Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B07A572C9B6F11EF9508E6B9762E951A.roa
File: B07A572C9B6F11EF9508E6B9762E951A.roa (raw, json)
Hash identifier: SA9IZASsRu/MOb1N1gJTaY8ZKamI0nQ9rGNCrvLb15A=
Subject key identifier: E3:F2:43:9D:62:26:BC:C6:62:5A:24:A8:D9:C3:BA:9C:7B:75:37:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B07A572C9B6F11EF9508E6B9762E951A.roa
Signing time: Tue 05 Nov 2024 12:15:48 +0000
ROA not before: Tue 05 Nov 2024 12:15:44 +0000
ROA not after: Mon 13 Jan 2025 12:15:44 +0000
asID: 22773
IP address blocks: 154.88.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67495 (0x107a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 12:15:44 2024 GMT
Not After : Jan 13 12:15:44 2025 GMT
Subject: CN=672a0c74-6e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:8d:58:69:35:4d:3b:ee:8f:43:b0:c1:71:
c6:23:93:65:2b:78:a1:d1:e4:9e:cb:7b:04:f4:f4:
77:94:b8:fd:71:ae:c0:81:13:2f:d3:fb:47:eb:38:
b2:f7:ae:97:df:bf:9e:b0:41:0e:7f:a1:53:6d:fc:
25:22:18:51:ac:47:fd:de:e8:59:58:1a:73:5a:39:
07:86:f0:85:e2:77:40:62:8b:ff:6e:cc:c4:62:9d:
23:7c:fe:b1:c2:c2:a2:80:60:59:ec:42:07:3c:50:
bc:e4:04:52:ec:a6:e0:2f:2f:a1:af:34:7c:51:91:
81:c8:a2:23:c5:f8:0f:6e:2d:50:de:c6:75:1d:6c:
45:ab:ba:a7:8d:73:d9:18:5e:e8:3b:8a:24:cc:e1:
22:34:ef:aa:46:24:88:aa:1d:b6:f1:5e:f2:c7:18:
71:41:7e:fc:68:d1:10:80:ad:1d:39:74:6a:f0:61:
00:72:8a:76:14:a7:72:58:7b:96:f8:6e:0d:9e:78:
fa:6f:00:89:47:3c:d4:79:3f:eb:ff:2a:b1:d4:fb:
01:59:04:fc:63:b0:f6:6f:dc:e6:ba:48:0b:7f:c2:
57:e2:5d:b7:73:f3:02:cd:8c:3d:72:45:1f:51:2b:
dd:03:ad:e4:e5:a4:2a:60:f8:9f:a8:08:c9:26:47:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F2:43:9D:62:26:BC:C6:62:5A:24:A8:D9:C3:BA:9C:7B:75:37:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B07A572C9B6F11EF9508E6B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.10.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:4f:db:5a:64:e1:4e:39:18:f3:b5:e1:54:dd:dd:0c:db:0b:
45:9f:72:03:5d:e6:c2:93:10:b2:9a:79:10:49:f7:95:f0:7e:
1a:72:12:84:df:2f:37:53:15:ff:e9:51:a1:2f:77:57:d4:81:
06:f0:b5:f9:88:93:59:e5:08:75:29:96:bf:c9:e4:8b:07:31:
9f:bc:bf:77:dc:fa:42:ed:2e:7d:98:d1:f8:59:e2:8f:3d:6e:
19:a2:b3:3d:ba:71:c5:e6:b3:1a:b3:0a:64:14:4a:83:30:f6:
c0:7d:6c:f6:7b:e9:85:8c:e3:6b:e7:d7:75:87:36:bd:c7:87:
4a:60:c4:c6:56:6b:81:80:42:c6:53:f3:34:a6:d1:27:2e:27:
7e:38:8a:4f:36:4d:28:07:46:af:6f:36:0d:66:00:85:b3:2b:
ec:39:e4:0c:de:04:eb:77:1b:86:0c:eb:7e:a5:d4:f8:f8:5b:
66:e5:30:7a:d7:ea:10:41:43:03:3d:90:b0:08:d1:01:d9:50:
4b:cf:19:2d:aa:12:26:5b:bb:2a:d4:00:b5:61:39:30:20:60:
fd:d5:98:aa:b9:92:75:0e:0b:02:2c:38:57:1d:a8:ff:52:cc:
9e:79:c3:77:ea:97:76:39:7a:29:b1:f5:78:a0:4d:9d:db:9c:
35:2e:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:00 2025 by rpki-client