Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B26AE28CA64A11EFB045E8B9762E951A.roa
File: B26AE28CA64A11EFB045E8B9762E951A.roa (raw, json)
Hash identifier: bIhieyiihG2fFG7iD2jFoVvPRQni0vArB9LO3vVjMRs=
Subject key identifier: A4:D8:9F:C6:CF:EE:31:C6:A9:8B:27:8E:56:8C:C3:C9:25:FB:90:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B26AE28CA64A11EFB045E8B9762E951A.roa
Signing time: Tue 19 Nov 2024 07:48:42 +0000
ROA not before: Tue 19 Nov 2024 07:48:39 +0000
ROA not after: Wed 04 Dec 2024 07:48:39 +0000
asID: 62240
IP address blocks: 154.82.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69368 (0x10ef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 19 07:48:39 2024 GMT
Not After : Dec 4 07:48:39 2024 GMT
Subject: CN=673c42da-79ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:6d:5c:84:9c:c9:74:2d:b4:4f:53:ee:81:
25:fd:ce:58:5c:56:4a:ed:c0:5f:83:48:8e:cf:3e:
f2:27:1b:49:40:42:ac:d3:47:8c:2c:d0:72:7a:97:
ee:11:f4:5c:07:d1:65:b6:88:78:7b:1f:04:27:e2:
6b:a7:c7:76:4f:08:94:7a:76:dd:52:16:77:34:85:
f9:84:76:88:09:f5:3b:50:18:0a:7b:8a:e7:78:b5:
90:fc:80:e3:45:1b:e1:d3:ea:26:7f:fc:92:b2:7d:
85:bf:95:61:6f:56:a3:8f:1f:e2:da:d6:3c:94:d4:
44:15:3d:8e:14:ba:a9:93:83:6a:34:46:84:85:9a:
93:37:e5:4a:3b:65:17:91:e3:2a:fc:0a:bb:2a:e1:
29:7f:3f:67:50:52:64:55:c9:2a:68:47:f4:69:05:
55:f2:14:64:6d:ae:8f:06:87:b7:6a:f9:0f:a5:7f:
cf:d0:89:eb:6d:9d:a3:a4:7d:63:5b:09:28:d0:2c:
79:ca:1e:a3:8d:49:3b:c2:9d:58:fd:2d:c9:4d:06:
ac:48:6d:e7:2e:4a:e1:7e:ed:07:13:60:d9:5b:c5:
13:be:17:01:0f:73:fc:35:49:59:81:23:79:dd:85:
d6:9b:ee:8b:ce:af:88:52:13:60:fe:46:9e:de:3c:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D8:9F:C6:CF:EE:31:C6:A9:8B:27:8E:56:8C:C3:C9:25:FB:90:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B26AE28CA64A11EFB045E8B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.21.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:89:39:7a:8a:00:67:c3:28:ef:4c:2f:36:4d:57:70:02:36:
a9:a5:b4:87:c2:97:f7:47:11:12:27:2e:b0:00:32:68:d6:df:
14:a7:19:d0:2a:1a:54:5f:e7:16:18:d9:8b:fa:5d:b4:0d:bd:
43:fa:06:42:f9:6f:6e:49:c7:7a:f3:97:d0:f1:4d:2e:11:8f:
94:3e:d6:e2:65:f3:38:01:40:ae:89:19:14:39:22:75:f1:9a:
0c:af:e3:08:c8:13:36:c1:56:a5:21:f7:df:5f:e1:02:b2:8a:
b7:b1:5a:0d:9d:c0:58:23:15:ee:10:dd:a6:3b:cd:b7:da:bd:
d6:20:e5:e9:65:49:05:7f:dd:d9:19:1c:f3:aa:e9:f8:59:ab:
a7:79:85:3b:7f:1c:b4:f4:53:f9:d0:6a:e4:c6:90:4e:86:aa:
d2:b0:1f:22:7e:97:73:bb:ab:79:7b:4e:b6:d4:b6:af:c9:03:
2a:bf:82:e4:ba:c9:e7:36:30:9a:74:4c:01:ff:e9:9b:81:51:
53:f9:5a:55:e6:50:d4:d0:6e:cd:46:26:19:88:92:b7:0d:37:
a9:21:2b:b7:1c:9f:c5:aa:e0:61:32:b6:49:f6:e5:26:06:d7:
b2:f2:69:2f:b7:6f:be:ac:ec:25:a1:20:f6:c4:bb:f6:19:19:
2e:d7:60:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ74MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE5MDc0ODM5WhcNMjQxMjA0MDc0ODM5WjAYMRYw
FAYDVQQDEw02NzNjNDJkYS03OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApf9tXIScyXQttE9T7oEl/c5YXFZK7cBfg0iOzz7yJxtJQEKs00eMLNBy
epfuEfRcB9Fltoh4ex8EJ+Jrp8d2TwiUenbdUhZ3NIX5hHaICfU7UBgKe4rneLWQ
/IDjRRvh0+omf/ySsn2Fv5Vhb1ajjx/i2tY8lNREFT2OFLqpk4NqNEaEhZqTN+VK
O2UXkeMq/Aq7KuEpfz9nUFJkVckqaEf0aQVV8hRkba6PBoe3avkPpX/P0InrbZ2j
pH1jWwko0Cx5yh6jjUk7wp1Y/S3JTQasSG3nLkrhfu0HE2DZW8UTvhcBD3P8NUlZ
gSN53YXWm+6Lzq+IUhNg/kae3jyLwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKTY
n8bP7jHGqYsnjlaMw8kl+5AdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMjZBRTI4Q0E2NEExMUVGQjA0NUU4Qjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlIVMA0GCSqGSIb3DQEB
CwUAA4IBAQDIiTl6igBnwyjvTC82TVdwAjappbSHwpf3RxESJy6wADJo1t8UpxnQ
KhpUX+cWGNmL+l20Db1D+gZC+W9uScd685fQ8U0uEY+UPtbiZfM4AUCuiRkUOSJ1
8ZoMr+MIyBM2wValIfffX+ECsoq3sVoNncBYIxXuEN2mO8232r3WIOXpZUkFf93Z
GRzzqun4WauneYU7fxy09FP50GrkxpBOhqrSsB8ifpdzu6t5e0621LavyQMqv4Lk
usnnNjCadEwB/+mbgVFT+VpV5lDU0G7NRiYZiJK3DTepISu3HJ/FquBhMrZJ9uUm
Btey8mkvt2++rOwloSD2xLv2GRku12DG
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:11 2025 by rpki-client