Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/C2478DF00A9B11EE89A9292E4AD9E6FC.roa
File: C2478DF00A9B11EE89A9292E4AD9E6FC.roa (raw, json)
Hash identifier: u9DmHCTKu/bPki5qA+6ILqxHpEZqxFINlEy/J+UTPms=
Subject key identifier: 23:1E:5C:F5:4E:02:14:28:25:8B:74:17:6A:60:4F:8E:2D:05:55:37
Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial: 06
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/C2478DF00A9B11EE89A9292E4AD9E6FC.roa
Signing time: Wed 14 Jun 2023 10:10:59 +0000
ROA not before: Wed 14 Jun 2023 10:10:55 +0000
ROA not after: Fri 14 Jun 2024 10:10:55 +0000
asID: 37613
IP address blocks: 41.242.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Validity
Not Before: Jun 14 10:10:55 2023 GMT
Not After : Jun 14 10:10:55 2024 GMT
Subject: CN=64899233-56fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:b1:37:01:f5:43:e1:9a:cd:4c:fd:23:05:
d0:e2:e2:36:2b:3b:59:ca:2d:df:55:5a:13:28:47:
f5:90:28:31:9e:2f:9f:17:8c:98:42:53:11:92:72:
cd:2b:93:43:f1:a5:7e:ab:cd:fe:d8:70:3c:e7:be:
56:cd:6b:d2:9e:07:56:b0:75:9e:fd:7f:30:d2:2c:
b1:ee:f5:81:2c:73:b3:07:d3:b5:e2:92:d8:02:dd:
14:25:24:b7:a3:bd:2d:95:5a:1d:b0:2b:24:e3:cc:
da:a9:e2:c9:f3:39:1c:74:6b:ec:70:c6:b0:71:8a:
80:64:58:2e:7a:dc:86:60:af:92:bb:15:3d:c5:c0:
1c:41:1a:1b:63:d3:17:6a:e0:18:bc:15:7d:df:02:
d0:a2:1a:88:f2:af:b7:04:bc:47:b8:da:d8:74:b7:
f3:dd:28:98:21:9a:02:39:8f:be:c4:25:aa:51:d3:
2b:9f:d1:0f:52:b2:e8:12:30:7d:e7:23:60:1c:c4:
93:4e:55:6c:0a:64:28:65:cb:54:22:38:21:51:a6:
13:cb:37:e2:56:cb:01:43:23:37:92:ae:d4:13:56:
2b:21:b3:ed:d3:3d:bf:0a:bd:2a:40:35:b5:ce:60:
9b:59:11:f8:f9:25:d8:12:21:a8:00:68:67:2a:9e:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:5C:F5:4E:02:14:28:25:8B:74:17:6A:60:4F:8E:2D:05:55:37
X509v3 Authority Key Identifier:
keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/C2478DF00A9B11EE89A9292E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.113.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b4:2a:49:a1:16:da:03:30:59:5d:14:3d:62:7b:08:32:a0:
0e:58:31:8a:58:db:68:b1:8e:1e:f6:90:e5:4a:d1:d2:d8:dd:
87:b5:c4:9b:34:ea:22:31:cd:ed:1a:33:7f:50:2f:ad:80:e3:
b2:8d:8d:25:c4:da:43:d4:e9:b9:4d:c4:9b:c4:ab:96:b7:67:
30:f3:1b:52:ad:cc:ba:6c:00:a0:dc:14:b7:da:dd:56:a5:10:
e8:27:ef:04:17:9c:fd:bf:16:0d:38:ff:04:63:88:c3:97:ea:
e1:45:60:1b:f8:31:db:9b:0c:e5:3b:37:28:7b:0d:66:43:f4:
f9:e7:ab:33:1b:2a:79:62:33:26:f8:bf:57:d4:82:f0:6e:a0:
18:5d:68:13:fe:5f:45:dd:50:66:e3:65:8e:53:1e:f1:4b:ca:
16:d1:cc:b2:82:fb:51:fd:9c:7a:59:c6:c5:06:e7:61:3b:c2:
86:71:a5:4a:68:d1:66:2a:c0:15:84:86:bf:42:cb:31:a7:32:
d8:74:d9:f8:8b:a4:bd:8c:6b:16:c9:20:e4:6e:71:58:a4:af:
3b:8c:0c:f1:a7:e8:46:8e:db:4a:57:6c:d7:05:51:2d:57:79:
9d:6c:1b:e5:5a:8e:1f:61:48:87:80:9e:21:0c:91:8e:b2:97:
ad:1c:6d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:26:53 2025 by rpki-client