Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/465454E89B7811EFA318C66E762E951A.roa
File: 465454E89B7811EFA318C66E762E951A.roa (raw, json)
Hash identifier: AQ+3uIDyARgbqAvwVKdGI7kZ/vQY7RxkHOkeCQMSYn0=
Subject key identifier: 2E:2F:2D:98:BA:E6:7B:5E:1C:50:B6:58:2D:98:BF:5F:59:FE:E4:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/465454E89B7811EFA318C66E762E951A.roa
Signing time: Tue 05 Nov 2024 13:17:15 +0000
ROA not before: Tue 05 Nov 2024 13:17:11 +0000
ROA not after: Mon 13 Jan 2025 13:17:11 +0000
asID: 7018
IP address blocks: 154.212.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67545 (0x107d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 13:17:11 2024 GMT
Not After : Jan 13 13:17:11 2025 GMT
Subject: CN=672a1adb-0629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:4d:66:ac:be:5d:74:38:c8:61:8d:40:f5:
97:d9:ef:27:60:6c:f0:f5:18:a5:b7:3f:d4:34:30:
cf:15:64:4f:dd:b8:ac:69:9c:cb:68:25:f3:48:83:
9e:40:32:e3:54:7c:66:ef:d6:b4:4a:96:2e:0e:cc:
af:35:c2:b5:b6:23:65:d4:39:b4:5b:76:24:dc:ca:
73:45:4d:2c:0b:80:91:69:a0:8a:fe:50:14:3e:1b:
f3:78:ad:b9:c7:ca:6b:86:b1:83:ec:09:f2:c2:61:
41:88:75:5f:92:69:6a:f7:54:ab:1f:0b:fc:ad:ab:
93:fe:a5:c3:f6:af:0c:9b:b6:76:8c:f5:f2:92:6b:
94:39:8c:c5:c2:e5:ca:f7:d0:98:77:39:ca:f0:66:
20:71:09:25:ce:a6:c2:76:ce:72:cc:32:7b:ce:35:
f7:12:6d:a6:e1:80:f6:3c:6f:a1:94:73:eb:1a:ca:
1f:03:c3:29:27:23:f9:7c:79:eb:92:b7:70:6c:51:
ef:93:c8:92:df:ef:0f:a2:e0:61:7a:5e:d2:77:90:
26:44:11:65:fc:1c:01:0a:5a:da:a9:8c:c6:0a:e5:
fc:ff:f6:0f:35:6a:4e:e1:14:5b:2a:9a:4a:9a:28:
ed:8f:de:05:dc:97:fb:c7:b5:e1:34:15:1f:62:44:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2F:2D:98:BA:E6:7B:5E:1C:50:B6:58:2D:98:BF:5F:59:FE:E4:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/465454E89B7811EFA318C66E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:13:30:59:90:57:bc:b3:7f:f6:4f:07:44:6c:6d:d4:0e:ee:
a6:24:1f:a0:33:d8:d4:bc:10:dc:15:bf:63:b2:b7:bd:7f:79:
5b:d7:e8:0b:60:f1:ea:54:dc:64:e2:55:af:59:ea:8c:32:32:
af:cc:e2:a3:bc:b0:78:de:8a:49:1d:bc:b0:8c:0a:72:46:3d:
37:10:bc:f7:91:b4:83:50:63:a1:5f:39:58:e8:d2:5b:ad:c8:
e1:05:19:b2:45:c6:5d:3b:a4:ef:fa:54:73:0b:f2:4b:e3:d1:
4a:37:8e:1c:4b:7b:87:9f:8e:43:1f:dd:8f:f7:3e:62:8a:38:
59:53:8d:00:06:4b:ad:6d:23:4b:48:1b:91:4b:ad:de:56:f7:
2c:53:b4:53:5a:2e:fe:09:79:08:53:6a:6c:5a:78:3a:f3:db:
b4:ca:ca:34:49:68:0f:98:2d:c2:5d:48:b7:8b:1e:15:9f:0e:
2a:88:1e:8b:d4:d4:4e:39:f0:3a:7a:7f:e7:35:a5:74:c1:91:
43:d1:f1:58:63:26:a1:42:9a:31:24:8d:87:69:ac:3e:2c:0d:
61:87:fb:a9:67:a9:3a:6f:ce:7e:14:bd:be:3b:74:a6:69:50:
28:ba:80:c4:bd:14:df:5b:ce:68:e3:ac:55:6c:07:7b:a3:bd:
b6:c9:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:07 2025 by rpki-client