Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6574138F51A11EFA27CFDB1762E951A.roa
File: F6574138F51A11EFA27CFDB1762E951A.roa (raw, json)
Hash identifier: bpXhUNk6Z/9Xylh6q85/EEZS9gmUCYG3UCYs1PeBm/Y=
Subject key identifier: 21:45:B0:EA:CC:65:35:99:3D:87:CE:0B:99:DE:05:D2:5F:EE:D9:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0168D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6574138F51A11EFA27CFDB1762E951A.roa
Signing time: Thu 27 Feb 2025 14:56:02 +0000
ROA not before: Thu 27 Feb 2025 14:55:58 +0000
ROA not after: Wed 26 Mar 2025 14:55:58 +0000
asID: 62240
IP address blocks: 154.196.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92376 (0x168d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 14:55:58 2025 GMT
Not After : Mar 26 14:55:58 2025 GMT
Subject: CN=67c07d02-cbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:24:b1:36:e4:d4:3f:ee:f0:37:00:49:f9:
c7:a2:82:55:bd:58:63:03:cf:af:0e:b8:aa:7c:23:
65:e5:c2:cd:db:f2:34:c5:d5:2f:fd:49:96:ba:22:
b5:66:bd:9d:67:da:54:87:78:86:91:15:10:7f:a1:
04:1b:a5:57:82:4d:e2:00:d3:0d:a1:66:9d:e3:1a:
a3:69:06:63:44:74:c4:0f:81:f0:e1:58:97:54:78:
89:d1:c0:07:e8:e6:f9:68:6f:25:34:30:d2:0b:34:
79:84:90:34:b1:7f:48:2a:b2:74:62:c5:5b:59:de:
e2:24:ef:99:9e:e8:71:8e:65:cb:d2:6e:29:8a:a0:
eb:c7:7b:c6:de:45:14:d8:64:c8:ea:e6:8f:ec:1b:
00:67:96:f2:8f:94:c2:a0:b8:6a:66:1e:24:cd:b6:
60:ce:23:73:d0:4d:f1:38:52:f0:83:c6:6f:9d:54:
06:67:70:a3:e5:7b:bb:19:45:a0:d7:3b:f3:07:2d:
f7:b1:78:63:1e:12:6e:22:6a:b0:c1:ac:4d:a1:87:
6e:f3:fb:67:8b:99:1a:bd:82:6d:a6:63:25:ef:d4:
a4:56:0f:e3:14:eb:06:32:37:7e:b0:d3:55:9d:99:
cc:7d:8f:72:24:e6:fb:58:d4:e7:8c:55:9c:1a:27:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:B0:EA:CC:65:35:99:3D:87:CE:0B:99:DE:05:D2:5F:EE:D9:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6574138F51A11EFA27CFDB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3c:8c:27:ec:ae:4f:04:88:5e:92:de:31:4e:4d:77:66:2d:
06:7d:c0:42:fe:91:41:bf:44:25:da:65:fd:14:ee:92:4f:4e:
be:11:f4:b7:a6:29:14:86:d2:16:75:b1:9b:81:e7:73:a9:d8:
75:d6:f9:47:40:ea:72:e4:fd:a2:0b:98:d5:df:4e:c7:c3:eb:
79:3f:85:13:a6:c1:ff:71:42:47:2e:0b:01:96:a4:94:a4:42:
38:fe:af:66:fb:6e:31:71:29:14:70:b0:4f:ab:53:09:50:94:
ca:06:cb:c7:64:21:95:59:62:fe:12:fe:19:31:27:ee:61:f6:
c1:fd:c1:1c:89:45:4d:b9:4c:68:a9:7c:56:00:54:13:c3:1e:
01:77:20:08:20:18:de:ed:db:e4:a5:ce:08:91:3c:6a:fa:6a:
85:d8:68:0c:6c:80:7b:59:69:a4:56:0c:fe:83:45:44:b7:d8:
60:d8:5c:e4:a0:ab:1a:5f:c8:65:f3:33:9b:7d:43:22:1e:0a:
79:a3:c4:4b:0f:07:7e:a9:31:cc:3b:f0:1a:53:3a:61:41:db:
6c:56:74:a9:4b:b6:d7:89:63:f8:e3:b8:7d:d2:8b:04:7a:c5:
b2:b3:3a:0b:a9:94:e2:00:69:50:49:95:1b:97:32:06:16:5a:
25:65:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:31:53 2025 by rpki-client