Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9A80FDCA44C11EFA80431AD762E951A.roa
File: D9A80FDCA44C11EFA80431AD762E951A.roa (raw, json)
Hash identifier: gLOwccETPiMv9t8Ecge3y7AcZkGejQuwKpAA7BUnjRA=
Subject key identifier: 2B:F1:44:85:EF:30:CE:38:5A:BC:B7:02:39:E0:7E:18:3B:2A:D6:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9A80FDCA44C11EFA80431AD762E951A.roa
Signing time: Sat 16 Nov 2024 18:59:05 +0000
ROA not before: Sat 16 Nov 2024 18:58:58 +0000
ROA not after: Mon 25 Nov 2024 18:58:58 +0000
asID: 22773
IP address blocks: 154.194.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69123 (0x10e03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 16 18:58:58 2024 GMT
Not After : Nov 25 18:58:58 2024 GMT
Subject: CN=6738eb79-4910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:cb:41:19:f0:fe:38:6e:d9:50:4b:ce:81:
52:12:43:1d:1a:22:b7:96:8f:97:2a:a7:18:16:0f:
17:3c:ce:41:8b:83:1d:2a:fa:69:1a:30:01:7b:22:
52:51:1f:d9:78:ac:a9:3c:b1:41:f0:5f:61:8a:22:
eb:41:b3:1e:35:a8:09:fc:a3:f8:11:6e:32:d1:97:
4b:5c:e2:49:dd:b2:af:7d:11:46:10:d3:70:2f:9d:
8e:5d:e5:57:46:e2:60:e9:dd:32:8e:87:da:ee:4e:
b3:5f:43:78:91:0b:d8:92:83:2c:37:d6:68:18:0f:
4a:02:39:31:3a:b9:4e:1f:15:b2:e8:54:15:2b:2d:
81:7a:a2:ae:a3:ea:19:52:b9:52:8a:a6:03:8b:11:
06:dc:36:d6:5f:03:30:e1:d2:59:db:81:dd:51:eb:
8a:6e:0b:cb:da:bd:04:09:87:11:16:9f:dd:4c:0f:
22:cd:97:1a:60:9c:0b:e1:c0:3d:9f:ee:de:f1:bd:
98:b9:8d:71:f8:64:ab:07:75:e4:51:5b:f4:50:5b:
a5:21:93:22:9c:d0:71:91:ba:39:a2:a6:e6:9f:89:
55:14:d1:68:32:ff:03:e1:e4:88:32:80:84:9a:5c:
af:3e:2a:01:56:c0:7b:a3:b4:32:46:ab:76:5f:7d:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F1:44:85:EF:30:CE:38:5A:BC:B7:02:39:E0:7E:18:3B:2A:D6:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9A80FDCA44C11EFA80431AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:3d:27:d6:d1:88:75:04:67:be:f6:6a:7a:7d:a3:8a:10:2e:
f5:49:8c:2e:ec:a0:4b:b0:4b:36:85:8d:b2:0d:66:7e:63:7b:
fe:86:31:be:09:ef:b6:44:6c:5b:7a:aa:21:14:7c:ce:30:da:
d4:47:a5:1d:7f:2a:95:bc:af:93:2e:33:ac:4d:57:69:dd:5e:
ec:d8:6f:11:87:18:de:93:56:53:89:84:53:64:09:85:c3:99:
30:56:0a:b0:38:18:d8:8f:a1:12:c1:28:3e:72:16:98:99:3b:
80:83:73:d6:2b:39:81:fd:21:53:da:8c:b8:9b:2c:c2:13:77:
70:ed:46:c0:9b:63:9f:71:68:78:85:ad:4d:fb:c5:a2:ef:3c:
3c:a2:3c:8f:62:3e:90:c6:80:78:72:75:54:4a:46:23:35:be:
12:4f:2e:fc:21:39:ed:d5:21:4b:4b:a4:e4:06:3f:1a:ad:cb:
6e:0e:1a:e2:df:cf:84:81:04:80:e7:a0:98:0d:d7:76:34:86:
49:69:ac:27:40:ce:a4:03:07:6b:d1:cd:6b:28:b3:be:45:be:
fe:e8:b0:48:3a:7e:06:60:70:f8:c2:82:85:c5:4d:cf:6e:0c:
60:f2:62:1b:b2:a5:4c:3e:4f:75:a4:28:b9:58:f0:f4:a5:13:
1f:d1:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:27 2025 by rpki-client