Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/809E7F46B6D811EE9AC05A7E775412E6.roa
File: 809E7F46B6D811EE9AC05A7E775412E6.roa (raw, json)
Hash identifier: ifMe7FlEvUtRw4liS8adrm+aXD2w4kRc8/F05NQY5+8=
Subject key identifier: DB:F2:A8:F9:3F:0C:D8:BC:0A:12:AD:0E:EF:75:3F:19:2A:7A:CB:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7856
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/809E7F46B6D811EE9AC05A7E775412E6.roa
Signing time: Fri 19 Jan 2024 14:39:08 +0000
ROA not before: Fri 19 Jan 2024 14:39:05 +0000
ROA not after: Wed 22 Jan 2025 14:39:05 +0000
asID: 29802
IP address blocks: 154.198.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30806 (0x7856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 19 14:39:05 2024 GMT
Not After : Jan 22 14:39:05 2025 GMT
Subject: CN=65aa898c-efd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:77:d3:b9:b0:0c:b9:f9:59:7e:71:74:19:
e0:e4:13:81:c2:0c:1f:ad:e9:7f:d6:b5:97:45:76:
fa:65:c4:06:b7:fb:d2:3a:17:9f:42:db:a2:2b:a3:
cb:07:1c:17:72:08:d7:e9:b2:73:f3:0c:4e:7a:03:
38:a9:80:cc:7c:70:1c:22:ee:29:0e:dc:6c:61:19:
89:04:99:6d:9a:a3:ed:28:8a:79:3d:f3:7a:98:dd:
9d:2d:87:75:80:7e:f5:f3:b9:d0:c8:53:68:99:b3:
12:0b:83:a0:e7:b6:31:88:d3:29:c2:9b:4f:db:0b:
58:7f:9b:38:1c:3f:4f:44:f4:88:e9:10:23:91:da:
6d:50:9c:c3:61:47:68:1c:9b:d5:f9:77:f8:0c:67:
2d:55:19:49:66:a6:18:80:44:fe:57:d4:d4:be:12:
82:00:2b:cd:af:dc:e6:b9:ab:39:77:6c:4a:71:59:
65:ee:fe:6d:21:00:f4:5b:41:c9:1f:d2:8c:b8:f2:
3f:16:21:4c:7f:c3:12:ff:72:f2:de:ab:50:ba:5c:
68:04:4b:44:9f:78:0d:1f:6c:a5:ba:56:06:58:91:
06:e0:b3:60:d1:4e:70:1b:f1:04:29:15:fc:7a:f1:
e5:7c:d6:6a:02:43:a0:a8:64:f6:b1:ae:c8:ed:c8:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F2:A8:F9:3F:0C:D8:BC:0A:12:AD:0E:EF:75:3F:19:2A:7A:CB:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/809E7F46B6D811EE9AC05A7E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.176.0/21
Signature Algorithm: sha256WithRSAEncryption
26:c5:19:57:98:ff:75:59:26:b6:bd:ee:02:c0:95:6d:19:2c:
e2:b5:e9:64:fb:61:08:a7:65:04:93:48:9a:c8:88:39:ee:27:
ec:20:51:f9:2a:f2:e0:fd:96:89:5e:b4:03:f0:64:40:3b:c9:
23:7f:5b:c7:ac:41:7e:9c:4b:cc:c2:bc:de:9d:83:2a:16:ed:
28:c5:a3:19:0a:09:c0:92:89:8a:66:6b:a1:5a:d5:28:e8:f0:
52:00:4c:a7:2f:f4:49:34:ec:50:47:6c:e8:99:13:ff:33:d6:
f5:74:14:f6:21:8f:1b:0c:8b:f2:59:97:b8:1b:02:19:28:c4:
6c:c9:8b:13:aa:f3:61:da:0f:8e:08:7c:ae:ce:76:a8:b5:5e:
6b:3c:41:66:82:4c:31:1d:61:36:23:1b:6f:70:5c:25:0b:84:
c9:c4:1c:39:74:9b:77:49:83:9b:d1:1c:83:99:47:a9:4a:12:
7b:47:75:17:90:05:4f:db:b0:67:b1:1c:a2:f8:fe:0b:d6:1b:
88:ab:76:03:54:c8:19:1a:91:c7:ef:7e:bc:f1:32:c6:83:0c:
ba:ba:fd:c0:8b:71:b1:1b:f9:aa:6d:6a:f8:8e:58:91:9d:74:
3b:5c:25:05:f8:0f:cd:0b:da:31:90:bd:51:b4:83:02:e1:06:
ab:59:2d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:42 2025 by rpki-client