Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/AB97B7CE690E11EFA5857A8A762E951A.roa
File: AB97B7CE690E11EFA5857A8A762E951A.roa (raw, json)
Hash identifier: 9VfXkS2xkR3BqFUs9fCsbqsDqz3hXeH0tqko6xsHaKY=
Subject key identifier: E8:9A:C7:57:BE:76:F7:0A:BE:52:ED:99:F9:DE:D8:2D:75:BB:CC:5F
Certificate issuer: /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial: 07
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/AB97B7CE690E11EFA5857A8A762E951A.roa
Signing time: Mon 02 Sep 2024 09:35:20 +0000
ROA not before: Mon 02 Sep 2024 09:35:17 +0000
ROA not after: Tue 01 Oct 2024 09:35:17 +0000
asID: 16637
IP address blocks: 197.64.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367678FAF
Validity
Not Before: Sep 2 09:35:17 2024 GMT
Not After : Oct 1 09:35:17 2024 GMT
Subject: CN=66d586d8-4781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:28:a2:19:5a:8f:61:9f:4f:20:61:33:66:
b9:26:8c:49:1d:65:63:6b:52:2d:70:56:07:26:fa:
70:bb:b6:78:57:0c:6a:38:d8:53:1b:b0:d7:f7:8e:
68:57:7e:ca:ca:cd:c4:f7:52:4f:69:9b:0b:e1:f1:
47:1b:8a:7c:35:07:fe:f5:e3:84:ae:42:40:2b:89:
96:f6:a6:ee:5d:1b:38:e3:cf:e9:01:a7:a6:35:da:
50:46:e4:9d:4c:27:29:d5:73:3e:8d:be:14:8f:3d:
54:d1:10:59:05:ce:6a:65:d5:3c:8b:6e:93:62:07:
22:0d:17:22:83:76:94:27:7f:f9:f0:1d:83:d8:a4:
15:b9:35:ad:3c:c8:ad:61:27:59:d2:c2:c0:d0:09:
56:6d:ae:78:39:23:54:41:b2:bb:f8:fd:66:53:1a:
57:b3:c2:57:cb:6d:2f:3c:98:81:f2:2f:14:fe:29:
1b:a7:8b:c6:08:40:8b:f7:3a:f1:af:7d:fc:88:3d:
86:18:ec:38:6a:b3:59:26:74:8b:74:c5:23:17:53:
cf:ce:22:7b:81:17:a0:ff:63:91:03:2e:9f:c4:39:
ee:2c:af:99:d7:ff:a6:9a:50:d2:cf:e0:43:71:69:
8b:21:72:87:df:5f:70:28:30:8e:e1:0d:f7:6b:7e:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:C7:57:BE:76:F7:0A:BE:52:ED:99:F9:DE:D8:2D:75:BB:CC:5F
X509v3 Authority Key Identifier:
keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/AB97B7CE690E11EFA5857A8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.64.0.0/12
Signature Algorithm: sha256WithRSAEncryption
0d:eb:bb:1c:a7:df:8d:7b:3e:cf:49:86:51:15:b3:79:47:fb:
af:b8:09:a7:7b:4f:72:03:52:8c:24:dc:ba:17:8a:0f:67:0e:
5c:68:ed:e6:7d:7d:78:98:9f:fa:c0:d7:e7:cf:f3:fb:af:12:
2f:b2:f2:1a:7b:f8:77:d2:c7:1b:8e:71:c8:1d:9c:11:56:81:
70:cd:2e:fa:f9:ed:17:8a:fc:9f:cb:d9:60:44:19:b0:b2:c1:
31:ef:59:bb:c7:5c:ab:b5:cc:31:0d:35:28:1a:d6:2d:37:9d:
25:b3:6a:ae:fb:15:8b:71:27:28:5d:ba:c9:a0:6d:4e:a6:5f:
b0:51:37:16:88:80:b9:c7:7f:07:c2:de:ef:b4:56:98:2f:e2:
22:0f:ee:bd:ad:36:44:e8:40:fc:fd:67:60:d5:90:c8:b3:a2:
64:c7:b9:d5:23:fb:2a:51:93:a0:d8:90:4d:ba:41:41:e8:0c:
a9:94:fe:dc:01:32:e7:82:4f:eb:37:21:f2:03:7c:3a:f5:dc:
ae:6b:68:f5:f2:29:e9:d7:26:1f:d1:81:a6:94:1d:b7:2f:cf:
cf:96:4b:a6:d9:b6:d2:89:26:fd:0e:6e:80:7b:5d:9c:2a:28:
66:43:da:83:74:9f:60:c4:5e:5d:44:59:e2:3e:15:74:42:8c:
7d:f7:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:41 2025 by rpki-client