Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EAB544C727111EFB89EBF86762E951A.roa
File: 8EAB544C727111EFB89EBF86762E951A.roa (raw, json)
Hash identifier: FgmHBiw1bjA7w8tOQKHAxVaqzZqcigjyxoy6EjMiEr0=
Subject key identifier: B2:A0:61:B5:D8:6B:BC:C6:35:BF:19:44:FA:6E:9C:1D:20:6F:65:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EE30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EAB544C727111EFB89EBF86762E951A.roa
Signing time: Sat 14 Sep 2024 08:15:52 +0000
ROA not before: Sat 14 Sep 2024 08:15:49 +0000
ROA not after: Wed 25 Dec 2024 08:15:49 +0000
asID: 29802
IP address blocks: 154.84.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60976 (0xee30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Sep 14 08:15:49 2024 GMT
Not After : Dec 25 08:15:49 2024 GMT
Subject: CN=66e54638-e123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:6b:4a:93:de:9b:56:71:5d:32:a3:05:a4:
b0:bb:55:57:78:dc:0c:91:db:fb:8f:af:c8:b4:7d:
b5:81:79:23:6d:2e:65:58:76:e7:e4:f0:c1:6f:99:
59:8a:37:4a:c3:2a:94:be:1b:74:3c:71:57:35:1b:
67:2f:29:7d:a6:41:60:ab:e9:b5:21:d9:15:a6:01:
08:1c:47:64:6d:ba:48:27:76:6f:3a:fe:72:2c:99:
53:b1:78:9a:a3:25:80:38:0e:f7:5e:82:fd:90:39:
d6:5d:2f:67:ba:47:78:f8:cb:a1:e4:0b:e3:c5:94:
43:3e:1f:54:2b:bc:db:93:e9:5a:b4:51:a7:09:28:
df:78:3b:9a:5d:10:f7:40:e5:5e:78:cc:68:6c:b7:
c8:6b:65:10:ed:50:07:d4:ff:8d:20:ed:57:cf:2e:
14:4c:90:a5:94:2f:04:86:c7:f0:0a:b3:3e:57:19:
36:ad:41:e4:91:88:ee:84:7d:4f:f6:eb:b8:91:28:
cb:f5:51:50:34:26:c5:7b:36:73:88:e9:1b:42:fb:
29:bb:a2:d0:3c:63:05:a7:91:b8:ea:28:06:75:f1:
bf:9e:46:e1:ae:c4:85:7d:36:e5:df:33:b4:9e:ab:
6c:5d:4b:a4:55:b1:52:c5:7c:a6:b1:2f:8a:82:e6:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A0:61:B5:D8:6B:BC:C6:35:BF:19:44:FA:6E:9C:1D:20:6F:65:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EAB544C727111EFB89EBF86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:df:c3:35:52:de:13:0b:51:8a:87:3d:35:46:82:27:c3:b6:
05:56:ac:37:f6:83:61:99:b9:d2:86:af:6a:ec:26:15:9e:1d:
9e:c0:3c:49:67:03:bb:1d:24:02:f3:1d:9d:74:aa:6e:67:41:
c3:55:40:de:54:84:a8:08:56:7c:11:e9:dc:6a:bb:31:e6:f7:
26:33:c3:cc:ef:ab:f0:c2:ec:cb:17:dd:5f:6c:38:4f:cf:8d:
3a:8f:54:78:65:89:d2:39:46:46:52:bd:a9:a8:3f:ea:6a:28:
07:79:38:bc:29:c1:1f:19:ca:f2:51:86:6e:d5:c9:cd:3c:c2:
98:29:0f:c1:bd:2a:b2:5b:5e:15:0f:0e:36:b4:81:bb:66:48:
ab:d8:0f:7a:74:8c:5d:cd:2b:96:de:bf:43:a8:dd:c7:db:1e:
8f:8c:8c:c2:eb:06:a6:38:9c:32:1f:42:20:36:df:02:28:87:
87:22:03:95:4c:25:3b:32:e5:a0:6b:69:c1:2d:99:86:70:e7:
70:d5:14:f5:bf:98:33:f6:93:ef:04:80:fe:4a:d3:9d:a2:32:
aa:c8:c2:40:72:18:9f:f4:ce:0c:0b:c0:ed:be:5f:6a:99:8f:
ce:08:47:32:e8:bc:e9:5a:8e:58:9f:00:20:a2:14:c3:b5:4f:
d2:c8:23:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:58 2025 by rpki-client