Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5EE2E529B7711EF984DDC6C762E951A.roa
File: F5EE2E529B7711EF984DDC6C762E951A.roa (raw, json)
Hash identifier: UY0BJdTLsH8KfIe+ooZyEHh7OYe/23zNnbd5I2u7zb4=
Subject key identifier: 64:10:76:EF:E7:A3:A8:C1:D3:23:C7:54:0D:9E:D4:1C:32:E0:B0:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5EE2E529B7711EF984DDC6C762E951A.roa
Signing time: Tue 05 Nov 2024 13:15:00 +0000
ROA not before: Tue 05 Nov 2024 13:14:56 +0000
ROA not after: Mon 13 Jan 2025 13:14:56 +0000
asID: 7018
IP address blocks: 154.208.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67541 (0x107d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 13:14:56 2024 GMT
Not After : Jan 13 13:14:56 2025 GMT
Subject: CN=672a1a54-8cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:a9:0a:50:2e:40:1e:42:ab:37:43:45:84:
2c:e1:02:35:06:4a:f7:97:7f:c6:af:18:b9:3f:73:
1d:76:8a:27:01:60:11:b0:e4:59:d7:82:8d:96:3a:
bb:4e:5d:42:ec:2f:d3:9a:ef:ba:a9:01:d9:38:ff:
c2:dd:e3:b7:75:8b:a6:44:39:7e:e6:de:cd:01:5a:
7f:34:50:28:d7:b2:23:48:57:cd:aa:c3:f2:0f:a8:
de:16:1d:72:c4:9e:5c:65:6f:6c:a6:0b:8c:28:d9:
b3:33:0d:57:04:d1:1d:42:79:42:4d:de:98:57:ea:
6b:6f:6e:7c:a7:c7:f3:78:49:93:99:ba:20:45:9d:
b4:5a:22:85:5a:b8:3f:7d:e8:17:e7:9a:fa:f6:9f:
5f:9e:2e:12:d6:32:88:f4:68:28:2e:82:19:01:ed:
17:fb:6d:63:31:63:ce:08:70:13:c7:42:49:5b:e9:
64:1c:9e:a8:cd:5d:94:1f:25:df:d7:8c:af:04:87:
3f:29:85:27:fe:89:de:d9:3d:e9:7a:df:0c:fd:c6:
af:56:88:8a:d8:35:85:82:34:1a:9f:40:d2:b4:6a:
5f:7f:a1:16:03:57:11:aa:77:84:9d:be:a3:be:10:
97:75:31:44:46:63:76:ed:d1:73:93:eb:45:a9:0c:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:76:EF:E7:A3:A8:C1:D3:23:C7:54:0D:9E:D4:1C:32:E0:B0:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5EE2E529B7711EF984DDC6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.0.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cc:11:13:0f:24:f6:48:b9:99:36:77:8b:17:49:35:60:fa:
d7:da:c2:d5:de:90:45:d7:17:58:c5:f1:5f:ce:cb:7c:8a:cc:
bd:ae:60:b3:38:85:c5:bd:e4:67:5a:bb:a9:68:ac:b3:23:c2:
04:ae:a7:81:20:69:1c:f1:75:a0:71:cb:19:25:6b:82:1e:fd:
73:95:84:24:26:33:95:e6:8d:c6:e9:d7:79:4b:a4:95:12:3b:
d4:fb:9d:9b:5e:f7:fa:02:05:87:2c:41:33:bd:fd:d7:ac:12:
e7:30:36:21:a3:c1:6e:d6:96:06:d3:33:0d:9d:7e:29:a7:8b:
f9:e3:53:c7:27:8f:93:ad:00:06:60:2c:98:38:62:5a:df:ab:
37:63:41:e9:1f:fe:8f:97:96:af:a7:e6:26:aa:8b:79:13:24:
eb:51:2c:f8:fc:2f:ff:65:ff:87:5a:1d:ed:b2:4d:06:0f:47:
3a:d0:5a:f6:0a:e1:08:91:54:69:8e:43:84:f5:17:94:db:d1:
fb:f6:92:fc:30:8d:ee:b9:ea:01:fe:a1:73:ad:c4:bf:7d:2f:
81:86:b8:c4:a0:57:82:f9:72:5d:a8:26:4c:6b:c5:f7:80:d0:
79:62:e9:53:e0:ba:04:ec:a7:5c:73:e6:0c:07:ae:03:cd:64:
eb:69:51:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:15 2025 by rpki-client