Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB677409B7911EF836DE074762E951A.roa
File: 1DB677409B7911EF836DE074762E951A.roa (raw, json)
Hash identifier: Ol1B/kn+lnb2laFm6SIIB+jw3uiRXPuPm1nQeapFw4c=
Subject key identifier: 10:34:7B:6B:6E:5D:8E:EE:E7:CB:5B:21:A2:D4:B3:94:14:76:3D:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB677409B7911EF836DE074762E951A.roa
Signing time: Tue 05 Nov 2024 13:23:16 +0000
ROA not before: Tue 05 Nov 2024 13:23:13 +0000
ROA not after: Mon 13 Jan 2025 13:23:13 +0000
asID: 7018
IP address blocks: 154.214.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67555 (0x107e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 13:23:13 2024 GMT
Not After : Jan 13 13:23:13 2025 GMT
Subject: CN=672a1c44-6575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:b4:1a:8f:3b:80:9f:2f:69:0e:dc:56:81:
f1:73:46:f1:79:96:94:f0:dc:31:f7:d9:b3:86:79:
1d:2b:c4:2f:10:21:7c:41:ff:a5:28:34:49:85:b9:
4e:4e:db:46:ba:e3:9e:be:94:35:38:bf:0d:3e:1b:
a4:77:18:ff:46:e1:e1:ae:d6:5c:22:97:79:b2:f6:
a8:87:b2:fc:9e:da:43:2b:e1:7c:cc:19:ca:be:19:
ef:76:e6:52:96:f6:23:f4:19:fd:d1:2b:a9:94:f9:
7e:53:7c:e9:79:f2:51:1b:b2:4a:5c:11:3f:47:a0:
42:94:91:38:f2:26:e5:d7:88:23:03:b5:39:7f:96:
f1:6d:06:f3:80:ec:51:b5:ed:43:21:79:74:e6:31:
cb:61:29:05:f2:58:88:b1:87:36:45:4c:3c:ca:00:
bc:47:f5:f2:1d:80:8d:0c:c5:cb:75:cd:08:d0:d0:
98:ba:6c:a2:cd:c0:ab:17:e9:db:5f:86:f3:07:67:
5b:98:b0:6d:c9:4e:a0:8c:b1:b7:a1:03:56:21:0b:
0b:f2:67:20:e8:c7:83:4a:b9:b1:b8:ac:41:77:99:
d3:d3:dd:19:3f:5e:2a:81:25:63:97:f2:a5:6d:31:
7e:54:ce:a8:97:0e:ef:dc:7c:57:38:fa:52:b3:ad:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:34:7B:6B:6E:5D:8E:EE:E7:CB:5B:21:A2:D4:B3:94:14:76:3D:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB677409B7911EF836DE074762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.16.0/21
Signature Algorithm: sha256WithRSAEncryption
84:5f:66:40:eb:b8:45:d4:43:f6:32:d8:fa:a3:11:de:10:ae:
fd:b6:0b:65:e6:ad:60:30:7d:39:5f:9a:91:6f:07:bb:fd:8b:
0e:c2:5e:c9:a3:71:78:6a:76:df:c6:40:59:4c:38:5b:58:1f:
f0:9b:c1:42:ae:0a:d4:9a:ab:be:2d:2a:f9:04:de:19:8c:6e:
2b:87:25:b0:1a:9b:7d:a2:7d:06:59:0c:c9:a4:d8:6c:11:73:
bf:7b:b1:09:17:bf:47:41:4f:c1:46:4f:ac:b5:ab:12:bb:2d:
3f:c1:b3:04:e6:1d:aa:e5:ae:4f:f3:f5:84:1d:78:af:b5:b8:
cd:da:eb:45:09:65:40:e2:10:2c:58:d8:ad:01:65:60:9b:6b:
1c:c3:11:ac:e2:ca:bb:99:91:b5:6a:67:1a:0d:7f:ad:60:bd:
d7:f5:ec:25:7a:ee:b5:38:91:07:4c:85:a8:2a:b3:22:a4:09:
9b:c1:1a:6f:2f:e2:03:db:a6:6b:ec:3b:55:a4:ee:93:7e:30:
5c:2c:e9:21:78:33:99:9c:92:d4:c9:b8:fa:be:2a:42:53:66:
ba:e0:73:87:c0:b4:4b:69:bf:9d:5b:78:ed:3e:b6:d8:9e:e1:
3a:8a:46:92:91:8e:8f:ec:b8:fc:ec:74:e4:42:0c:af:e7:4b:
4a:8c:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:07 2025 by rpki-client