Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA6190E6F62111EFA5DD8DB8762E951A.roa
File: FA6190E6F62111EFA5DD8DB8762E951A.roa (raw, json)
Hash identifier: jp1aRs2mQCezUvZs83GqXATtl1W0bxhAkV1kf2cX5fc=
Subject key identifier: FD:C6:F9:CC:3F:0F:5E:23:26:90:9F:45:22:FC:FD:A7:45:45:6B:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA6190E6F62111EFA5DD8DB8762E951A.roa
Signing time: Fri 28 Feb 2025 22:18:47 +0000
ROA not before: Fri 28 Feb 2025 22:18:43 +0000
ROA not after: Wed 26 Mar 2025 22:18:43 +0000
asID: 62240
IP address blocks: 154.196.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93315 (0x16c83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:18:43 2025 GMT
Not After : Mar 26 22:18:43 2025 GMT
Subject: CN=67c23647-b258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:26:ac:7e:af:1f:52:67:c9:ef:ca:f2:32:
cc:ca:6a:9a:1c:82:f1:f6:da:e5:74:2e:33:ba:47:
28:f8:93:cd:f8:b7:f3:3e:14:55:4c:42:5e:62:13:
d4:08:5e:5f:b5:49:48:c9:49:17:5c:4e:bb:67:cb:
15:ac:44:5f:6c:81:73:41:b4:15:85:b5:2f:b2:0b:
c2:c0:5c:b4:0e:94:1c:cc:87:78:4e:da:60:53:ce:
e1:fd:2c:d9:e5:e6:d8:3d:f9:06:f1:a3:8f:4f:81:
52:52:1d:39:6d:e3:31:88:7b:64:4f:b1:eb:eb:ee:
88:60:0b:90:a8:5c:1b:59:c3:f7:ce:a1:03:db:68:
a3:7f:aa:74:de:43:0f:99:b1:e8:16:0b:35:9b:a7:
a6:63:7c:55:56:f7:cd:f0:23:81:3f:6d:f9:69:57:
0a:71:61:1d:a7:b7:94:e1:c2:3a:47:f9:a8:9e:d7:
27:e2:a2:2c:53:e8:8a:41:15:60:d0:ca:3e:be:2c:
3f:e5:7e:68:57:88:1d:96:57:01:32:b0:fc:02:29:
c8:35:9d:65:83:50:80:09:71:57:19:5b:ab:fd:df:
d0:ab:6f:a1:27:29:ce:3a:3e:c2:70:fa:f0:fd:54:
58:ff:47:13:d0:86:68:cc:73:6c:6b:29:23:ce:23:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C6:F9:CC:3F:0F:5E:23:26:90:9F:45:22:FC:FD:A7:45:45:6B:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA6190E6F62111EFA5DD8DB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.83.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ed:f9:86:33:27:a1:ee:c2:c2:d6:ce:70:94:8e:0f:74:76:
1a:7e:6c:6e:d2:b8:57:93:15:80:0d:de:a3:5d:de:cd:c2:b1:
1c:11:7a:5c:0a:d7:0c:1f:6a:e1:86:40:e0:be:13:ad:00:d2:
93:64:fd:a7:b0:74:c6:11:98:4f:f3:09:c9:85:96:36:39:e9:
d4:b9:e1:90:f4:5e:f4:a1:d3:c6:06:ec:d0:be:49:0c:35:5e:
e4:82:51:f1:27:d0:83:bd:8a:4f:bb:46:16:45:5d:ed:54:9f:
fe:d8:6d:19:93:3e:f1:d5:ad:fc:69:a6:9e:63:be:57:c0:64:
d2:cf:7e:63:67:c9:23:f9:94:69:43:5c:c3:69:50:a0:cc:64:
e8:ec:12:87:51:6f:59:0b:2e:f0:cc:af:b5:4e:68:e0:1a:de:
27:7b:96:78:29:10:34:8d:1b:75:dc:a5:bb:09:af:d4:3d:ad:
d0:f0:ce:1f:ed:48:fa:47:2f:6c:53:61:35:c8:e8:ba:16:77:
b3:d3:e2:92:09:ae:de:6c:2b:6d:b0:59:3c:0f:d8:4d:18:8c:
e6:c9:23:c3:03:ca:7f:0a:16:09:e9:24:44:17:86:3a:b7:da:
77:70:30:27:b5:dc:bb:09:5b:e3:26:51:97:8a:d1:3f:8d:40:
24:38:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:34:44 2025 by rpki-client