Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CC0F6F8B4A811EFABDE90B5762E951A.roa
File: 9CC0F6F8B4A811EFABDE90B5762E951A.roa (raw, json)
Hash identifier: q93rpEyLhs4pelCMzkAqC4u3O7tbyA0I6b4lksADsks=
Subject key identifier: 63:C7:D9:1E:58:5A:A2:80:92:DB:A9:8D:EB:B4:1E:DA:D7:56:BF:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011963
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CC0F6F8B4A811EFABDE90B5762E951A.roa
Signing time: Sat 07 Dec 2024 14:36:15 +0000
ROA not before: Sat 07 Dec 2024 14:36:11 +0000
ROA not after: Thu 19 Dec 2024 14:36:11 +0000
asID: 9009
IP address blocks: 154.199.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72035 (0x11963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 7 14:36:11 2024 GMT
Not After : Dec 19 14:36:11 2024 GMT
Subject: CN=67545d5f-2761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:0b:7b:3d:7e:85:bd:3a:de:b9:47:0e:6f:
c0:57:bb:fc:f1:f9:97:2a:d7:4c:72:0a:b9:75:93:
98:0c:17:cc:72:f3:73:20:ac:12:9c:13:1a:de:fc:
f7:08:e3:79:91:be:19:fa:a4:87:10:5e:bd:4a:78:
f3:0e:c4:c3:46:f3:65:54:4c:aa:38:8f:b8:5b:dd:
af:31:72:bd:f9:e7:d5:f2:bc:6d:5b:82:19:b3:ad:
00:25:2d:6a:b8:b9:60:d1:9f:f0:f2:a6:51:ea:11:
01:1f:e5:f7:22:b9:e0:9b:40:86:46:4c:17:d3:de:
3c:b3:93:8e:a4:bc:bc:3b:34:c1:97:6c:46:00:e9:
40:00:4c:25:19:58:a6:09:3f:fe:5f:0b:15:ac:52:
c3:59:9a:4b:c0:d2:be:b5:b6:c6:1a:0b:8b:54:91:
e2:b1:2d:29:c8:d3:04:00:a9:12:66:8f:df:e6:7e:
8c:0a:11:eb:31:11:41:24:df:69:b4:c8:a2:2b:10:
fb:e1:ba:57:bb:be:46:a3:e0:1f:c5:2c:1a:61:fd:
1f:9c:e6:96:f9:6c:ba:a7:be:41:a1:53:0d:c6:39:
8b:26:42:52:86:d6:b5:17:01:4d:05:41:8f:ff:b3:
0e:94:73:9f:65:95:cd:ea:16:64:48:eb:df:09:62:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C7:D9:1E:58:5A:A2:80:92:DB:A9:8D:EB:B4:1E:DA:D7:56:BF:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CC0F6F8B4A811EFABDE90B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.160.0/19
Signature Algorithm: sha256WithRSAEncryption
12:78:f1:a8:87:a5:44:0b:cd:26:97:09:b0:1c:4b:a5:9e:88:
fb:cc:b6:4f:c3:79:34:40:c6:61:cc:30:56:f5:3b:e9:95:a1:
23:d6:f4:80:0e:05:5e:2a:d4:ed:ee:9a:57:78:9f:4e:5f:e1:
0d:a5:3a:72:eb:c1:2c:c5:8d:09:58:41:ee:93:34:36:67:07:
24:72:02:12:27:b8:5d:89:94:34:40:d1:7b:9e:cf:b7:4a:65:
d6:b1:c1:0c:92:79:d3:5e:35:41:09:a2:a0:5e:ec:07:60:74:
d9:81:53:52:eb:4b:4f:17:6b:85:4f:ea:7c:46:50:76:5e:bd:
76:0e:fe:ca:b0:75:77:e1:1e:67:1a:05:56:c7:64:4d:7e:61:
5b:1f:22:28:37:da:cb:61:cd:de:a9:98:ee:ef:86:75:02:2f:
8d:fc:57:60:e3:8a:b1:3a:68:2b:45:0e:a8:be:c5:cd:21:ee:
a8:1a:95:84:12:49:0c:fb:06:a7:da:1c:91:9c:13:bf:33:ef:
c2:ea:81:ff:8d:97:ff:b0:f5:fe:2d:69:c7:ee:85:db:b2:75:
f3:1d:ea:d5:fa:4f:dc:44:41:9d:4d:eb:71:9a:25:b2:a1:92:
6b:d6:7c:5d:da:77:2b:3d:31:65:79:90:a0:92:0b:0a:df:0f:
d1:39:1e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 20 04:14:36 2024 by rpki-client on console-fra.rpki-client.org