Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB7AACE29B5E11EF8FB08351762E951A.roa
File: AB7AACE29B5E11EF8FB08351762E951A.roa (raw, json)
Hash identifier: jZOb4sdNVAD3E9UKhBpMDBEb+1ZSksw1DwZYD6vjEow=
Subject key identifier: 85:50:63:21:F2:98:D3:3F:34:1A:A9:F8:E8:01:24:58:7D:D5:0A:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010799
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB7AACE29B5E11EF8FB08351762E951A.roa
Signing time: Tue 05 Nov 2024 10:13:58 +0000
ROA not before: Tue 05 Nov 2024 10:13:54 +0000
ROA not after: Mon 13 Jan 2025 10:13:54 +0000
asID: 7018
IP address blocks: 154.84.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67481 (0x10799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 10:13:54 2024 GMT
Not After : Jan 13 10:13:54 2025 GMT
Subject: CN=6729efe6-eaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:9f:be:02:8c:9e:e1:7f:cb:08:5d:3d:c3:
e2:6b:98:e9:e7:09:7c:0d:77:10:74:30:76:78:d6:
b1:e5:f2:3d:68:9b:46:7e:13:e8:fb:96:7c:f4:9f:
f4:c3:67:f4:26:5e:20:54:20:17:53:4c:37:2c:78:
88:7a:97:6d:64:3b:24:a8:a3:fa:16:fe:f1:c9:99:
1b:91:b9:15:50:78:c8:ba:19:37:85:83:a1:cb:67:
35:b4:b9:3f:0a:5b:6f:21:8b:8f:1a:c0:e1:44:0d:
95:f1:f2:7a:c9:29:60:d3:6a:65:23:f3:f5:3c:27:
cb:a8:0a:4d:84:b6:9b:c6:c3:81:c6:f8:5c:72:32:
44:d8:68:fc:97:12:1d:4e:00:b5:dd:10:da:5d:02:
af:17:dc:b5:5b:e8:e6:5b:36:67:d0:12:6b:1b:44:
7f:02:37:7a:16:59:78:59:87:74:8a:a7:9a:6d:39:
8d:f8:87:76:07:7f:39:93:b9:a4:96:10:9e:12:5e:
0b:44:4f:21:04:c5:e5:86:12:83:16:ee:5a:0f:18:
a4:b0:35:3d:c1:38:3a:57:ab:a7:64:16:e0:73:4c:
c7:ec:8e:c4:0c:b2:14:fa:51:b5:d4:28:ae:7b:15:
9b:5e:24:42:28:1b:81:07:c8:4e:2f:39:ff:ea:3e:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:50:63:21:F2:98:D3:3F:34:1A:A9:F8:E8:01:24:58:7D:D5:0A:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB7AACE29B5E11EF8FB08351762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.182.0/23
Signature Algorithm: sha256WithRSAEncryption
92:db:98:f2:f1:3a:94:8b:78:aa:8a:2d:fb:a9:d8:22:51:f1:
5f:50:d9:47:74:0b:42:5d:3c:42:04:40:f9:6b:cd:00:13:00:
c5:17:ee:bb:55:11:15:9e:1e:4a:c3:d1:b2:af:ab:6f:a1:5f:
f1:ea:63:31:28:09:ca:53:6a:0c:b1:3f:03:e5:c8:0a:48:1c:
9f:7b:c4:14:36:4f:65:98:67:01:02:0a:0f:2c:67:ff:0e:48:
33:01:6f:67:c6:61:c5:52:12:81:3f:d1:f3:21:bc:2c:82:62:
d2:77:09:55:b5:01:a7:53:a9:be:fd:50:dd:b3:7e:0c:60:b3:
18:eb:65:b3:8f:b5:05:04:37:05:e4:1f:f1:2f:d2:9a:ee:a8:
06:23:4d:fe:dc:16:43:2d:33:1e:18:80:98:13:05:0d:ee:d2:
0e:ce:c1:fc:ce:82:91:65:02:f7:c4:3b:55:2b:8f:52:f5:39:
c8:9c:05:0d:08:92:83:e4:de:88:fb:f2:70:48:a5:37:39:b1:
26:49:a6:c2:05:2a:c1:5a:8d:b3:01:80:a4:57:b8:9f:4b:02:
4e:62:0c:64:0c:13:f1:d4:9e:43:0f:b2:eb:31:39:2e:21:3e:
86:10:16:f2:65:bb:02:16:d8:57:63:1e:dd:2c:31:d9:6c:dc:
8c:44:de:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:36 2025 by rpki-client