Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24EDF86ADB1D11EF9B025DBE762E951A.roa
File: 24EDF86ADB1D11EF9B025DBE762E951A.roa (raw, json)
Hash identifier: 4Iv2jZA0Hgs1VCdd58sxN1e1K+WWdSyciILtEgHf4VI=
Subject key identifier: D8:EC:FB:26:40:5B:CF:61:D0:BE:84:D9:EB:D4:AD:49:E3:70:47:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014966
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24EDF86ADB1D11EF9B025DBE762E951A.roa
Signing time: Sat 25 Jan 2025 13:06:09 +0000
ROA not before: Sat 25 Jan 2025 13:06:06 +0000
ROA not after: Mon 03 Mar 2025 13:06:06 +0000
asID: 49505
IP address blocks: 154.211.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84326 (0x14966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 13:06:06 2025 GMT
Not After : Mar 3 13:06:06 2025 GMT
Subject: CN=6794e1c1-a48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:dd:f9:04:0a:f6:68:8a:42:a2:0e:ca:c6:
fd:47:e2:18:e1:cc:8d:83:31:16:d9:e1:49:b5:60:
30:41:84:43:2e:26:41:52:7e:f9:c5:cd:94:61:0e:
79:f2:c8:45:70:8a:c7:bb:44:06:ce:fe:6f:3a:2b:
f2:6e:c0:5d:dc:16:a8:45:bd:81:9a:a2:63:5d:99:
d6:c4:00:65:7e:17:2d:c7:6a:78:d9:8d:cd:8b:a7:
49:23:a1:ae:ce:79:76:cd:1a:f6:f4:b5:67:1a:c1:
d0:2a:ef:36:37:23:5b:e0:58:3f:27:72:ed:f8:f3:
80:bb:4c:8b:8d:69:cb:3b:80:22:a0:40:48:ad:96:
c9:4d:e2:35:d2:a8:82:ed:94:0d:53:53:0e:29:6e:
c2:f3:22:bd:61:8c:ee:45:c5:b5:e1:73:e1:70:08:
b3:c5:32:c4:02:01:5e:d4:a1:45:af:b5:8e:25:a1:
ef:09:d4:00:44:27:da:f6:d3:2e:73:2e:fd:82:e1:
4b:a8:f5:4b:70:07:b8:0e:cf:eb:45:f3:29:9b:f6:
25:09:6d:1d:a7:2c:0a:2f:9f:5d:a6:ba:0a:e7:2e:
81:5e:5d:fa:84:44:cb:fa:8a:de:f4:a1:88:dc:6f:
7d:9e:53:60:30:75:b3:22:2d:f0:b0:45:3c:75:7e:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:FB:26:40:5B:CF:61:D0:BE:84:D9:EB:D4:AD:49:E3:70:47:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24EDF86ADB1D11EF9B025DBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.10.0/24
Signature Algorithm: sha256WithRSAEncryption
87:52:91:be:d5:a4:e1:eb:c6:06:34:42:53:72:14:78:59:4b:
56:44:d3:23:7a:40:f9:5d:17:48:2b:38:6e:86:b4:d5:e8:4c:
a4:dd:93:26:38:09:26:e2:e6:07:64:39:0d:c9:d5:c3:41:7f:
4c:d8:94:92:3e:a9:c8:34:59:87:c7:c9:93:70:18:90:49:ea:
7c:68:db:03:a9:90:96:a4:84:41:47:c5:16:c2:99:5e:92:85:
d1:45:1c:54:18:31:e4:2a:d4:85:a4:b2:74:99:57:73:c5:ae:
5c:00:34:bf:4b:be:c5:38:19:88:2c:63:af:26:27:e4:96:e5:
19:39:b8:c3:13:d7:46:f3:d0:a7:9f:5b:ba:ef:57:bb:15:d9:
ce:9a:22:95:1d:cd:00:1f:b1:e7:e2:60:2d:a8:d8:1f:05:f2:
65:cd:8c:86:30:ac:94:8b:4b:9b:74:30:2a:54:22:89:08:4d:
d9:dd:73:fa:61:d8:97:1c:b9:c4:04:5a:fa:de:7d:d4:89:9e:
f5:1d:80:6a:22:44:fe:45:06:78:e0:69:15:5c:9a:71:d1:46:
d7:c0:b8:21:06:24:f6:9a:c3:76:33:23:c2:3a:c2:87:99:05:
f2:0e:75:bb:38:08:db:3e:60:19:ed:22:29:97:11:ea:75:71:
5d:ff:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:53:42 2025 by rpki-client