Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9E75BA88E2411EF9995D96B762E951A.roa
File: D9E75BA88E2411EF9995D96B762E951A.roa (raw, json)
Hash identifier: z5460nl3p5/t/QfkL5HIABYP9DWViS5+LUyiLKaRaAQ=
Subject key identifier: FD:56:DE:76:D3:34:62:A2:D6:C9:E7:BA:97:02:24:FD:B6:3E:FC:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01000E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9E75BA88E2411EF9995D96B762E951A.roa
Signing time: Sat 19 Oct 2024 14:17:20 +0000
ROA not before: Sat 19 Oct 2024 14:17:16 +0000
ROA not after: Fri 22 Nov 2024 14:17:16 +0000
asID: 150698
IP address blocks: 154.197.119.0/24 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65550 (0x1000e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Oct 19 14:17:16 2024 GMT
Not After : Nov 22 14:17:16 2024 GMT
Subject: CN=6713bf70-dfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:8b:8a:80:51:35:67:4c:92:cf:34:aa:01:
9a:7c:66:3c:25:bd:fb:5d:f0:05:1e:13:7a:f9:41:
11:66:21:1f:3b:5f:03:5f:67:61:7a:f1:07:06:2d:
36:1b:54:63:20:0f:60:cd:ab:93:21:fe:26:5d:b7:
da:06:dd:be:39:df:35:4c:5a:f4:8f:c6:23:cd:41:
4b:78:fa:ef:c2:90:34:4e:93:72:62:f0:7d:09:c4:
bf:21:be:1d:9a:49:fd:6d:6f:4a:8f:f7:28:f0:c5:
be:0a:f1:ad:bf:44:c4:83:59:03:9b:fc:40:d5:22:
4f:1c:5b:dd:c1:29:d5:38:52:12:87:4e:f5:82:0f:
20:c5:89:a6:a0:e0:4d:83:0a:cf:60:c7:f6:2d:ea:
b3:da:6a:1d:2a:8f:00:79:2a:1e:f0:fe:48:a9:ea:
70:7d:4a:e5:ad:34:58:f2:e9:09:45:6e:76:a7:c3:
d8:91:bf:17:01:4b:12:1b:4e:48:82:b9:ba:4d:c3:
58:cf:05:97:43:89:1c:16:28:c6:4a:fd:b1:a8:9f:
a8:f0:cb:45:cf:be:08:0e:38:14:91:53:05:fc:ea:
b9:19:20:38:5a:3b:83:db:b7:38:8f:3f:46:e9:cb:
cc:77:b4:b3:de:46:9b:1b:d5:ff:44:27:f8:3e:d4:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:56:DE:76:D3:34:62:A2:D6:C9:E7:BA:97:02:24:FD:B6:3E:FC:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9E75BA88E2411EF9995D96B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d6:22:47:9f:50:71:22:bd:97:98:9d:4d:b9:05:e6:b3:6d:
21:a8:73:b6:5a:c0:df:16:40:c1:e1:d2:11:6b:8d:ce:7c:63:
91:ad:5a:4d:66:11:85:c6:bc:c7:2a:7d:03:f2:32:20:12:d6:
dd:9d:48:e7:60:d9:6f:b2:1f:7b:42:73:a0:da:b2:4b:bf:13:
5a:d2:8e:4b:4a:c5:7d:2e:7c:72:14:eb:3d:aa:2d:bc:65:70:
18:c5:0f:5d:4a:95:c6:5e:8c:5a:34:2b:13:5b:8c:82:2d:07:
84:45:21:d1:b6:9a:d5:a7:83:80:47:1d:40:c4:29:a9:27:3f:
74:b5:0b:b1:dc:1d:be:af:d3:b5:92:b2:17:21:0f:63:88:80:
f4:70:70:52:2b:b3:1e:a9:1c:cf:50:7a:2b:50:95:14:8a:ad:
94:9c:db:66:3a:98:1f:7e:64:89:9a:2c:b2:fa:1b:e8:28:31:
9e:63:e1:93:7e:5e:78:a0:10:8c:6a:3e:28:9d:35:64:95:db:
48:7b:60:f5:de:a8:72:1d:2e:d5:9a:9a:05:4d:97:7b:31:4b:
0d:33:52:1c:d8:89:11:8f:f6:a8:45:70:3b:55:45:16:2c:ad:
ef:67:8c:a4:30:6c:01:22:6c:ee:45:b6:93:4f:da:08:8f:9a:
10:16:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:51 2025 by rpki-client