Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB49B9F2F62311EFA885B347762E951A.roa
File: DB49B9F2F62311EFA885B347762E951A.roa (raw, json)
Hash identifier: Xomuw/uawwDqo2YbJAh3shZJU0/T3kaCVm/DFIhulRY=
Subject key identifier: BC:9C:D8:AE:85:5B:EE:01:9D:6A:95:F7:E5:98:47:35:8C:30:62:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB49B9F2F62311EFA885B347762E951A.roa
Signing time: Fri 28 Feb 2025 22:32:13 +0000
ROA not before: Fri 28 Feb 2025 22:32:10 +0000
ROA not after: Wed 26 Mar 2025 22:32:10 +0000
asID: 62240
IP address blocks: 154.196.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93331 (0x16c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:32:10 2025 GMT
Not After : Mar 26 22:32:10 2025 GMT
Subject: CN=67c2396d-a2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:dd:63:e5:ad:e2:13:0d:66:30:ec:c7:5e:
93:61:50:94:1c:b7:5c:3c:a7:bf:f1:0a:36:bd:13:
cb:5f:cf:2f:71:bb:95:1e:ff:8f:e7:82:03:3b:39:
77:19:08:9d:bd:bd:22:29:dc:02:ae:e9:35:d6:3c:
7b:fe:12:59:0c:81:8c:b5:d1:05:61:dc:4e:34:dc:
9b:46:12:83:cf:c4:4d:ce:f3:28:e9:6d:b5:77:5b:
5c:cf:e2:1e:37:db:2e:ef:ff:3e:3e:3e:69:c5:95:
29:80:ba:a3:81:a7:99:4e:c7:1b:e3:20:8a:6d:2e:
0b:36:4f:ab:0a:d4:36:ac:73:7c:f9:c5:74:e4:48:
a1:4f:29:42:f6:32:35:c1:60:19:7e:47:f8:d4:68:
d0:cf:7d:96:54:ee:20:13:97:0a:ea:8c:4d:46:f0:
67:e7:4c:6d:96:4b:83:ea:c6:10:b6:1e:13:b1:2e:
58:ef:42:0a:18:bb:b7:a9:15:47:2b:37:54:9a:c1:
6e:b5:d4:5e:85:3e:c6:6e:9b:67:cd:7b:89:12:e8:
4d:3f:4e:eb:4f:31:e1:92:42:11:b1:e0:fe:e3:33:
54:80:34:d2:e2:12:d5:17:25:9c:98:d3:6a:c5:5a:
77:89:20:46:90:6d:08:fe:61:cb:7a:26:02:d4:22:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9C:D8:AE:85:5B:EE:01:9D:6A:95:F7:E5:98:47:35:8C:30:62:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB49B9F2F62311EFA885B347762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.88.0/24
Signature Algorithm: sha256WithRSAEncryption
68:28:53:fd:07:9a:62:93:ac:50:d5:33:16:42:7f:9a:83:32:
a8:c8:83:12:c2:82:d7:8d:df:4f:3f:20:1b:c0:c0:6c:08:fb:
78:9d:fa:33:04:e3:3a:10:35:0d:2e:14:08:e8:50:42:56:e0:
a7:53:fd:56:d2:b3:1b:7d:b2:2b:dc:e3:d6:68:24:63:3c:ae:
a6:4c:70:ac:57:1e:cd:ca:08:71:b9:5e:cb:cf:e3:95:56:6a:
80:54:65:88:14:13:a2:63:67:f1:50:ed:50:49:c2:5e:8d:1b:
51:c7:2a:6d:6b:d4:96:ed:74:63:b3:97:58:e3:bb:72:2c:2a:
5c:3b:c6:d4:72:a5:e3:92:97:6b:11:6a:ab:f4:0f:bf:33:5e:
38:84:79:25:a2:67:8b:88:c8:42:cf:20:60:00:17:b4:fc:a6:
00:50:46:51:29:54:75:ef:d6:7d:ff:35:8e:b3:c3:bc:59:8f:
a3:72:2e:e4:62:00:52:5c:ff:01:a9:52:70:a2:c5:bb:c5:89:
41:67:ab:cd:0a:2a:78:84:0e:ce:4e:d8:35:8f:6e:27:4e:d3:
ff:54:d2:4c:f7:8e:a1:ee:1e:08:73:be:69:0d:0b:eb:d8:22:
96:c4:16:a8:75:05:12:4b:2c:98:88:8c:d0:b2:9e:27:78:ae:
7a:98:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:00:50 2025 by rpki-client