Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF9D9A8E9B5C11EFAF15DA46762E951A.roa
File: FF9D9A8E9B5C11EFAF15DA46762E951A.roa (raw, json)
Hash identifier: rNUrOgcD6z9OknPkted+VT0z2/b1NZu9fgGNV26CFJ8=
Subject key identifier: D1:89:A5:88:B1:C5:D3:15:46:6F:D7:D1:97:B0:A7:6A:A7:66:76:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010785
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF9D9A8E9B5C11EFAF15DA46762E951A.roa
Signing time: Tue 05 Nov 2024 10:02:00 +0000
ROA not before: Tue 05 Nov 2024 10:01:56 +0000
ROA not after: Mon 13 Jan 2025 10:01:56 +0000
asID: 7018
IP address blocks: 154.83.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67461 (0x10785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 10:01:56 2024 GMT
Not After : Jan 13 10:01:56 2025 GMT
Subject: CN=6729ed18-f56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:0b:dc:95:d1:ca:f1:25:8b:fd:18:be:2f:
74:a8:0d:d5:ef:23:72:8d:84:76:ac:8c:7a:b1:09:
80:c7:78:c4:65:29:f5:25:0f:00:5f:e9:3a:9a:47:
56:bd:87:dd:cb:c0:7f:63:da:74:77:93:83:cb:59:
b3:c4:0a:d0:71:1d:e0:1e:3a:6e:5e:11:c6:37:d3:
20:96:75:66:0f:96:5a:81:ad:d9:d6:5c:2f:97:76:
f9:7a:8b:61:75:e6:3d:a3:ad:a8:a7:ca:c5:8c:5e:
e8:be:bb:71:3b:95:bf:43:12:83:3e:ff:c6:79:df:
44:22:66:32:5b:a0:56:18:e9:62:92:7b:db:6b:6e:
36:22:97:78:ca:07:05:c5:e0:cb:0c:4c:83:f3:e6:
00:01:5f:01:14:be:0e:a5:f3:6c:20:f0:c5:94:cf:
d8:94:44:0e:34:94:fc:52:4a:d4:52:1d:1d:9d:f1:
a1:e5:91:31:5b:27:45:80:66:30:5b:d2:14:33:24:
d4:ab:68:12:00:d7:9e:53:8d:8f:a1:fa:83:0d:96:
08:e0:b2:e1:04:82:35:75:31:26:53:56:e3:a4:c5:
54:e3:51:17:fa:0e:4c:5c:3c:3b:67:c1:31:0d:6e:
d9:e1:1b:37:3e:7d:f7:7b:24:e0:cd:c1:69:92:90:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:89:A5:88:B1:C5:D3:15:46:6F:D7:D1:97:B0:A7:6A:A7:66:76:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF9D9A8E9B5C11EFAF15DA46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.213.0/24
Signature Algorithm: sha256WithRSAEncryption
33:be:84:a0:ad:28:5e:71:a5:74:b8:af:21:d7:71:96:e9:e3:
4f:95:eb:a4:5e:85:f0:f0:ae:8b:c2:c0:7c:a6:b8:44:30:26:
d8:8b:d2:cf:34:e9:cf:13:ec:69:f3:cd:bd:ad:00:c4:e6:4b:
dc:83:96:f2:59:76:e7:29:75:2b:f2:b2:56:61:1b:15:fc:60:
f5:fe:ef:d8:8f:0e:7e:80:77:8c:25:0b:9f:b8:25:43:15:8a:
f7:64:73:fd:0a:71:43:d2:ab:bc:de:a6:51:47:13:1f:d3:52:
b6:80:b2:b1:5c:37:d3:bf:6a:44:fb:2d:b2:10:44:e2:c0:0c:
f5:2e:0a:d8:a7:bf:bb:3a:89:1c:96:f6:53:33:35:92:25:60:
59:a5:66:3f:45:d0:87:19:53:89:08:e0:e8:20:73:95:be:65:
4d:68:73:b9:9b:82:93:38:2a:a2:9e:31:34:dc:27:5c:ef:5f:
98:b0:0e:bc:cc:80:2f:89:f8:7e:a8:ab:36:67:fd:98:a7:64:
79:8b:28:72:e7:40:b0:12:0c:ec:93:90:d7:2c:64:d1:c0:b0:
12:15:81:98:03:7e:29:8e:ac:e3:a4:3d:32:1f:6a:c8:b3:f3:
9e:c2:23:a4:57:49:e7:92:cf:c2:41:ff:03:34:8a:28:30:1f:
fc:ee:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:00 2025 by rpki-client