Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBC94BE08A8411EE8B48D0654AD9E6FC.roa
File: FBC94BE08A8411EE8B48D0654AD9E6FC.roa (raw, json)
Hash identifier: yUl5gocr9UeFcqR4OWCs+y7lMdIXvpEEIV7JsPEYUCk=
Subject key identifier: 02:A0:7E:AD:2F:FC:39:B0:96:CC:58:2F:FF:F1:08:4C:93:D2:A7:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBC94BE08A8411EE8B48D0654AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:50:26 +0000
ROA not before: Fri 24 Nov 2023 04:50:23 +0000
ROA not after: Tue 26 Dec 2023 04:50:23 +0000
asID: 62240
IP address blocks: 154.196.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21238 (0x52f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:50:23 2023 GMT
Not After : Dec 26 04:50:23 2023 GMT
Subject: CN=65602b92-b540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:7e:bd:b0:56:8b:b9:fd:16:d6:f4:0d:e4:
e1:1e:e5:fe:e3:b0:21:36:b0:d3:b3:16:36:88:4f:
97:66:c5:fa:80:dc:ae:0f:0a:b4:62:4a:5d:db:8e:
52:b2:24:99:d6:e6:aa:ee:8b:ce:68:4f:f7:b3:29:
88:c9:da:88:f5:b0:08:54:fc:1c:9e:b3:b5:2a:6f:
dd:db:aa:cf:42:c2:e7:32:f1:ce:95:c6:37:e0:35:
14:84:e0:26:0a:be:93:73:b1:22:6d:b3:ef:48:d0:
8d:81:22:3f:e1:24:a1:21:2b:a7:31:38:59:92:19:
24:4f:a6:3b:8c:7b:4f:bd:74:41:a9:ef:43:e7:45:
9d:e8:32:79:e3:a2:2d:24:2e:c4:68:7b:47:6c:fb:
b3:ff:f8:1b:23:1d:1d:91:bd:8d:db:47:f6:ec:34:
39:39:1d:52:71:6e:e3:a2:d0:bc:b9:45:b1:af:be:
3a:4d:04:6e:ae:b7:62:a5:00:df:df:5f:e8:e9:27:
3e:70:3d:03:4e:07:d0:38:e6:6e:bc:9c:fa:30:03:
4e:2d:c1:b0:92:15:93:f7:57:5e:88:6b:20:bd:2f:
8a:cf:6d:36:a1:4b:8c:5c:25:03:27:08:dd:a7:b5:
99:31:f4:16:2b:ec:7a:47:34:ae:b2:fe:c0:41:a2:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A0:7E:AD:2F:FC:39:B0:96:CC:58:2F:FF:F1:08:4C:93:D2:A7:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBC94BE08A8411EE8B48D0654AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.59.0/24
Signature Algorithm: sha256WithRSAEncryption
13:61:21:7a:30:63:1b:5b:8f:93:86:8a:e4:03:cf:55:9c:50:
a8:44:80:dd:b0:1b:e5:31:59:95:84:2e:d7:82:59:5d:a0:38:
ba:66:93:33:e4:37:fa:21:e9:d4:5f:e9:51:03:c2:37:83:af:
f7:e6:e9:74:38:af:e4:4b:e6:e2:b7:76:17:ca:2d:c1:4c:2b:
f6:d2:57:77:a4:c6:cf:92:b6:03:54:fc:69:88:b9:56:36:e1:
b4:e4:9a:e0:7c:64:2a:79:99:ba:0b:e2:62:f4:d9:ed:76:96:
8e:44:b4:a6:df:e9:95:9e:76:22:6d:2f:fb:39:99:2f:ac:25:
73:81:f6:6f:16:6d:bb:f5:c0:22:b7:e7:6a:54:af:ec:d9:81:
6a:06:b6:2e:cc:f5:29:8b:8e:58:58:31:86:43:f3:e1:8e:50:
93:af:b0:d0:ee:a9:13:69:ed:b9:4f:aa:ca:6c:5e:7a:ce:e1:
ab:d0:3d:00:81:be:7a:f2:62:7b:60:30:de:8b:19:66:a1:49:
3e:5e:a8:eb:3a:d4:ee:80:92:8b:bc:a3:22:ca:aa:5e:2a:15:
b7:24:ec:b3:58:3d:0f:1f:c6:a3:c9:98:e2:e9:a4:3a:23:e9:
1b:77:eb:f3:d9:62:96:21:a5:9f:c6:74:70:88:31:26:71:cc:
b2:30:8c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:05:58 2025 by rpki-client