Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCEB1460727111EFAE2EB28A762E951A.roa
File: FCEB1460727111EFAE2EB28A762E951A.roa (raw, json)
Hash identifier: cwLNUQWdzd56YqwE3qDla9NIftB5JyVVqw5zbTEgScc=
Subject key identifier: 19:F8:20:4F:BD:64:E9:9C:CF:3D:24:7C:9B:67:75:AE:12:6B:8A:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EE36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCEB1460727111EFAE2EB28A762E951A.roa
Signing time: Sat 14 Sep 2024 08:18:57 +0000
ROA not before: Sat 14 Sep 2024 08:18:54 +0000
ROA not after: Wed 25 Dec 2024 08:18:54 +0000
asID: 29802
IP address blocks: 154.86.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60982 (0xee36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Sep 14 08:18:54 2024 GMT
Not After : Dec 25 08:18:54 2024 GMT
Subject: CN=66e546f1-fdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:c2:08:8c:57:62:0f:0e:4f:e2:9e:2a:95:
fb:a4:46:c4:41:b6:09:6a:1b:dc:a5:2d:6b:40:bc:
da:2f:fe:9f:90:f7:8d:54:df:70:e3:03:22:35:e3:
f1:51:0c:60:d7:0e:ae:da:13:ed:ab:50:a3:a6:65:
eb:57:1a:e2:84:95:a1:88:f8:ba:e1:75:0b:18:7f:
d4:eb:5e:d3:21:1e:fd:d2:c6:29:2a:fa:ee:dd:21:
af:3e:fb:c7:1d:59:01:54:d7:a5:3f:a2:48:06:ea:
f7:7b:d6:02:a6:7d:f9:de:55:83:38:ce:01:6a:4f:
02:48:1a:ae:fb:32:8b:cd:2a:35:15:31:1a:fe:11:
30:d0:f2:f4:f3:34:63:28:ec:07:42:b4:b1:10:be:
2e:7c:03:06:5b:db:96:e7:1f:32:9d:8e:f8:49:2f:
d7:75:9e:aa:84:df:d7:c9:05:f3:76:83:a3:20:9a:
f1:c1:91:f0:86:b0:66:90:5f:28:24:14:51:5d:11:
9f:04:01:03:a0:04:18:ec:c1:76:64:cd:be:11:db:
db:bc:85:c1:3a:da:3c:49:55:52:37:8d:cb:7e:a4:
bb:b4:9d:5c:6a:12:d1:de:27:90:d7:63:60:9f:0d:
a4:da:30:70:67:27:0e:df:45:c0:fb:07:01:8b:92:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F8:20:4F:BD:64:E9:9C:CF:3D:24:7C:9B:67:75:AE:12:6B:8A:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCEB1460727111EFAE2EB28A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.118.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b3:9d:95:d8:93:e0:c2:e6:32:95:77:0d:c7:e9:51:21:27:
a7:e0:16:38:87:28:e9:7a:59:76:44:e7:a7:fc:d2:8d:08:b0:
f9:84:87:6e:69:b6:fc:7a:2d:ac:b6:5c:8a:e1:09:8a:00:de:
d0:d1:fe:ef:63:64:ac:92:ff:cd:e0:b0:27:30:b4:b9:3b:d9:
96:ec:aa:22:0d:37:6e:b4:61:bb:cc:c7:ca:d6:35:3a:3f:15:
5e:4f:92:df:bc:d5:d5:f5:f3:eb:23:2c:c8:f7:3c:a1:d6:ab:
27:75:87:9d:8c:a7:da:59:c2:c3:3a:7d:d7:27:70:b3:1e:03:
a1:96:f1:9b:cd:02:1c:3c:9e:62:83:26:ff:16:a7:39:08:c7:
45:25:e0:c9:d9:76:42:00:ff:16:d3:5b:02:00:7b:31:0a:ad:
56:20:2e:7d:cc:c9:2b:f2:11:37:9c:fb:4a:2d:25:8d:09:fa:
cb:90:63:86:b0:3a:70:73:d6:04:e6:af:e6:bd:4f:77:85:bf:
48:74:57:aa:04:92:ba:4a:c7:ff:1b:51:d2:26:b3:fa:2e:43:
f7:b1:07:d0:86:77:bb:7c:3a:3c:29:03:9c:bc:5c:1d:84:bf:
9b:27:1a:6f:db:43:90:f5:91:0d:c0:50:55:99:dc:1f:a3:f6:
f6:00:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:47 2025 by rpki-client