Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14971AB0A44411EFB679F777762E951A.roa
File: 14971AB0A44411EFB679F777762E951A.roa (raw, json)
Hash identifier: ltrNdc+Qm4TaO5LAmmnnXCgzyBKjlgi0mghIqVYBYug=
Subject key identifier: 5E:67:31:0C:2F:48:34:29:96:BF:5F:7A:64:85:F2:E1:DA:9E:23:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14971AB0A44411EFB679F777762E951A.roa
Signing time: Sat 16 Nov 2024 17:56:18 +0000
ROA not before: Sat 16 Nov 2024 17:56:15 +0000
ROA not after: Mon 25 Nov 2024 17:56:15 +0000
asID: 133585
IP address blocks: 154.84.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69077 (0x10dd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 16 17:56:15 2024 GMT
Not After : Nov 25 17:56:15 2024 GMT
Subject: CN=6738dcc2-c6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:de:e7:7b:a3:81:ca:cb:01:72:f9:ae:c9:
cd:9e:f8:cb:68:16:b7:5c:5f:18:69:3e:6d:79:d1:
82:59:36:3b:b5:99:d1:ca:66:88:c0:a3:51:1a:25:
fe:11:a2:62:b3:d0:a3:58:89:d6:cf:0d:80:82:e5:
1a:33:0d:2e:82:12:93:22:fb:10:67:9f:f7:d3:b1:
02:00:ba:b4:ea:30:81:bb:b2:1f:c7:e8:ac:65:2f:
a2:9a:a4:70:02:56:4b:96:79:96:e5:5d:1e:6f:ee:
2e:fe:e4:f2:a8:d9:70:fa:f7:8a:5f:2a:ad:65:e2:
d7:5f:a9:ea:7e:c0:02:5f:f4:5f:b1:60:62:67:4b:
32:36:82:a5:e9:3e:40:77:04:80:b4:b7:ab:a3:29:
a5:9c:8d:45:92:a3:1c:08:13:63:b5:55:82:58:31:
db:bc:22:5b:b2:8a:ab:00:87:53:a4:aa:65:ab:e9:
51:08:ee:f6:90:6e:a5:83:a2:da:f1:af:36:0f:60:
4c:fe:7b:64:f9:3b:4a:77:19:af:d6:f9:30:6f:c3:
ba:85:5c:9b:5f:bf:a9:ab:80:14:70:1d:66:32:10:
52:ae:37:cf:f2:44:9c:98:3a:ce:65:81:23:c1:59:
e4:bb:5b:61:1b:a7:35:a3:26:71:d1:04:85:b7:94:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:67:31:0C:2F:48:34:29:96:BF:5F:7A:64:85:F2:E1:DA:9E:23:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14971AB0A44411EFB679F777762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.167.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fc:5d:25:01:07:53:fe:11:fb:02:9c:e4:82:95:7d:81:86:
b4:75:5c:c1:d3:1c:20:ba:53:ca:dd:87:b3:16:e6:77:cb:8d:
e1:57:9d:8d:3b:9b:41:fc:cb:d4:1a:d4:62:0c:2e:f9:fa:6f:
ed:a0:c3:2b:c4:2a:54:1d:15:d8:c5:28:45:e9:97:4f:90:56:
e8:bb:60:e6:17:8f:21:d4:41:7b:d1:bf:d2:12:08:a7:f4:55:
4a:b4:f4:4e:50:8e:86:83:c0:ab:e3:48:15:d2:61:c7:e5:7e:
9e:c5:80:eb:a8:8d:3b:bb:7e:f9:89:53:d2:02:19:3b:6e:cd:
69:f0:73:4e:37:bb:c6:e0:52:16:91:1e:d2:15:bf:14:aa:9f:
fe:18:c1:1f:99:7d:b4:90:23:2c:73:9e:3f:e2:aa:69:97:cf:
22:0f:c2:84:85:1f:c4:40:fd:26:20:ae:f6:b1:c5:dd:0a:6e:
83:b0:52:8f:0c:19:35:5f:67:f0:07:bb:c6:95:d7:b5:c2:19:
bd:91:b7:33:16:11:a7:d8:ce:1c:ed:fe:11:88:34:38:0f:f9:
d3:ad:f1:ad:cd:f9:24:37:4d:b7:a2:87:a7:bc:31:d4:9d:51:
1c:8e:e0:74:7d:a8:ab:fb:7e:6a:7f:16:de:e6:7c:fc:ba:cb:
39:2e:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:33 2025 by rpki-client