Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0D10CA69B5C11EF96CF9644762E951A.roa
File: B0D10CA69B5C11EF96CF9644762E951A.roa (raw, json)
Hash identifier: AHi/LJiUeFbdM9nF5ydBqtdJTRn5WTNItrv0n9L2LCI=
Subject key identifier: E7:2E:3C:EE:B0:53:DA:AD:AB:F6:7B:4E:64:01:E1:19:6E:9E:E1:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010781
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0D10CA69B5C11EF96CF9644762E951A.roa
Signing time: Tue 05 Nov 2024 09:59:48 +0000
ROA not before: Tue 05 Nov 2024 09:59:44 +0000
ROA not after: Mon 13 Jan 2025 09:59:44 +0000
asID: 7018
IP address blocks: 154.83.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67457 (0x10781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 09:59:44 2024 GMT
Not After : Jan 13 09:59:44 2025 GMT
Subject: CN=6729ec94-51d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:ff:36:8d:3e:67:c7:aa:6e:96:4e:5c:d1:
bd:4f:f1:dc:0d:70:38:5b:ff:49:dd:59:d0:12:c9:
53:3d:76:6c:44:9d:e9:1c:2e:70:10:c3:19:6f:12:
77:6e:59:41:26:f2:be:4b:90:0c:45:46:52:0b:d6:
98:b7:a5:51:b1:42:a4:42:51:ff:d9:67:e7:96:52:
4f:6a:69:6b:b2:eb:ff:f9:39:c2:18:e6:45:b0:fb:
ca:9b:11:bf:3c:75:f0:d9:7e:bc:6c:84:02:85:9f:
2a:9f:5b:54:bd:c8:26:00:33:2b:79:b1:4e:96:37:
10:e2:e8:90:17:44:b6:59:79:08:79:fd:4b:5f:19:
f2:bd:4c:3e:76:21:cc:c3:0b:b1:ed:27:77:23:a7:
8a:6c:69:d8:b6:ce:81:e5:a2:9e:cf:4b:1e:42:29:
a3:7b:c4:08:15:7a:1c:fe:73:05:9d:4b:30:62:e5:
e0:e8:f9:42:2c:5a:2e:ad:63:f7:7e:d7:a9:08:c6:
32:a2:40:70:d6:41:f9:71:f6:bd:53:f8:99:8b:39:
44:a1:38:93:c6:dc:56:37:d5:5f:fc:83:f8:cb:a0:
1d:24:c3:48:84:fe:8e:28:c0:39:68:7a:d1:a2:b2:
cd:07:04:d9:a0:a7:7f:fa:75:fa:5c:c6:bb:6c:83:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2E:3C:EE:B0:53:DA:AD:AB:F6:7B:4E:64:01:E1:19:6E:9E:E1:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0D10CA69B5C11EF96CF9644762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.192.0/20
Signature Algorithm: sha256WithRSAEncryption
58:07:a9:d4:e6:69:9a:18:fa:3a:18:4a:92:8e:b5:43:bc:b7:
ff:69:f3:2d:7d:10:cd:62:2b:d3:8f:92:c3:c3:03:aa:63:10:
e6:06:53:f8:c6:2a:c5:35:d8:78:45:cd:57:8a:4c:cd:e3:63:
11:9c:7d:35:8a:84:98:b3:44:f2:79:e9:f3:b4:62:84:ed:fd:
31:05:e6:fa:9e:07:00:02:bc:dd:82:b3:3d:e0:d3:3f:c4:37:
d2:33:47:6b:6a:8f:00:5a:dc:b0:29:0b:1e:e9:15:c9:6f:05:
53:03:92:4e:ee:25:b3:5e:7c:28:98:98:18:f8:04:e2:cc:0c:
25:c3:5c:7b:64:15:19:35:2d:8d:c2:61:dc:8e:a6:be:23:0a:
d1:9d:41:02:df:41:7a:d0:79:f9:f0:b0:6f:70:04:5e:79:2a:
f6:c2:36:a3:76:1e:3f:72:91:c4:6d:10:30:e5:f0:0d:d7:28:
84:10:97:42:a1:c4:9a:69:c7:8c:0c:65:91:a7:74:25:42:c2:
b5:1e:45:9d:fc:0d:f1:7d:38:3f:7b:5c:a5:f8:bc:b5:f3:23:
b3:50:55:8d:ef:ef:47:9e:99:0e:92:8d:da:84:70:2c:88:e0:
82:b5:a6:3b:55:c7:73:46:14:2e:4b:4a:a8:a5:55:86:1a:f1:
8a:e7:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:57 2025 by rpki-client