Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D97000EEDA4B11EFBE361BB7762E951A.roa
File: D97000EEDA4B11EFBE361BB7762E951A.roa (raw, json)
Hash identifier: 3sOc1DFtBbdiz801pCzUBlfQIkakhuYR2upynkdsAy4=
Subject key identifier: FE:E5:10:95:BC:FF:9D:DC:79:14:9C:67:D3:C4:0E:E9:45:71:B9:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014681
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D97000EEDA4B11EFBE361BB7762E951A.roa
Signing time: Fri 24 Jan 2025 12:07:58 +0000
ROA not before: Fri 24 Jan 2025 12:07:53 +0000
ROA not after: Wed 05 Mar 2025 12:07:53 +0000
asID: 49505
IP address blocks: 154.211.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83585 (0x14681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 12:07:53 2025 GMT
Not After : Mar 5 12:07:53 2025 GMT
Subject: CN=6793829e-cf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:df:74:4a:9e:ff:00:80:be:51:40:7d:60:
1c:17:40:d2:c7:59:f5:d3:05:5f:10:29:04:3e:05:
68:f1:4c:82:4d:bd:f6:e0:d1:fd:73:9d:ff:81:2d:
23:c2:3f:6d:50:43:76:c2:9d:e9:42:1c:be:f4:3c:
02:19:94:54:17:d7:47:3a:9a:ae:84:a8:e8:48:10:
2d:25:27:18:75:a9:b2:33:7c:99:ac:25:69:31:73:
cf:2f:8a:98:08:a8:a8:28:a1:db:7d:67:7d:bf:92:
4c:1a:dc:03:9a:44:9e:96:03:1e:bb:18:11:cf:e1:
3c:37:08:70:bb:42:9b:60:9a:7e:15:db:08:5b:b6:
fc:e0:56:9c:a4:96:f8:8f:7f:5a:99:c6:aa:d3:4c:
3c:b4:22:87:6c:56:00:bc:28:e0:60:cf:32:0c:b7:
1c:8c:8e:39:89:d9:7c:4c:db:2b:26:da:82:09:1c:
04:dd:ff:4c:09:a6:60:c5:8a:45:bd:eb:51:1a:74:
c8:d7:52:bf:e9:19:56:bc:f3:14:11:ed:e5:46:95:
2f:86:fa:72:c3:ad:39:0e:91:4b:4d:59:39:32:31:
10:59:e7:39:74:15:8e:02:c6:c8:8f:34:e0:9d:91:
b6:93:c8:1a:f9:c4:78:dd:09:5e:04:f3:59:cf:ef:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E5:10:95:BC:FF:9D:DC:79:14:9C:67:D3:C4:0E:E9:45:71:B9:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D97000EEDA4B11EFBE361BB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:fd:77:53:ba:5c:c5:79:92:fe:12:1f:12:2c:9e:13:13:27:
98:0e:b2:18:39:b4:2d:7b:30:39:dd:29:7b:c3:1a:0c:68:0d:
f1:2a:3a:38:5f:ac:f2:32:3f:60:60:fb:ac:d2:1e:13:dc:e1:
b5:43:47:42:41:1e:58:8e:a7:b7:cf:58:84:56:d8:62:8b:58:
c0:3b:a0:cd:fa:b6:f2:6e:43:98:73:52:ac:96:02:a7:6b:b1:
9a:df:11:f0:7e:05:4d:e8:10:1e:12:af:6b:17:2b:00:a8:a8:
8e:9f:f6:53:36:da:77:91:56:c9:59:0a:13:40:3d:38:ed:d6:
c6:3d:97:83:f5:21:75:4e:25:0f:ac:35:11:ab:5c:cd:85:a0:
d4:87:a7:05:e3:67:79:11:cb:99:44:b9:b2:16:52:37:52:dd:
8e:a8:8d:59:f0:59:11:41:10:63:7e:79:57:ed:88:43:6d:30:
c0:7b:69:a3:95:9b:bc:39:5e:89:4e:89:09:6f:f0:d1:9b:1a:
19:b5:5c:56:04:cc:3f:3a:2b:d0:62:c8:59:73:fb:f8:e1:b5:
4e:31:96:fc:4b:52:f1:dd:7e:f0:9c:36:76:b9:42:4b:b1:dc:
01:14:b2:f5:87:45:1c:8e:fa:61:7f:c7:7b:0b:ca:c6:f1:68:
99:be:54:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:54:30 2025 by rpki-client