Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A8E87A8F8E11EFA1585858762E951A.roa
File: 62A8E87A8F8E11EFA1585858762E951A.roa (raw, json)
Hash identifier: vXgJUvN4sXqCjwbMePYaEYlB8HM4g8pSQ2AWI2dhWS8=
Subject key identifier: 51:31:4D:0C:9B:CF:31:7F:5D:E4:19:99:1B:EB:70:4F:96:4B:A5:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01005A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A8E87A8F8E11EFA1585858762E951A.roa
Signing time: Mon 21 Oct 2024 09:25:17 +0000
ROA not before: Mon 21 Oct 2024 09:25:14 +0000
ROA not after: Tue 26 Nov 2024 09:25:14 +0000
asID: 62240
IP address blocks: 154.196.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65626 (0x1005a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Oct 21 09:25:14 2024 GMT
Not After : Nov 26 09:25:14 2024 GMT
Subject: CN=67161dfd-8ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:2b:96:09:46:92:b9:fd:25:92:72:70:fa:
95:11:2c:fe:b6:19:d4:9b:27:9a:f7:9a:3e:88:b6:
9a:ce:25:d8:8a:7b:6d:6e:b6:f3:ca:2b:07:fc:bb:
ca:b9:14:5a:d1:1e:8c:89:bd:15:58:f7:d5:f8:14:
5e:01:18:84:6b:f9:20:95:db:0a:2f:82:a7:47:8f:
9d:39:a7:fa:9f:61:c1:61:ff:18:04:f9:01:82:06:
12:85:58:ad:98:ac:c4:de:4c:b4:9b:c7:90:33:6e:
31:2f:bf:90:e9:88:62:b3:b8:c0:64:a1:b0:e4:86:
2b:c6:13:1d:38:65:f2:3a:68:e4:5d:c6:98:79:1c:
ca:58:6d:61:c5:5e:4d:e4:33:9a:89:08:c9:11:b3:
c7:8e:45:a1:83:e5:71:ad:85:00:71:4e:e2:67:28:
03:12:b4:e2:91:ee:f9:3b:31:21:16:c3:1f:88:dc:
90:6d:63:cc:67:8d:ec:fe:25:06:79:dc:4e:f9:4d:
b9:ac:5a:bb:a9:d8:dd:c4:91:b7:d9:c2:8f:a6:b2:
6e:03:91:5f:ae:08:da:dd:fe:9e:5d:a4:33:ff:d6:
a6:db:6a:26:44:d9:68:52:df:24:06:ec:5d:f7:51:
a4:0a:f6:21:32:5a:72:a6:32:2d:55:85:0a:ad:04:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:31:4D:0C:9B:CF:31:7F:5D:E4:19:99:1B:EB:70:4F:96:4B:A5:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A8E87A8F8E11EFA1585858762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.64.0/20
Signature Algorithm: sha256WithRSAEncryption
44:e8:bc:46:31:f3:fc:56:b4:24:ed:99:17:88:cd:d5:b2:f0:
7c:a8:2a:f2:89:01:6d:b9:10:b7:73:ec:15:48:9f:d4:2b:04:
ed:7a:ab:3e:fc:31:df:99:9a:67:8f:81:38:3e:71:9d:ee:3f:
ac:94:e7:52:69:36:c9:db:08:13:e8:bc:02:71:35:7e:f0:33:
90:b1:09:fa:93:75:26:fa:ba:17:19:03:13:f9:6d:94:3f:2f:
a9:98:3e:54:96:85:51:9b:28:df:2f:5b:26:17:55:06:96:d6:
82:6e:c0:ea:c2:38:dd:c2:d2:ee:d8:e0:90:af:15:ad:6f:f0:
15:5a:00:fd:00:bc:25:15:54:22:63:62:1d:bd:30:08:c4:e3:
79:af:fe:a4:b2:9b:c2:21:e4:9f:51:3e:9c:28:86:66:db:ec:
7c:53:53:70:b6:0f:da:b0:45:7c:2c:f8:c1:0d:4e:3b:21:02:
b9:b4:23:e6:eb:55:d0:77:db:a5:c9:82:b1:dc:f7:ea:1e:be:
0a:03:59:7e:fe:4f:45:50:9a:56:47:53:fd:fc:e7:5d:4c:b2:
0b:ad:6e:d9:7f:ab:1a:c1:a8:93:37:3a:b5:10:5b:13:c1:87:
85:23:6d:d8:b5:5e:c5:c1:ef:ae:b1:67:97:fc:b7:59:d6:5a:
17:40:e2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:24 2025 by rpki-client