Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C7657702C6F11EF8B80E0EE7CDC24C2.roa
File: 6C7657702C6F11EF8B80E0EE7CDC24C2.roa (raw, json)
Hash identifier: bvnM7GOtl3U0ejAeWGpTeDSmc8WnirtrMt424Bb096g=
Subject key identifier: 1C:A6:5A:52:5C:B1:20:24:70:8A:9E:6F:A3:3C:27:F4:61:04:03:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C39B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C7657702C6F11EF8B80E0EE7CDC24C2.roa
Signing time: Mon 17 Jun 2024 06:04:14 +0000
ROA not before: Mon 17 Jun 2024 06:04:11 +0000
ROA not after: Fri 20 Dec 2024 06:04:11 +0000
asID: 4755
IP address blocks: 154.81.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50075 (0xc39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jun 17 06:04:11 2024 GMT
Not After : Dec 20 06:04:11 2024 GMT
Subject: CN=666fd1de-186e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:b9:c5:41:56:d0:9d:3a:cc:87:00:0f:07:
21:c6:de:d8:d0:69:57:14:64:75:ec:36:af:1b:c8:
d1:e5:e7:6e:84:b4:31:d1:98:35:22:8d:32:03:75:
4f:51:7d:52:1a:c5:a3:fd:b4:db:d1:90:3d:84:01:
11:47:2b:94:cb:d8:6e:c0:87:24:57:a4:01:96:66:
4f:b9:d6:47:4b:3d:e2:d9:9f:03:6b:47:74:fc:65:
31:3d:c9:fe:2a:6f:d0:21:6b:7a:47:60:8e:df:8e:
ac:5c:58:38:4b:01:5b:07:7e:4f:78:52:ad:ad:c7:
e8:a9:92:b2:20:1b:85:07:e3:0c:26:52:ec:6e:d7:
72:e5:2b:1b:9d:0e:3c:7c:d6:1d:22:24:31:e7:4e:
a1:4e:39:db:99:c4:62:d1:08:ca:4a:65:b4:57:b0:
00:37:da:bd:68:a7:89:3a:f3:80:be:82:d8:79:ac:
a2:9c:3f:f2:49:d3:36:93:8c:6f:30:1e:68:e4:eb:
db:02:24:d4:54:98:5d:a5:2c:fb:ff:56:54:11:21:
ad:57:aa:19:ee:d1:14:24:41:4a:4e:42:8a:ee:e4:
c2:85:c9:5b:e6:7e:77:43:83:cf:7f:f0:c3:7c:53:
d0:e1:16:50:01:2a:de:0a:c2:0b:94:6e:6f:1d:96:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:5A:52:5C:B1:20:24:70:8A:9E:6F:A3:3C:27:F4:61:04:03:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C7657702C6F11EF8B80E0EE7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.60.0/24
Signature Algorithm: sha256WithRSAEncryption
af:22:36:e5:49:f2:3f:c3:f6:6b:ff:a7:2d:92:ab:f1:6c:84:
2c:db:1c:d2:67:0b:0b:e0:51:cc:d5:71:2e:21:22:8f:6b:ab:
da:a3:72:14:bc:ab:21:ea:c7:50:b0:cc:3e:03:a2:0b:65:13:
6c:36:70:58:4d:19:19:73:f7:42:60:4f:cd:70:af:22:53:d3:
87:ee:fd:95:2e:cf:d9:d7:d9:79:dd:d7:c2:09:80:f2:4c:b7:
1b:71:f6:d6:8b:0a:00:b4:c7:4d:63:64:4e:e4:ab:94:17:76:
bd:0d:cf:96:4f:1a:16:54:b1:c3:da:2d:cf:42:db:62:80:ca:
1f:39:81:17:67:83:1a:13:10:49:20:c4:c2:1c:3f:0d:19:c8:
f2:21:73:ed:58:fd:24:9e:7e:56:07:6e:b6:6a:1a:cf:93:a7:
28:9e:3f:93:f4:56:0c:72:72:0b:3d:1a:f4:aa:54:09:6f:64:
9a:f3:fd:70:55:61:35:9c:ea:5b:ed:5b:86:e0:e4:06:6b:a7:
86:f9:fc:ae:32:d7:a6:f0:35:1a:87:23:19:a6:b2:1c:43:04:
b0:71:a6:bc:b0:86:24:2e:24:07:c3:9a:e2:dc:1b:a7:62:e9:
ff:f2:d1:ec:e4:2c:8c:9b:48:d4:b2:87:8b:31:38:07:0c:fe:
0e:f2:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:26 2025 by rpki-client