Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFB971FC8F8D11EF8F9DCF55762E951A.roa
File: BFB971FC8F8D11EF8F9DCF55762E951A.roa (raw, json)
Hash identifier: +eLILdZaTUfIUmOOr53aIvY2D3edJGLPWKdMBgvEtkE=
Subject key identifier: 7F:FF:C0:C1:76:24:2E:4D:06:53:C3:EB:9E:EC:00:AE:EB:55:C8:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010052
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFB971FC8F8D11EF8F9DCF55762E951A.roa
Signing time: Mon 21 Oct 2024 09:20:44 +0000
ROA not before: Mon 21 Oct 2024 09:20:40 +0000
ROA not after: Tue 26 Nov 2024 09:20:40 +0000
asID: 62240
IP address blocks: 154.195.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65618 (0x10052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Oct 21 09:20:40 2024 GMT
Not After : Nov 26 09:20:40 2024 GMT
Subject: CN=67161cec-e047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:5c:2a:ce:1b:48:be:f0:16:02:17:52:f1:
4c:b7:14:a4:05:93:25:84:15:a5:a4:ed:ce:86:de:
c7:d2:ec:f8:bc:8d:43:1d:d4:28:c3:11:e7:ab:71:
af:f3:42:aa:f4:17:81:6c:fd:62:56:05:7a:d6:ae:
d8:69:7f:60:b3:48:e1:a9:53:e5:94:dd:2d:2b:c7:
86:50:f7:ef:33:a9:76:89:0b:46:ff:8b:bf:a7:21:
09:da:15:f5:77:36:e6:a1:22:63:35:79:dd:09:74:
80:bb:fa:54:3f:f4:12:b7:1b:79:4a:05:16:18:87:
ba:d3:43:dd:2c:d2:6d:b9:7f:8f:c0:eb:e0:c4:62:
67:29:eb:ed:e8:f1:28:1f:5e:f0:66:2b:c3:80:61:
9d:8b:e8:cd:ca:3e:e6:c6:83:ec:97:6a:b4:7b:77:
ce:61:6c:ea:2c:9b:48:b9:17:d1:6d:17:c0:2a:19:
d4:5e:59:04:99:bc:40:46:67:43:02:d1:ed:96:a4:
9e:89:0b:0a:83:19:b7:11:e3:09:86:e0:5e:b2:a7:
76:30:2e:73:68:a2:f8:15:86:61:42:5a:6d:6e:9a:
f9:e7:91:56:51:ff:11:cd:98:10:d8:5b:eb:96:ea:
95:1f:10:85:cb:fa:fc:b9:0e:bf:47:ba:e4:33:31:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FF:C0:C1:76:24:2E:4D:06:53:C3:EB:9E:EC:00:AE:EB:55:C8:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFB971FC8F8D11EF8F9DCF55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.6.0/23
Signature Algorithm: sha256WithRSAEncryption
85:fe:a6:78:9d:fd:00:c2:99:8f:c7:b4:96:f4:e2:e3:d2:ab:
40:2b:e6:05:c9:0a:8f:05:17:88:01:67:f6:f5:33:8c:29:be:
28:43:25:3f:3f:32:cf:a2:83:0a:6a:d1:91:03:6e:cc:16:92:
e9:d6:72:43:5a:0d:9e:34:c8:cd:a2:e0:81:64:46:73:e3:49:
e1:68:7a:41:8b:89:2e:40:0c:85:79:e4:72:52:d2:f9:de:1d:
d6:36:50:3c:ef:e4:6f:e8:a6:58:b0:8f:b4:4e:47:8f:d5:71:
43:54:e4:ac:f0:ee:c4:44:d8:be:a2:f9:fd:a4:fe:c9:d7:eb:
26:47:18:c5:02:1c:85:81:6a:9d:cf:65:5f:20:d0:7c:ba:c5:
71:72:fe:88:b6:6a:74:28:43:49:c4:60:0e:e0:01:a4:00:e7:
b5:2b:cb:99:b2:ca:3e:5b:fd:ba:e2:06:b5:e2:d6:98:d1:1b:
fe:ea:f8:6c:d3:1f:ea:0f:83:23:af:27:bf:04:f9:21:40:54:
b3:e9:dd:18:be:30:15:71:41:ee:59:41:38:48:7b:19:e3:28:
0b:40:a5:39:a5:d7:ea:97:1f:fe:f8:a6:f3:5b:52:09:42:f0:
4f:bf:25:40:ed:82:ed:50:89:3d:f8:f7:d7:86:8d:f4:04:6f:
3a:2d:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:54 2025 by rpki-client