Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AD5C1D69B5D11EFA36C344B762E951A.roa
File: 7AD5C1D69B5D11EFA36C344B762E951A.roa (raw, json)
Hash identifier: meU+UmEOVAIwmZlK6bj3nILB7cmDC4I0woKBvcwpisg=
Subject key identifier: E8:02:33:20:F2:88:0A:6D:AF:3D:24:94:ED:4C:6E:2C:4F:CC:0C:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01078B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AD5C1D69B5D11EFA36C344B762E951A.roa
Signing time: Tue 05 Nov 2024 10:05:27 +0000
ROA not before: Tue 05 Nov 2024 10:05:23 +0000
ROA not after: Mon 13 Jan 2025 10:05:23 +0000
asID: 7018
IP address blocks: 154.83.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67467 (0x1078b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 10:05:23 2024 GMT
Not After : Jan 13 10:05:23 2025 GMT
Subject: CN=6729ede7-34e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:d0:1a:56:f2:a6:f1:1b:fd:ac:de:f8:07:
68:23:42:71:92:ed:8d:5f:51:bb:ef:b7:77:51:97:
ca:20:8e:84:89:b9:57:95:2a:c5:77:7b:8f:49:50:
0a:e9:be:45:55:b8:ef:df:6f:28:c4:c1:67:6d:ea:
91:13:5f:d8:c6:0f:91:8a:15:e6:41:6d:90:1b:cb:
13:d6:be:c8:0b:77:9f:2e:70:3b:b6:3a:68:35:f3:
8f:1a:88:84:49:cd:ac:c0:ff:6f:71:0e:f4:83:e2:
f0:fe:2b:97:61:24:7a:c7:bb:81:4c:e1:b5:4e:63:
7a:35:17:cf:af:0e:30:d7:4c:20:11:86:15:f5:73:
70:15:fb:cf:b2:a5:61:08:a7:ac:a1:82:4b:7d:f3:
be:db:9f:1d:3d:46:3a:72:92:f6:1e:2b:df:cf:ff:
75:3e:a1:1e:c9:81:29:c7:a6:9f:21:ca:b2:47:70:
be:ef:5c:c6:2a:b2:3e:fd:5e:87:52:b1:a8:cc:d4:
b9:12:65:4b:7a:db:e9:26:68:30:10:36:28:02:4d:
bc:f7:88:6c:70:63:f2:39:c7:13:a8:82:71:76:48:
2e:b6:57:93:bc:55:01:29:cc:fe:fe:18:fb:de:b9:
0e:de:41:2f:70:fe:af:0f:a4:e7:34:03:d8:db:2c:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:02:33:20:F2:88:0A:6D:AF:3D:24:94:ED:4C:6E:2C:4F:CC:0C:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AD5C1D69B5D11EFA36C344B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.224.0/21
Signature Algorithm: sha256WithRSAEncryption
14:bf:ce:b5:59:8d:98:9f:6e:6c:29:99:a8:b3:5d:28:bb:42:
f8:f6:e2:b1:b2:42:b2:90:4b:47:11:18:33:76:62:5a:21:64:
ae:ed:92:9d:4b:b4:87:06:4b:fd:3c:42:a3:a6:ab:e8:ed:32:
fc:37:68:a5:d6:9d:c1:25:33:c9:2f:86:d4:94:ea:37:80:42:
14:dc:69:ba:9b:c1:9c:59:ce:35:97:ba:d9:0e:82:15:12:d0:
23:f0:56:73:12:1e:eb:67:8a:e1:15:26:8f:6f:a4:50:8b:45:
7a:60:33:ef:a5:a2:3f:60:0a:ee:f1:57:40:67:7d:ab:9f:c7:
37:ed:80:47:ab:a5:b2:6c:12:b1:8f:f4:38:3a:7f:db:81:83:
37:15:04:71:e1:89:d1:3c:ad:e1:30:ca:94:77:3d:37:68:78:
2b:fb:07:ab:b4:7e:0b:ee:51:14:a5:84:c4:0b:b8:71:a6:13:
2a:e3:51:eb:ff:25:e3:7d:c0:4f:f1:ed:48:69:6e:8a:98:dd:
6e:56:18:a1:3b:56:60:74:29:e5:b7:a5:bf:63:06:01:ee:40:
f6:d6:61:e1:ed:e9:24:18:f4:2a:66:54:7c:7c:33:4c:0d:03:
18:8b:02:6c:ed:9b:a5:fd:a3:65:36:1f:46:78:cc:4d:95:40:
84:fc:9f:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQeLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA1MTAwNTIzWhcNMjUwMTEzMTAwNTIzWjAYMRYw
FAYDVQQDEw02NzI5ZWRlNy0zNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtWrQGlbypvEb/aze+AdoI0Jxku2NX1G777d3UZfKII6EiblXlSrFd3uP
SVAK6b5FVbjv328oxMFnbeqRE1/Yxg+RihXmQW2QG8sT1r7IC3efLnA7tjpoNfOP
GoiESc2swP9vcQ70g+Lw/iuXYSR6x7uBTOG1TmN6NRfPrw4w10wgEYYV9XNwFfvP
sqVhCKesoYJLffO+258dPUY6cpL2Hivfz/91PqEeyYEpx6afIcqyR3C+71zGKrI+
/V6HUrGozNS5EmVLetvpJmgwEDYoAk2894hscGPyOccTqIJxdkgutleTvFUBKcz+
/hj73rkO3kEvcP6vD6TnNAPY2yykTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOgC
MyDyiAptrz0klO1MbixPzAwxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QUQ1QzFENjlCNUQxMUVGQTM2QzM0NEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlPgMA0GCSqGSIb3DQEB
CwUAA4IBAQAUv861WY2Yn25sKZmos10ou0L49uKxskKykEtHERgzdmJaIWSu7ZKd
S7SHBkv9PEKjpqvo7TL8N2il1p3BJTPJL4bUlOo3gEIU3Gm6m8GcWc41l7rZDoIV
EtAj8FZzEh7rZ4rhFSaPb6RQi0V6YDPvpaI/YAru8VdAZ32rn8c37YBHq6WybBKx
j/Q4On/bgYM3FQRx4YnRPK3hMMqUdz03aHgr+wertH4L7lEUpYTEC7hxphMq41Hr
/yXjfcBP8e1IaW6KmN1uVhihO1ZgdCnlt6W/YwYB7kD21mHh7ekkGPQqZlR8fDNM
DQMYiwJs7Zul/aNlNh9GeMxNlUCE/J/J
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:49 2025 by rpki-client