Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/8C68DC7ADD7111EF904F207A762E951A.roa
File: 8C68DC7ADD7111EF904F207A762E951A.roa (raw, json)
Hash identifier: Bawd4uIsPDDq7DXR9i//0lWyIuKNDR9DvXDOOznH5VA=
Subject key identifier: 66:88:AE:FC:D5:77:80:AD:D3:3D:15:29:1C:F7:6D:AD:2F:83:28:E6
Certificate issuer: /CN=F36BC6CCAF/serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Certificate serial: 04
Authority key identifier: 31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/8C68DC7ADD7111EF904F207A762E951A.roa
Signing time: Tue 28 Jan 2025 12:15:23 +0000
ROA not before: Tue 28 Jan 2025 12:15:19 +0000
ROA not after: Mon 31 Mar 2025 12:15:19 +0000
asID: 37563
IP address blocks: 102.128.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC6CCAF, serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Validity
Not Before: Jan 28 12:15:19 2025 GMT
Not After : Mar 31 12:15:19 2025 GMT
Subject: CN=6798ca5b-328b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fc:fa:c5:ab:6d:78:53:e4:fa:f2:57:92:f6:
29:1c:bd:2b:fd:81:a7:9e:e8:59:05:42:0e:75:c4:
3a:0c:05:dd:78:74:b0:ca:93:50:23:9d:11:ee:c7:
22:67:18:34:e3:10:f1:c4:bf:ce:6b:cb:8e:d4:b8:
f9:6d:e4:e5:83:0e:0f:00:f7:be:ea:e3:cd:e8:05:
4b:31:85:98:6c:a9:55:4e:df:d9:63:5e:a9:1d:8d:
8a:68:a8:1e:6f:dc:72:a2:47:91:17:0c:8d:5d:43:
0a:5d:aa:61:00:79:e3:e1:14:79:71:0e:04:5f:65:
26:a3:a1:38:1e:3a:c9:26:6f:eb:8c:e2:b0:eb:d9:
50:1f:4c:64:ae:27:dc:5a:6e:86:45:86:53:72:36:
e7:75:b3:f0:2e:4e:8c:02:95:b0:db:10:30:d7:1d:
e0:5e:1b:36:ad:d5:b5:a0:4d:5e:09:55:3a:60:a5:
72:be:56:55:ba:15:16:e8:13:0d:c5:d5:83:8a:94:
5e:56:a7:5a:be:03:21:56:93:3e:b9:68:e0:d7:1f:
87:72:c6:85:f8:93:05:a1:f7:01:32:fb:06:ea:62:
b2:f0:2b:03:f4:65:10:1f:8d:08:24:a2:51:60:1a:
81:14:8c:e3:d1:87:5b:35:1c:9e:95:6e:7b:03:0e:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:88:AE:FC:D5:77:80:AD:D3:3D:15:29:1C:F7:6D:AD:2F:83:28:E6
X509v3 Authority Key Identifier:
keyid:31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/8C68DC7ADD7111EF904F207A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.128.128.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:e0:3f:91:68:60:4d:52:6c:70:8c:a0:26:eb:ad:fd:43:fe:
1d:26:b3:dd:07:23:81:e8:ec:20:60:e5:c1:79:ca:b4:19:fd:
24:c2:66:4b:cd:6c:f7:93:c3:72:18:6d:97:3e:e2:20:5b:15:
aa:07:f4:36:27:30:fb:aa:b8:19:74:c8:c8:94:a3:d5:de:c8:
e2:e2:3f:ee:ad:3c:82:7c:7a:4a:1b:5f:ec:f6:a3:6f:ce:62:
c2:d0:25:cd:98:bd:08:08:2d:9c:29:0b:df:8e:9d:43:5e:a2:
84:32:a3:07:6d:68:5a:ef:f9:f7:eb:c8:7f:6f:52:3c:6f:fb:
40:dd:c0:e0:23:58:f9:ad:f3:3e:d2:55:3d:bc:e3:eb:2a:4e:
20:ca:84:4e:2c:56:90:3c:6a:57:5d:06:e0:31:a1:c6:c2:5b:
e0:27:2c:67:48:d2:5b:6c:b8:28:5a:71:32:04:b7:46:76:02:
a9:b5:20:b3:0b:47:10:04:31:79:6c:39:0d:65:aa:ba:7b:3b:
dd:84:4f:68:45:5c:79:e6:ad:7e:83:35:cb:6b:16:6b:56:a5:
30:25:a4:ce:f8:18:1a:70:5c:bc:bc:1a:4a:96:34:5e:4b:a4:
1c:49:14:d1:4e:48:3d:cb:f2:f0:cb:9f:49:b8:e4:5d:f0:a2:
db:9c:3f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:33:35 2025 by rpki-client