Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77314A66A73611EFAB34BD7E762E951A.roa
File: 77314A66A73611EFAB34BD7E762E951A.roa (raw, json)
Hash identifier: koVgGppjVVzg1zOfwSJGW2VRh7KCb9Anug2cq/mt32M=
Subject key identifier: D8:FE:BB:D5:DD:2E:EB:BC:C5:48:43:44:C6:08:39:A8:D6:17:0B:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77314A66A73611EFAB34BD7E762E951A.roa
Signing time: Wed 20 Nov 2024 11:56:24 +0000
ROA not before: Wed 20 Nov 2024 11:56:20 +0000
ROA not after: Tue 03 Dec 2024 11:56:20 +0000
asID: 7018
IP address blocks: 154.95.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69505 (0x10f81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 20 11:56:20 2024 GMT
Not After : Dec 3 11:56:20 2024 GMT
Subject: CN=673dce68-15a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:a5:27:55:db:b2:f4:aa:56:81:67:12:e2:
70:b2:1e:ee:6b:43:ec:86:ca:d0:f0:f6:5a:3e:cb:
39:97:af:c2:85:06:35:ab:39:60:fd:20:ae:33:40:
d2:c0:68:ec:03:d0:eb:86:ef:85:31:6b:62:d6:c8:
18:80:67:91:4b:43:94:6a:c2:a2:63:98:5e:3d:c4:
3e:c3:2b:d3:ef:6b:0b:16:b2:08:80:67:56:fd:7e:
1f:a6:5a:50:1c:68:53:89:8b:04:97:77:68:2c:d9:
7a:6b:e4:1b:b8:9d:a8:9f:cd:33:90:0b:be:34:78:
de:b8:cf:60:3e:7e:18:d3:20:54:1c:7a:74:f7:cd:
69:84:79:24:ad:6d:f9:82:04:59:d8:91:ab:4b:27:
f3:73:38:31:a1:82:9d:d3:a0:bd:e5:d5:c6:dc:66:
67:9f:36:65:e2:72:bc:7c:e8:b8:96:43:96:16:9a:
a9:aa:f0:c0:6b:35:a7:b8:de:29:cc:8b:2d:f0:7b:
61:ad:a6:63:75:c0:6a:4e:3f:75:6e:c0:3a:84:d5:
e8:34:9f:87:9e:50:56:83:8a:15:d5:05:ba:14:c9:
cc:5b:59:cd:37:0f:58:a9:88:81:19:ac:2a:be:3d:
0a:9a:7c:e4:78:c0:0d:05:ac:6b:8f:0e:39:77:d7:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FE:BB:D5:DD:2E:EB:BC:C5:48:43:44:C6:08:39:A8:D6:17:0B:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77314A66A73611EFAB34BD7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.8.0/21
Signature Algorithm: sha256WithRSAEncryption
21:f8:95:67:a2:4c:6b:ca:eb:78:66:54:5b:05:71:49:8b:f0:
49:c4:61:17:9d:83:b0:6e:59:a4:f6:73:a0:1f:6d:3e:0c:d4:
1c:86:25:0e:35:1e:f2:3a:be:74:2c:32:4f:06:3a:83:fb:36:
b8:fc:05:67:b8:6a:bb:e9:4b:0e:ac:29:3c:31:da:da:cb:4d:
68:8d:4b:ff:34:00:94:07:65:ba:f5:f6:64:06:6e:a4:8d:04:
fa:37:12:3a:7c:9e:32:29:65:99:84:d2:dd:99:3f:d2:90:af:
17:77:98:86:0e:53:89:28:07:bd:22:9b:84:86:6a:14:04:17:
ec:98:86:31:a9:8f:02:23:b0:ef:3b:74:34:5d:db:ee:cd:92:
67:a3:88:1f:6f:68:15:67:65:df:ac:13:65:f1:87:04:08:d5:
06:9a:e8:14:19:54:a9:a4:a7:dd:d6:4c:11:dd:81:dd:a1:4d:
5e:d4:8a:4a:56:96:e3:70:1c:56:ea:db:7e:9c:e5:25:86:70:
8a:b7:63:42:51:cf:28:f9:23:81:5d:2a:6b:ba:2a:d2:6d:7a:
b3:d4:e6:9e:de:ac:84:1a:21:f9:77:aa:39:c2:5e:bb:fd:c9:
00:d0:6b:0f:10:fc:ee:19:ca:a7:06:52:5b:c4:c5:c4:ef:de:
c0:83:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:51 2025 by rpki-client