Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E77589B2DB2111EFB6F54C60762E951A.roa
File: E77589B2DB2111EFB6F54C60762E951A.roa (raw, json)
Hash identifier: hx4rlVzjnVpi7LJ8aIxVmlfDCc1mnyNW5Hu5qwwxd9k=
Subject key identifier: 2F:34:85:4D:F6:1A:4B:5A:FF:17:F4:DE:F1:FB:AF:C2:A9:D0:4A:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01499C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E77589B2DB2111EFB6F54C60762E951A.roa
Signing time: Sat 25 Jan 2025 13:40:13 +0000
ROA not before: Sat 25 Jan 2025 13:40:10 +0000
ROA not after: Mon 03 Mar 2025 13:40:10 +0000
asID: 49505
IP address blocks: 154.209.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84380 (0x1499c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 13:40:10 2025 GMT
Not After : Mar 3 13:40:10 2025 GMT
Subject: CN=6794e9bd-70fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:50:52:ca:d0:f1:e2:3e:a3:f3:cb:99:9f:
e4:91:e6:f3:40:90:bf:b7:7c:44:75:e0:7f:29:74:
d6:8d:86:de:1a:f7:b2:e1:0b:83:cc:2f:bd:0f:c6:
0a:77:44:24:3f:be:06:dc:d8:ad:b8:65:e4:9a:3b:
e6:41:e3:08:e9:45:a4:63:e1:ab:fc:dd:d6:41:82:
c1:b6:70:48:4f:7a:e1:4a:2e:93:06:f0:64:6a:89:
50:34:24:aa:a5:0a:01:a2:28:bb:9f:2b:d9:9c:73:
cc:4e:ee:33:c0:e9:85:ac:ba:0f:e5:94:4a:86:6c:
5d:89:fa:fb:bf:96:e7:51:5a:8c:03:5d:af:f5:55:
ad:04:b4:6c:dd:1f:68:b4:9c:61:ea:71:48:c4:4b:
f6:87:51:60:44:b7:e6:08:c2:31:b2:8d:86:23:e7:
61:68:9a:e4:73:ea:1f:39:a3:6c:29:39:33:f3:7c:
de:fe:2c:bf:3f:c0:6e:d1:69:12:c4:78:b8:25:ec:
f2:10:f9:2f:ef:7f:3f:91:57:18:29:d0:0b:a9:bc:
3f:ba:da:c7:46:54:35:d2:75:55:a0:61:a4:4d:a6:
44:ad:37:7b:67:3c:ab:12:0e:6c:cd:68:87:68:e6:
0c:b9:5d:eb:0d:c0:f2:3c:cb:28:1c:77:8d:6b:75:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:85:4D:F6:1A:4B:5A:FF:17:F4:DE:F1:FB:AF:C2:A9:D0:4A:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E77589B2DB2111EFB6F54C60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a8:5e:2f:3d:85:8e:cc:24:c7:cc:c1:e9:50:5a:c6:69:9a:
f6:e1:2f:99:19:92:7b:5d:2b:d2:03:08:ef:8c:9d:1e:65:d9:
ff:36:fe:e3:77:56:51:0e:48:0c:40:61:05:b5:34:8a:e1:49:
84:fb:4e:ac:5a:10:85:82:49:cf:dc:f8:d5:41:25:26:71:b8:
5f:c0:78:a1:d9:aa:46:98:49:f2:2a:f6:01:0f:3d:cd:14:9a:
ce:0c:b8:82:2a:7b:3c:60:40:8d:03:61:c5:31:e1:ea:c5:8b:
80:be:f3:eb:91:bc:a1:09:fb:67:89:7f:ae:48:19:fe:5c:46:
94:42:1d:ba:65:b6:43:43:b6:d4:88:15:f9:c4:cd:25:66:59:
7d:e3:d4:48:f5:9d:db:2f:88:ec:88:af:48:74:85:94:c5:47:
23:e7:80:91:f3:f0:b5:26:f9:68:8a:3c:ca:85:50:05:c4:13:
93:55:04:cf:fe:c6:cc:1f:32:7b:1c:4e:47:61:75:f0:aa:ae:
22:bc:de:a8:4c:41:16:86:7f:43:36:54:ae:c2:c9:1f:82:0c:
18:e1:ea:44:eb:1a:a6:51:91:a9:8c:15:c9:6f:38:29:49:39:
f0:76:83:fd:09:f1:82:45:c6:10:d3:95:9b:87:51:44:0b:af:
b9:38:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 18:04:58 2025 by rpki-client