Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA9C77AC8A8911EE81D4E8754AD9E6FC.roa
File: EA9C77AC8A8911EE81D4E8754AD9E6FC.roa (raw, json)
Hash identifier: YKrFKgE4fA3OunZ9R6fCPBnA4IYAiEnHwZSIXzYpnrE=
Subject key identifier: 5D:BC:B7:02:41:48:C9:CD:FD:05:6A:00:0B:3E:F4:8F:4E:EA:89:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5330
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA9C77AC8A8911EE81D4E8754AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:25:45 +0000
ROA not before: Fri 24 Nov 2023 05:25:41 +0000
ROA not after: Tue 26 Dec 2023 05:25:41 +0000
asID: 62240
IP address blocks: 154.196.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21296 (0x5330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:25:41 2023 GMT
Not After : Dec 26 05:25:41 2023 GMT
Subject: CN=656033d9-d5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:07:f9:9b:68:2a:f8:ca:69:a4:97:1e:d3:
d5:c4:a7:f9:01:84:f7:5e:a4:46:a5:65:a1:39:ee:
25:ce:1e:f7:e7:47:07:b3:8e:7b:ef:c7:ea:4d:7b:
c7:29:cf:98:ba:19:05:c3:c0:db:e8:2c:be:73:24:
84:db:bd:34:13:87:56:fa:55:a9:f9:8d:60:85:dd:
36:8e:84:74:25:d5:e2:e1:e1:a9:a0:6c:d3:30:48:
32:c5:b9:d5:a0:91:ba:a0:45:23:b1:39:2b:b6:a1:
a5:f7:6e:72:ae:b2:da:0c:78:f2:5c:e9:06:01:73:
ee:1a:22:38:18:1b:2f:2b:4b:24:75:68:02:c8:b8:
9d:a3:ce:b6:63:13:ab:68:26:05:53:a1:ca:06:33:
70:6d:92:91:91:fb:ff:1d:8d:5c:16:66:b6:aa:af:
d0:90:9e:5e:14:8c:1c:49:be:6c:11:aa:03:b9:ea:
c2:0b:95:e0:e3:dc:d4:15:76:75:de:7b:0e:d3:f8:
78:38:6d:5d:8f:8a:07:fe:98:97:e1:d0:6f:b7:7e:
3e:3f:f3:36:86:b5:3b:6b:0e:bb:b6:d9:84:c7:6d:
8d:c5:c9:67:57:62:4f:99:53:1c:b7:21:94:44:91:
94:13:3b:d2:72:81:84:7c:86:8a:81:97:6a:d3:48:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:B7:02:41:48:C9:CD:FD:05:6A:00:0B:3E:F4:8F:4E:EA:89:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA9C77AC8A8911EE81D4E8754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3d:09:e3:3c:e4:fe:19:c7:02:83:8b:dd:b5:7b:25:57:23:
a4:b9:2e:d5:01:6a:37:92:7f:2c:c0:ac:95:00:6b:47:fa:95:
a0:66:52:e5:f8:7a:c9:ae:26:18:95:a7:08:12:cb:a1:3a:72:
df:54:4c:5c:44:4c:8d:06:61:c5:4a:01:b8:32:19:5c:46:2e:
0c:c3:3f:d5:78:47:d7:1c:aa:dc:ae:4c:54:5e:a7:3a:ba:cf:
89:87:55:59:50:d5:62:3c:a6:93:f7:50:06:e2:4c:ce:c4:9a:
f0:cf:a4:f3:76:ca:44:95:32:e9:95:3f:f1:54:fe:0a:07:db:
39:33:ef:9a:49:b9:1d:fd:f9:a2:a5:31:50:9f:de:da:e8:be:
a9:1a:e0:ec:47:78:d2:1e:88:c6:e3:12:63:b9:2b:92:74:c9:
05:e8:b3:a5:59:40:9d:dd:b5:c3:20:e2:7b:c1:50:49:89:ca:
18:08:9d:32:02:9c:6f:6d:d8:22:94:ea:16:c3:6f:a1:06:11:
c3:27:f6:ad:64:a8:0b:41:cd:34:c8:48:5a:1e:2e:a2:e0:d8:
99:55:39:c4:88:07:49:39:d8:9f:99:dc:6c:85:8b:fd:64:54:
7e:6b:2b:f6:ef:d0:b1:68:b3:21:5e:60:e4:43:0c:52:c3:1e:
d6:be:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:13:24 2025 by rpki-client