Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE845A18A44C11EFA4032AAD762E951A.roa
File: AE845A18A44C11EFA4032AAD762E951A.roa (raw, json)
Hash identifier: cvenxf9WgNPdAuynWw6TI6eHklYGE7z/c7EbzhMBGQI=
Subject key identifier: E5:6B:3D:20:CE:7F:4C:F8:48:3E:55:6E:03:60:2C:F5:4A:16:1F:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE845A18A44C11EFA4032AAD762E951A.roa
Signing time: Sat 16 Nov 2024 18:57:53 +0000
ROA not before: Sat 16 Nov 2024 18:57:46 +0000
ROA not after: Mon 25 Nov 2024 18:57:46 +0000
asID: 7029
IP address blocks: 154.194.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69121 (0x10e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 16 18:57:46 2024 GMT
Not After : Nov 25 18:57:46 2024 GMT
Subject: CN=6738eb30-2e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:e0:f3:c7:db:a6:53:35:ba:4f:22:44:1f:
fa:fc:47:70:3b:48:11:f4:54:d2:84:4c:9d:e5:be:
2f:3f:ae:23:a6:df:f6:fe:7c:fd:20:9d:c1:6d:c4:
f8:fd:a2:f9:35:79:20:4f:83:9d:ee:cd:bd:97:b3:
31:02:08:5b:60:f6:ad:39:69:cf:7e:5c:fa:bd:35:
62:b8:33:32:e6:86:d6:f4:cc:c8:a2:1c:85:a1:9a:
84:a5:ef:0c:e3:f1:5b:17:6c:1f:54:2d:75:2b:00:
69:02:6c:6d:ef:80:8f:ea:de:5d:58:ff:8e:df:9a:
f8:2b:53:ad:19:14:4f:ab:2e:24:f6:61:c8:bb:ac:
78:a4:0d:b2:6c:e4:f5:92:ad:02:d2:54:54:0c:0e:
19:f6:a6:fd:a0:5d:89:af:6d:af:f2:90:06:b0:c4:
74:e0:56:1e:51:95:a9:cf:4b:72:3e:1e:7b:90:dc:
8c:4a:4b:17:1b:81:b1:34:9f:8a:4a:7a:5e:79:b7:
33:05:0b:95:b8:92:b7:8e:d8:e5:0b:75:0d:8f:21:
bd:5e:8f:e8:8f:4b:14:0c:45:81:5d:a6:d1:73:a4:
2a:f7:bc:ec:0f:2c:51:08:0c:f3:f5:b5:f8:be:c4:
04:92:ce:76:b8:53:68:f6:ee:34:a4:e8:2f:e8:93:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:3D:20:CE:7F:4C:F8:48:3E:55:6E:03:60:2C:F5:4A:16:1F:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE845A18A44C11EFA4032AAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:2e:57:df:38:48:1d:24:df:4e:d6:da:88:77:f2:8b:86:33:
98:41:bb:7d:d9:ec:c0:db:67:02:c3:24:8e:31:54:a0:ff:72:
b1:00:79:c8:2d:ed:f0:50:a7:19:a1:f3:16:5a:b3:73:d8:6d:
2d:79:09:b5:9f:40:08:80:f1:78:a5:86:87:b4:5d:ea:ed:cb:
01:ab:ae:b8:2b:98:4c:c4:b4:3f:f8:bb:bf:e4:8a:ee:72:16:
a5:53:2a:2b:82:69:92:79:c2:c4:c6:c4:73:ba:65:ed:42:bf:
a8:75:03:fb:82:b4:83:4e:c4:00:a3:05:5b:5e:43:8d:af:da:
2a:9a:0d:4f:2f:db:71:d3:52:35:85:48:56:ea:fa:af:c6:d0:
8e:c8:bf:57:81:42:5a:8f:8c:54:74:6f:49:c3:3f:d6:08:cc:
46:23:a3:c0:b3:65:2a:ad:a4:14:45:aa:03:0a:1f:9f:c1:a0:
03:74:e3:dd:f6:a5:fb:ed:fd:9e:52:fa:d6:82:9d:71:ba:9b:
96:27:82:16:53:09:67:a1:c8:bf:3d:cd:b0:e6:be:2c:32:b2:
75:89:be:67:e4:08:6f:fa:64:46:63:e4:cb:c4:4a:82:dd:4b:
cc:96:ae:61:ce:27:1d:fb:d8:61:43:07:23:66:fb:e2:cf:b6:
2d:ba:8c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:05 2025 by rpki-client