Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECEAEA2CDA6311EFBAF70E5B762E951A.roa
File: ECEAEA2CDA6311EFBAF70E5B762E951A.roa (raw, json)
Hash identifier: xsB9K7mNzQukknzCH0GQeEuNSiKvAmp/5qQ6Ny4W8ro=
Subject key identifier: 34:DF:E8:AD:B5:A7:F2:17:4B:26:91:EE:49:90:33:EA:B3:5E:C1:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01488A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECEAEA2CDA6311EFBAF70E5B762E951A.roa
Signing time: Fri 24 Jan 2025 15:00:18 +0000
ROA not before: Fri 24 Jan 2025 15:00:15 +0000
ROA not after: Wed 05 Mar 2025 15:00:15 +0000
asID: 49505
IP address blocks: 154.209.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84106 (0x1488a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 15:00:15 2025 GMT
Not After : Mar 5 15:00:15 2025 GMT
Subject: CN=6793ab02-edcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:9c:32:b2:26:c9:7c:a6:44:26:2f:eb:2b:
4b:e5:ae:96:8a:2d:73:c7:d5:4b:cc:55:50:66:77:
43:4d:ff:54:79:01:a7:95:0a:eb:5b:7d:7e:6c:60:
6f:fc:6c:eb:86:9e:01:99:b0:da:49:90:e7:38:a7:
32:e3:b6:3b:44:29:70:62:a4:94:78:dc:7b:33:70:
df:b0:a2:c7:47:8d:f8:0e:6b:ec:78:c4:2b:24:2e:
ab:f8:71:da:3e:8a:af:4c:fb:97:46:a2:40:33:76:
7f:99:c7:6f:fe:44:71:49:a8:27:60:0e:43:f0:43:
1d:62:3d:51:49:42:a9:da:41:4f:50:fd:c6:78:9a:
b5:7f:13:e2:d5:ad:ef:2b:81:92:3e:2b:55:de:37:
23:53:d1:83:65:3d:38:47:c7:ce:b9:18:2d:bd:c2:
a8:d8:5c:b0:a9:90:c9:02:29:52:75:38:bd:00:8e:
c9:0a:62:bc:e1:1c:f0:0b:d0:f1:ad:32:ac:18:1c:
60:62:8e:a9:20:95:1e:e6:70:85:50:6b:e8:48:72:
13:e7:60:9d:30:10:cd:17:e3:19:bc:bb:67:3f:a3:
1f:99:a3:6e:c9:da:ea:3c:ae:11:22:87:bf:a6:49:
d2:97:85:71:39:5e:3a:d1:fc:0e:d7:98:33:0d:2f:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:E8:AD:B5:A7:F2:17:4B:26:91:EE:49:90:33:EA:B3:5E:C1:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECEAEA2CDA6311EFBAF70E5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.217.0/24
Signature Algorithm: sha256WithRSAEncryption
28:41:e4:e4:de:77:9c:1d:c8:ef:09:c9:ed:fa:a4:44:c0:09:
b9:2b:80:92:69:cd:c1:98:74:a8:93:e8:40:7b:3a:cb:42:4b:
1c:c4:6c:06:5a:b9:90:c1:f7:71:bf:2c:63:1d:59:fa:04:31:
9d:3a:c2:89:f4:7f:b2:0a:a0:5d:fa:e1:23:61:e3:e6:0e:ec:
9d:a6:c2:6a:38:6e:27:a8:ae:70:83:ae:86:7d:77:3d:77:7a:
1b:e0:6a:5d:df:1b:ae:4c:e5:b8:a1:67:5f:ad:2e:6e:e1:4d:
24:a8:eb:52:1a:42:c4:0c:f0:e0:2b:db:5e:c6:41:e2:0a:55:
6a:f0:09:b0:a5:e2:f6:0b:e2:89:63:bc:1e:19:46:8c:ee:b1:
b2:a7:1c:de:36:35:9a:ec:80:fa:96:dc:5b:fa:31:ca:28:59:
28:46:c8:36:f6:d2:92:a1:74:6a:31:09:d4:9a:09:f6:8f:d9:
5f:1b:86:21:6b:e6:a1:99:93:9b:64:ca:10:d0:b7:16:8e:45:
c7:62:dd:fc:8b:e2:2d:0d:42:16:bd:b0:07:c6:a6:2f:55:3e:
98:38:bc:7b:c9:fa:04:bd:83:55:c5:a6:80:3b:cc:0c:ff:ba:
31:6a:27:45:65:4d:1d:00:77:42:5b:ec:5a:14:8e:40:41:b4:
84:fb:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:57:03 2025 by rpki-client