Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/989A1280DA4611EF9316C892762E951A.roa
File: 989A1280DA4611EF9316C892762E951A.roa (raw, json)
Hash identifier: SuM4Ou2b/MDKXS3mNWx6h02OC7TiR2NAaquSIvWQ9Yo=
Subject key identifier: 8F:9A:23:5B:EB:7D:37:65:5C:62:65:20:F8:28:57:12:AB:D4:9B:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014611
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/989A1280DA4611EF9316C892762E951A.roa
Signing time: Fri 24 Jan 2025 11:30:22 +0000
ROA not before: Fri 24 Jan 2025 11:30:18 +0000
ROA not after: Wed 05 Mar 2025 11:30:18 +0000
asID: 49505
IP address blocks: 154.213.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83473 (0x14611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 11:30:18 2025 GMT
Not After : Mar 5 11:30:18 2025 GMT
Subject: CN=679379cd-8d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3a:b8:c2:6f:bd:33:4f:15:2e:4d:71:6f:8d:
bf:52:2a:4e:b7:87:a4:01:e5:a1:75:0e:0a:d7:d4:
7a:82:61:f2:db:af:84:91:9f:c9:ea:ea:bf:89:5d:
d0:5a:a7:08:30:8b:70:14:96:74:a3:3c:7f:de:b4:
81:88:c7:0e:26:6f:a5:5c:e9:b4:ad:92:73:16:3b:
9a:43:5a:e9:40:15:58:31:7f:e1:2f:f2:bd:3a:52:
45:f6:f5:2e:1d:d0:7a:3b:33:fa:21:6c:ed:66:73:
af:b3:6b:87:f5:e9:0c:7b:79:91:97:d2:c0:75:66:
57:e6:05:17:f3:2e:25:f9:02:b6:dd:c9:38:88:2f:
d1:c6:75:f9:3e:e9:28:50:a2:3f:f0:bc:ac:f9:43:
d3:5b:35:d5:12:f4:a7:b1:98:d7:15:a9:0e:2f:df:
cd:40:f0:33:39:67:5e:f4:5f:88:ea:85:03:8e:03:
58:6f:dd:20:da:7d:01:34:0e:03:12:ab:43:05:ac:
8e:5b:d7:ab:1d:bb:f9:df:14:07:d6:ff:4d:44:21:
96:d5:ab:a9:99:2b:e4:08:01:67:be:4d:e2:47:2f:
73:c5:21:df:d5:78:46:57:1f:4c:8c:8f:5f:b9:2f:
89:85:70:53:89:4f:72:b5:5c:ef:8e:47:8f:27:55:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:23:5B:EB:7D:37:65:5C:62:65:20:F8:28:57:12:AB:D4:9B:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/989A1280DA4611EF9316C892762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
80:62:b2:05:e3:96:65:7f:47:12:82:5a:97:50:f8:68:bf:b7:
bd:f7:e6:21:71:a9:95:71:2c:80:91:8d:4f:68:8f:f8:6b:98:
10:e4:52:ba:78:88:48:0e:a2:37:e4:68:c6:5d:98:df:67:9f:
6e:1c:98:ea:9c:04:4d:20:cd:dd:84:95:e1:ed:4f:ff:0b:29:
8b:d7:86:02:bd:39:15:fc:08:a3:bf:b0:db:a2:97:48:67:65:
3c:45:ce:cd:d9:2c:b0:26:22:7d:42:ef:e6:7a:7b:cd:b6:98:
46:4a:f0:9d:3e:35:54:08:55:23:e1:b7:28:45:71:47:b9:a2:
9f:7c:c8:3d:4f:37:45:22:5a:1c:84:8a:ef:8c:ee:7a:6a:49:
37:08:75:8a:84:c9:65:23:85:0c:40:47:e8:28:99:fb:6e:42:
95:9a:cc:c0:8c:a0:ec:96:23:fe:3b:7d:88:34:1b:78:62:3b:
32:7b:5a:48:79:1b:b5:c6:9e:42:98:0b:3b:c1:4e:a5:bd:73:
97:15:ff:65:99:92:b9:6e:62:2a:89:e2:88:c7:85:16:e0:ad:
a0:c0:74:55:93:bc:b7:59:8e:13:32:f7:a6:75:ee:40:11:1c:
13:9c:1f:8c:f5:ad:20:07:de:0e:7f:70:74:df:be:d1:4e:29:
56:42:d9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:52:29 2025 by rpki-client