Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2EBA6D2A33A11EF8B65CA81762E951A.roa
File: B2EBA6D2A33A11EF8B65CA81762E951A.roa (raw, json)
Hash identifier: tcYS3DNuHGEzOWhLR1Eeeo3UaaAsOnkU1fGEBy4JZHo=
Subject key identifier: C6:6E:9A:6B:5F:85:F1:BD:69:B3:F7:18:2A:94:E5:56:96:8B:B2:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2EBA6D2A33A11EF8B65CA81762E951A.roa
Signing time: Fri 15 Nov 2024 10:16:38 +0000
ROA not before: Fri 15 Nov 2024 10:16:34 +0000
ROA not after: Mon 25 Nov 2024 10:16:34 +0000
asID: 7018
IP address blocks: 154.207.156.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69018 (0x10d9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 15 10:16:34 2024 GMT
Not After : Nov 25 10:16:34 2024 GMT
Subject: CN=67371f86-4029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:9b:e8:f9:d4:8c:e8:62:93:d7:ae:4a:0c:
82:56:14:c5:1d:81:98:82:bb:e9:f8:3e:37:3e:f6:
f3:69:bd:c1:6d:67:38:0f:fb:ac:12:0c:fe:9c:3f:
9b:70:6c:07:ac:df:23:8b:9b:9b:dc:77:34:8b:f5:
e3:06:d8:44:8b:a2:d8:8c:d8:de:bb:9d:0b:0c:b5:
73:b0:30:ff:36:ef:1f:88:af:e9:3a:af:a4:4f:97:
d8:fe:27:17:46:1d:f4:e8:8f:55:eb:ff:3e:e2:38:
47:bc:d7:cd:b3:ae:a3:0a:e8:ec:74:57:9a:ca:3b:
70:0f:59:8a:61:14:fa:f3:85:33:78:ad:c6:a1:53:
70:39:ac:01:f7:51:52:52:0c:4f:f3:c2:4e:12:e0:
4f:71:da:49:44:1b:f6:81:c9:e8:ae:38:2d:2d:03:
91:16:57:a4:fd:14:4a:82:c5:34:76:d2:2d:dc:af:
dc:46:b6:f7:d8:2e:07:2e:c1:ca:0a:ca:8d:a6:bd:
67:31:35:8f:19:1c:a3:9b:19:05:d3:fa:43:af:e9:
2d:7d:69:8d:be:6a:f4:01:12:e3:e8:76:2e:37:5d:
b2:cf:72:46:a8:95:e4:4f:d5:22:95:f0:ca:5d:dc:
97:8b:49:c3:b5:27:00:c0:e3:bb:07:14:88:3f:1c:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:9A:6B:5F:85:F1:BD:69:B3:F7:18:2A:94:E5:56:96:8B:B2:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2EBA6D2A33A11EF8B65CA81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.156.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:a7:1d:79:30:69:ab:ed:d9:b4:09:55:7f:16:e1:87:88:62:
a7:75:d4:42:ec:61:4d:fd:be:5b:fc:93:1b:d0:51:17:5c:8b:
eb:59:21:a7:5c:77:87:a7:77:b1:6f:b3:3c:64:26:71:3e:48:
cf:2d:e3:30:2c:ef:fe:66:8f:e0:da:0b:de:bd:ba:27:47:04:
14:55:e8:61:74:dc:41:07:16:9c:2f:23:d7:ff:a5:8b:67:82:
85:d9:da:ce:65:9d:68:49:ee:f6:e6:6d:5e:6b:78:d0:82:20:
c4:28:7a:a4:b6:f9:e6:df:ee:0d:72:7f:46:21:3e:64:d3:0c:
1f:a0:ee:77:4d:30:1d:55:ce:b8:cd:5c:c7:dd:fa:7c:04:02:
f5:b2:53:71:60:e1:b4:6f:73:b0:72:d2:f7:c2:0b:95:c6:7d:
c1:7e:c9:58:f5:8d:13:42:58:7c:71:a5:8c:46:50:e1:60:29:
19:3f:f4:ce:ab:7b:cc:ba:ba:91:95:1d:70:ca:3c:52:f9:f7:
4d:79:aa:1e:fb:4f:54:fe:4d:d9:b8:de:12:3e:21:a1:3d:df:
60:88:61:bf:68:e4:77:6f:f8:27:95:46:4c:8e:ab:32:82:54:
05:17:c0:f7:70:3c:f5:4b:7b:b0:41:54:ef:16:96:bb:3b:01:
0b:02:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:08:38 2025 by rpki-client