Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E0DF6E09B5B11EF963460BC762E951A.roa
File: 7E0DF6E09B5B11EF963460BC762E951A.roa (raw, json)
Hash identifier: M8hFfOJHOl3O3QZGUnIVf2uTqDpMERO/OacTHX7mskY=
Subject key identifier: 95:C7:61:B4:07:DD:6C:0F:05:34:8C:B8:92:02:04:7E:E6:B5:66:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01077B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E0DF6E09B5B11EF963460BC762E951A.roa
Signing time: Tue 05 Nov 2024 09:51:13 +0000
ROA not before: Tue 05 Nov 2024 09:51:09 +0000
ROA not after: Mon 13 Jan 2025 09:51:09 +0000
asID: 22773
IP address blocks: 154.212.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67451 (0x1077b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 09:51:09 2024 GMT
Not After : Jan 13 09:51:09 2025 GMT
Subject: CN=6729ea91-84a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:b5:be:c8:2c:2a:37:8a:d1:49:62:50:00:
43:93:6d:ea:bd:3e:ee:57:e8:63:4d:52:2b:73:c4:
eb:e8:0c:03:39:a0:e1:ee:20:a9:dd:23:29:43:73:
88:0b:2d:46:e6:59:8f:fd:23:a7:11:af:58:4a:d0:
e9:0f:6e:ff:fc:1e:08:4b:06:5e:06:53:9e:f8:6f:
d0:9a:62:c0:ff:82:e0:81:d6:07:db:43:97:4f:3f:
88:a1:3c:31:f4:2c:f7:65:90:18:34:5c:d6:0b:28:
0b:01:5b:be:4e:e2:41:22:a8:09:7f:d9:e9:5e:25:
24:05:70:ae:01:3f:37:16:77:8d:80:2d:a5:2e:6b:
c8:c6:14:7a:71:68:db:16:7e:8e:a3:d8:2d:23:6f:
db:63:64:8b:0c:1d:66:8a:2a:78:0a:e6:18:0b:4d:
15:66:05:88:1c:3f:71:31:4f:bb:2a:24:da:86:3a:
53:36:5d:63:92:16:61:29:68:73:74:6c:44:cb:12:
b5:be:16:e3:97:c6:28:32:de:a1:d1:74:ef:0b:86:
d4:f8:cb:83:db:e5:bc:59:1c:a4:d7:ed:63:56:74:
4a:cd:87:6b:96:04:41:11:8b:0d:06:0a:6d:a8:ee:
38:2f:cb:3f:93:f0:e2:02:b1:f3:a7:a7:54:26:5e:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C7:61:B4:07:DD:6C:0F:05:34:8C:B8:92:02:04:7E:E6:B5:66:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E0DF6E09B5B11EF963460BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.24.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:32:0d:03:9d:29:c1:9a:46:a9:f6:74:f1:68:7c:f1:80:65:
29:99:a3:b2:09:04:38:5c:2e:3a:5b:7e:63:a3:3c:ad:1f:14:
3d:79:1a:57:09:96:89:33:e9:52:df:f0:41:43:46:9c:e6:df:
a9:d5:b2:cd:c4:3b:e6:24:79:dc:05:d3:69:3c:87:c2:88:d1:
3c:7a:89:54:d3:f9:ca:b7:6b:5d:dc:94:b9:7c:ac:c1:67:96:
e8:90:a1:a6:45:a5:b7:5e:55:5d:23:13:1e:90:dc:03:ed:1f:
ea:73:6c:6b:6b:e3:0f:8e:54:f2:b0:72:fe:3a:65:5a:e4:bd:
84:7a:3c:b2:c3:b5:fc:b7:5a:89:90:09:d1:e6:4b:21:7a:21:
8e:ae:e9:f9:9a:05:13:03:98:c3:27:ab:c3:23:90:b2:02:21:
41:67:d6:df:72:8d:32:72:ea:67:74:0e:41:ec:b4:63:92:4d:
22:73:53:e6:0f:bf:ed:c8:32:f1:2d:a3:8d:1c:bd:ee:43:63:
df:ca:fc:5e:0a:a7:77:cf:99:c8:3a:91:a4:26:bb:90:d2:2f:
45:91:19:af:f4:3d:4a:cd:f9:b0:9e:cd:ba:3d:e7:aa:b4:a3:
ff:65:8e:09:83:81:41:fd:23:54:f5:45:c1:64:c6:ef:a8:23:
eb:e7:55:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:55 2025 by rpki-client