Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A4A9FA727111EFA88DF386762E951A.roa
File: B4A4A9FA727111EFA88DF386762E951A.roa (raw, json)
Hash identifier: B5ohNHtv4UwXK5oJenWHl5sItHIlrJRqkakHvPo7qMA=
Subject key identifier: 60:92:BA:13:8A:51:F3:32:D1:39:4A:D9:73:72:0B:4D:DE:F7:45:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EE32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A4A9FA727111EFA88DF386762E951A.roa
Signing time: Sat 14 Sep 2024 08:16:56 +0000
ROA not before: Sat 14 Sep 2024 08:16:53 +0000
ROA not after: Wed 25 Dec 2024 08:16:53 +0000
asID: 29802
IP address blocks: 154.202.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60978 (0xee32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Sep 14 08:16:53 2024 GMT
Not After : Dec 25 08:16:53 2024 GMT
Subject: CN=66e54678-7e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9f:c3:26:0c:6b:4e:a9:ae:e6:09:4f:9c:ae:
60:17:4a:88:58:36:5e:e4:23:85:50:51:b3:40:a7:
27:2f:27:f2:54:80:01:ce:f1:77:ea:4f:e9:a7:af:
82:9f:2d:c4:d6:c8:ef:3c:82:cd:9f:c5:a8:52:c2:
12:fb:7c:52:82:ae:d4:3e:40:65:4b:d5:85:96:c1:
68:48:d3:bf:6d:4f:c2:7e:4a:36:8d:c7:2a:21:b4:
f2:c5:e7:70:28:5d:a7:13:da:2d:55:19:8c:89:c9:
5c:1d:9c:13:73:79:9d:a9:37:22:fd:16:fb:8f:8a:
79:a0:f3:38:b3:87:b9:6e:a6:cc:39:07:56:ba:2e:
b6:1b:c2:72:04:6b:ab:cf:8d:70:f2:2d:3d:d1:9d:
a1:df:23:15:2f:21:14:4c:25:c4:73:d6:4e:95:6b:
e6:06:b5:94:10:4a:b1:88:e5:25:a0:28:62:09:55:
f5:49:8c:32:6d:3f:4c:e5:54:d8:8a:6e:40:af:e8:
1f:21:4e:1e:be:bd:f7:3d:5f:aa:74:80:4c:27:dd:
07:45:3b:ef:e8:6d:ab:91:44:ec:bc:4c:98:a7:74:
7c:f2:d0:78:de:f4:e7:a7:e3:54:12:e9:9c:dd:4d:
79:08:d5:25:f0:f9:90:b9:b1:58:9e:dc:e7:62:db:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:92:BA:13:8A:51:F3:32:D1:39:4A:D9:73:72:0B:4D:DE:F7:45:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A4A9FA727111EFA88DF386762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.100.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:c1:9e:a4:8b:7d:dc:91:8c:2a:ad:7b:1f:4f:6f:07:39:69:
98:42:9e:18:87:55:6a:31:0a:d1:34:87:93:e1:6f:f2:c7:c0:
f4:9d:d3:08:68:ee:04:ab:d8:2f:7e:52:72:f3:62:91:d9:70:
40:1a:e7:49:9b:81:6a:de:4d:b6:6f:97:a6:05:2a:8d:72:75:
03:9a:0b:cd:b9:e8:98:e8:c5:ac:b5:ff:76:6e:31:51:3a:47:
44:f1:82:8b:77:96:f6:96:26:1c:25:87:0d:b5:0c:5f:8f:03:
c4:c1:5f:72:59:93:dc:83:4d:8d:33:16:ab:78:4c:2a:cb:7c:
9f:1c:5e:65:aa:c1:8c:f2:b4:8a:4a:b8:e6:7b:8d:8e:7f:71:
c0:a8:4f:35:de:49:43:c6:be:0d:1c:9f:9f:fc:74:67:cd:22:
84:7d:9f:a1:e8:b3:9d:d9:71:e9:bf:d9:c2:31:07:a1:07:2b:
4e:e6:1d:5e:fe:74:5c:09:cf:08:dc:f8:82:e5:09:59:a3:17:
14:4e:55:27:ca:bb:28:58:5f:51:e9:a9:13:e6:4a:51:e1:b5:
7b:a5:68:f9:ee:13:0c:da:d8:37:9d:7a:12:64:e2:3f:1d:37:
53:9f:b5:10:78:d1:78:6c:f3:52:3c:72:d0:66:7d:64:ae:c9:
8b:8f:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:52 2025 by rpki-client