Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/533B8DA49B5D11EFB8131349762E951A.roa
File: 533B8DA49B5D11EFB8131349762E951A.roa (raw, json)
Hash identifier: 3TB//KWBHhPcLnticusnuEwL5biQTarOG+3HGGA012Y=
Subject key identifier: A5:24:2C:CA:30:7C:06:4A:54:31:29:C6:06:27:BE:36:FD:A9:BF:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010789
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/533B8DA49B5D11EFB8131349762E951A.roa
Signing time: Tue 05 Nov 2024 10:04:20 +0000
ROA not before: Tue 05 Nov 2024 10:04:17 +0000
ROA not after: Mon 13 Jan 2025 10:04:17 +0000
asID: 7018
IP address blocks: 154.83.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67465 (0x10789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 10:04:17 2024 GMT
Not After : Jan 13 10:04:17 2025 GMT
Subject: CN=6729eda4-fe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:fe:ca:32:02:31:2a:37:3c:5a:fa:ca:de:
1b:da:34:92:bb:34:f0:2f:27:60:e5:c8:4a:06:db:
3a:75:0a:1e:04:90:f2:93:8c:22:7c:27:b6:b8:e3:
34:77:87:3b:88:3e:8d:6c:bf:ab:4c:64:1a:b9:cb:
2d:60:9a:2f:0e:79:af:a6:31:b9:a8:ec:e0:d7:bf:
2e:05:16:79:18:23:e3:19:c0:e9:57:19:1c:54:83:
de:4a:47:7f:53:c1:39:f1:ea:b1:35:a1:3a:2d:b1:
c5:96:05:ef:f3:ed:89:73:97:d6:c6:44:0f:30:9d:
9b:94:70:62:7d:cf:5e:b0:56:e1:ed:65:f9:a2:c8:
32:92:6e:39:1b:c6:6a:64:29:49:41:71:49:33:a9:
ee:7e:54:1d:eb:af:17:11:8b:2b:d4:ed:4f:ae:13:
dc:a0:93:ba:6b:90:10:46:00:85:09:1f:32:de:05:
ec:77:5c:bc:71:1e:49:4f:01:81:5b:b2:05:d3:a9:
6f:0a:a5:6d:bc:56:2c:88:78:70:d1:48:41:e9:63:
7f:ad:bc:2c:23:f5:98:57:08:03:ed:51:3d:4e:2f:
a3:cf:25:d8:40:f3:85:fc:83:4e:ae:13:be:47:0d:
27:2e:63:50:cc:d9:e0:a6:93:c6:c1:39:ad:7f:42:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:24:2C:CA:30:7C:06:4A:54:31:29:C6:06:27:BE:36:FD:A9:BF:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/533B8DA49B5D11EFB8131349762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.216.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:b5:4f:88:ab:ec:a6:41:75:93:be:98:68:20:7a:50:b5:18:
4f:8f:27:05:9f:70:08:7c:44:9d:b2:79:5a:18:bb:88:b0:84:
d6:5a:0b:6a:70:8e:42:72:70:6a:1a:1a:98:a2:6d:6d:75:2e:
71:68:63:da:4d:89:66:ed:ba:6d:89:c0:61:d2:75:6b:df:6a:
94:96:f1:85:70:e6:bb:71:e6:ba:0f:4c:26:48:20:8d:71:79:
c7:93:90:e6:30:d0:51:0f:6e:30:13:4f:d1:43:d1:1c:3f:c0:
e1:8f:53:1c:c8:c6:4c:52:0c:1e:33:04:7e:f9:f2:51:1c:bb:
8b:45:84:74:e2:bf:6f:b6:98:d0:81:e0:06:59:e4:97:98:4e:
4e:1f:57:77:ed:13:37:1f:0b:49:8e:a0:02:12:42:0b:2d:eb:
ba:fa:45:e8:0d:b4:93:23:5c:28:ec:fe:d4:f1:6d:db:7c:ba:
da:17:24:ee:ee:0a:ee:0b:cf:6b:a1:ef:e6:2a:ca:5f:72:f5:
66:4b:e8:8c:12:9b:42:8d:69:b2:6f:eb:a4:34:b2:79:2e:a2:
20:eb:f0:4d:a7:70:63:2f:4d:98:b2:2e:ba:9b:2f:3d:ee:92:
d5:64:02:92:4f:3d:9b:b5:f3:7c:fc:d3:cb:06:ee:f7:2d:c9:
4a:92:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:25 2025 by rpki-client