96B26EE8A9911EE97D9BD2B4AD9E6FC.roa
File: D96B26EE8A9911EE97D9BD2B4AD9E6FC.roa (raw, json)
Hash identifier: VxuXLQkldTXvx2BEz8KFQvTb9s5xeXy0vxRakTDDzg8=
Subject key identifier: D6:1E:9D:D0:4A:05:EB:49:52:3D:EC:82:61:E2:C7:61:13:78:08:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5454
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D96B26EE8A9911EE97D9BD2B4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:19:48 +0000
ROA not before: Fri 24 Nov 2023 07:19:44 +0000
ROA not after: Tue 26 Dec 2023 07:19:44 +0000
asID: 62240
IP address blocks: 154.196.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21588 (0x5454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:19:44 2023 GMT
Not After : Dec 26 07:19:44 2023 GMT
Subject: CN=65604e94-0874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:e7:d3:f5:ed:6b:17:67:d2:fa:8a:1e:e9:
2c:69:0f:08:9d:bf:fe:8f:72:13:9e:6a:86:4c:bc:
2c:79:ca:a8:d7:88:73:85:43:43:29:56:f7:16:12:
8d:ed:3a:b7:b2:4b:6d:76:26:87:4d:63:f2:d5:e7:
a5:3f:ad:fc:d4:88:d4:40:ab:9e:88:4a:71:bd:83:
44:4e:08:e4:e1:b2:57:b0:46:bf:bf:35:ae:28:99:
28:43:15:e6:28:b2:02:af:71:06:e5:b4:32:13:49:
44:bd:49:78:78:d0:1a:63:db:bd:3c:b7:b3:5c:ed:
45:29:75:00:2b:bf:78:32:15:55:0d:2a:c3:43:4a:
17:33:05:f2:78:db:8c:de:cc:4d:53:81:20:50:a8:
d6:b7:ac:3d:69:d8:e4:ea:0f:f0:be:c7:6d:fd:74:
5a:01:6e:f0:ef:50:7d:4d:05:54:59:92:7c:db:e1:
1a:fc:bb:43:20:21:61:ac:b7:70:43:65:a0:f1:9e:
ca:c4:30:d3:b9:10:11:eb:29:88:44:3e:9e:07:ad:
ca:4a:d6:de:24:da:a9:78:d4:55:aa:df:4d:ba:e5:
3d:db:5a:de:fe:db:b8:c2:06:4d:01:7c:2f:69:1c:
12:41:d8:0e:35:45:b5:62:fa:04:2e:e8:7e:af:b6:
77:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1E:9D:D0:4A:05:EB:49:52:3D:EC:82:61:E2:C7:61:13:78:08:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D96B26EE8A9911EE97D9BD2B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.20.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a1:17:0e:1b:55:95:1b:49:c9:11:50:9d:c2:86:3b:7f:02:
36:56:63:3b:d3:47:93:ba:6a:8f:9f:36:3f:5c:cf:59:18:85:
f4:de:ae:28:3d:38:0b:a8:9c:c6:07:8f:ea:99:b1:cd:5b:60:
9a:e4:a5:0f:6c:e2:92:8d:96:42:6a:96:d8:ef:20:2a:59:18:
36:eb:7d:6d:a6:75:94:21:66:c9:41:55:59:fb:f2:87:f6:16:
e4:3c:76:7a:59:7d:af:55:24:d4:61:a5:92:3d:53:f2:f4:3c:
75:2c:a8:10:33:81:de:9d:12:18:48:d9:8c:5f:ce:2f:1c:5e:
f1:a1:9f:9a:29:b1:e7:1a:c5:80:bd:7c:29:99:d6:b9:77:32:
a5:77:39:41:56:55:dd:cd:5f:27:6b:ec:37:a4:de:15:8a:03:
50:b0:fd:13:e3:e8:d7:d5:dd:f0:2b:73:f6:1c:d3:bf:53:a4:
6d:a4:bc:a8:af:98:73:1e:30:d9:d7:4c:11:cf:fb:f7:4c:6a:
c8:02:b8:6c:b9:37:4d:64:6a:ad:45:d3:8f:d6:12:b2:a5:96:
8d:48:20:4f:43:27:bd:1d:00:17:d7:45:d7:0f:68:5c:94:b7:
20:9e:af:4c:35:0c:fd:eb:aa:24:35:82:05:6c:e6:e7:e5:c7:
42:a6:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:56:57 2025 by rpki-client