Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB803E3C8A8F11EEBCDCC4894AD9E6FC.roa
File: EB803E3C8A8F11EEBCDCC4894AD9E6FC.roa (raw, json)
Hash identifier: qAAeOVWCHbW18MiVfnEjS3BqMa0BVw555lTVysg/jfc=
Subject key identifier: A2:C8:83:E3:E4:40:04:CB:92:4C:B1:AB:5F:94:38:29:6F:0E:5C:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 538F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB803E3C8A8F11EEBCDCC4894AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:08:43 +0000
ROA not before: Fri 24 Nov 2023 06:08:40 +0000
ROA not after: Tue 26 Dec 2023 06:08:40 +0000
asID: 62240
IP address blocks: 154.196.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21391 (0x538f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:08:40 2023 GMT
Not After : Dec 26 06:08:40 2023 GMT
Subject: CN=65603deb-0562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3e:c9:7e:db:fb:10:00:6f:e0:21:17:b4:67:
25:cd:55:d3:84:9b:63:b4:ef:77:16:b1:3e:40:0e:
c4:a4:73:53:e4:2c:e4:5c:dd:69:67:c0:f1:06:9e:
ec:ea:6b:fa:ad:8d:b1:aa:e6:79:d0:9f:6a:2d:91:
fa:a1:21:75:80:43:dc:9b:0f:f1:66:de:cc:e8:33:
a9:09:ed:95:30:15:16:2c:12:e7:4e:db:95:f2:2c:
c1:d8:4c:e2:10:47:8e:fe:ec:22:87:06:81:ee:ff:
23:74:2f:6a:0b:a4:18:44:eb:bb:ad:78:20:e7:99:
1f:2d:1b:30:6c:8c:d1:8e:5a:b4:27:22:6d:45:72:
03:e1:9c:b2:be:55:b4:59:48:37:d3:83:a9:1f:02:
8f:26:d4:4b:d5:7b:be:61:ce:e1:98:10:5a:0b:34:
13:e1:a3:a9:c7:b1:e7:4a:36:a9:b9:f5:7e:82:e7:
39:e5:ea:72:56:0a:fc:55:da:a6:38:5e:8b:ef:ba:
4a:e1:28:64:cc:98:82:b7:27:e7:6b:42:0e:33:8b:
29:17:f2:a9:dc:27:33:ed:57:07:00:5f:a1:69:e2:
57:9f:bd:30:98:64:7d:e2:7c:a2:1e:14:bb:7b:92:
9b:a1:5e:9f:c8:01:3d:d8:f5:ba:2f:fb:3e:20:be:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C8:83:E3:E4:40:04:CB:92:4C:B1:AB:5F:94:38:29:6F:0E:5C:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB803E3C8A8F11EEBCDCC4894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:83:06:3b:6c:8e:a1:2c:e6:91:33:b2:a1:81:f9:a1:a2:ca:
e9:3a:08:4e:99:f1:46:49:10:5f:dd:39:df:98:c7:a9:36:9b:
97:14:69:37:a2:95:1a:42:13:7d:29:20:06:f9:fb:55:26:77:
7c:fc:b6:ca:cf:ac:98:b3:10:90:cc:f1:80:c6:cb:f2:d1:ff:
c1:41:23:f2:14:f4:25:93:2f:ce:32:fd:32:86:3c:7a:60:b6:
e8:fa:40:ea:1a:04:9f:a3:a6:9f:e4:47:75:ea:b9:57:e4:5b:
c5:03:79:96:95:32:14:cb:73:79:e6:42:7c:fd:be:e8:b9:ab:
39:56:77:79:f1:bb:b2:89:9e:16:a2:7a:2b:f5:0a:22:1c:54:
db:f4:5a:51:10:c5:5a:20:d8:4c:05:0d:c3:a9:cf:0b:57:be:
1a:36:b5:d0:5e:a9:d6:4f:a3:27:f9:a0:3c:84:64:e7:2c:49:
cd:89:46:4d:80:a0:db:44:ca:d4:08:6e:ab:aa:6d:ff:85:f4:
41:6b:8e:23:0d:92:a1:6b:80:fb:ba:71:8d:12:4d:14:7d:47:
fa:e3:c0:e4:4a:0a:5a:e9:85:1e:a4:ed:6b:0a:f9:1b:2d:4d:
8d:08:de:05:5e:b1:91:26:f4:36:f8:ce:66:f0:e6:b3:25:64:
cc:6f:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:14:22 2025 by rpki-client