Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/0E8C63EAB6E711EF9BCFBB5D762E951A.roa
File: 0E8C63EAB6E711EF9BCFBB5D762E951A.roa (raw, json)
Hash identifier: cZlYHirvsxb6w9CkmMtKAEu49v60Ao1SyG1oneMTWxk=
Subject key identifier: 45:3A:C0:48:EE:49:3F:B2:B7:60:CF:D2:95:47:0A:7E:D0:76:A0:51
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 055D
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/0E8C63EAB6E711EF9BCFBB5D762E951A.roa
Signing time: Tue 10 Dec 2024 11:08:17 +0000
ROA not before: Tue 10 Dec 2024 11:08:13 +0000
ROA not after: Tue 31 Dec 2024 11:08:13 +0000
asID: 55154
IP address blocks: 196.44.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF
Validity
Not Before: Dec 10 11:08:13 2024 GMT
Not After : Dec 31 11:08:13 2024 GMT
Subject: CN=67582121-e6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:75:61:ef:be:d3:99:a7:37:7e:6e:c3:6d:
78:b9:a3:74:e4:ce:f4:1e:98:83:68:e9:60:d7:b4:
c9:d2:84:cb:85:ba:77:a9:92:50:ee:fc:09:96:5e:
8a:01:06:65:d2:fc:59:3b:a7:46:bf:e7:0e:1c:36:
82:54:16:99:76:90:45:5c:56:ec:fe:cc:a4:76:c5:
b4:bf:3d:02:25:c7:ac:36:7d:f8:9b:ee:a1:6a:29:
e8:6a:ad:e9:06:3b:bf:16:d6:dd:58:f5:54:6d:d6:
25:98:cf:8d:5d:18:2d:ef:6b:e6:9c:6b:71:72:a1:
a1:59:9f:2c:14:13:ba:42:36:2f:52:a5:00:bc:c1:
a8:6f:95:96:86:25:d5:ff:50:b3:5d:53:ca:a4:99:
bb:5b:68:21:0d:9a:7b:92:17:c3:76:1d:eb:fd:8f:
06:5b:4c:ae:4a:17:9f:7c:62:50:0e:00:ca:cf:4b:
b1:6e:cf:2d:b9:7c:3b:ea:e0:02:1f:24:5e:9a:83:
ab:6b:79:d4:39:e4:8a:ce:01:34:6b:fe:9a:e3:9f:
7d:b6:68:07:04:f2:75:9f:5e:94:0e:a7:6c:3b:ca:
a6:df:5d:a7:68:b5:a5:55:0a:f5:f2:1a:d1:00:5d:
8f:f4:71:95:6a:86:a6:34:e9:a2:20:0e:bc:0d:24:
5d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3A:C0:48:EE:49:3F:B2:B7:60:CF:D2:95:47:0A:7E:D0:76:A0:51
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/0E8C63EAB6E711EF9BCFBB5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.117.0/24
Signature Algorithm: sha256WithRSAEncryption
42:59:bc:be:10:fc:86:41:a3:2c:d5:43:75:7e:e1:10:9f:31:
ab:04:d3:e7:c2:74:4a:aa:df:f4:56:6e:ff:ca:af:82:6f:5a:
c7:aa:28:8e:73:f5:a7:97:08:cf:5b:32:30:5e:58:a3:31:4e:
54:bf:16:ef:8b:d6:d6:3e:24:3a:86:95:1d:4c:26:eb:99:ad:
3c:3c:9a:f1:ab:c8:93:03:5f:b9:a7:4f:4b:bf:c8:06:bb:14:
e4:10:31:be:78:c5:04:5f:24:6b:4f:fb:f3:eb:69:63:38:6a:
12:24:e9:c3:4e:1e:33:6e:34:12:bc:f9:33:67:0c:64:60:a2:
b9:c9:28:7a:84:1d:a8:65:d7:1f:e5:7b:d4:82:6a:0e:c3:b5:
7d:7d:ea:a0:53:8e:97:92:5a:bd:cc:d9:98:75:4e:4e:53:a0:
3d:b3:83:1a:30:a5:ae:03:60:b9:61:41:6e:6d:fa:22:f0:4c:
70:88:61:4b:9d:5a:c5:20:6b:b5:c6:34:ba:f9:e0:ce:94:a3:
08:69:7b:1f:7c:fd:96:f2:e7:c6:5f:a9:1c:02:24:ec:05:09:
01:e9:9b:87:32:f1:8b:b0:90:d2:f2:b9:27:56:cf:96:87:df:
d1:da:90:7e:47:1f:f7:ac:c5:43:fa:b4:bb:e9:17:6e:c0:58:
db:a6:72:3c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNDEyMTAxMTA4MTNaFw0yNDEyMzExMTA4MTNaMBgxFjAU
BgNVBAMTDTY3NTgyMTIxLWU2ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClQ3Vh777Tmac3fm7DbXi5o3TkzvQemINo6WDXtMnShMuFunepklDu/AmW
XooBBmXS/Fk7p0a/5w4cNoJUFpl2kEVcVuz+zKR2xbS/PQIlx6w2ffib7qFqKehq
rekGO78W1t1Y9VRt1iWYz41dGC3va+aca3FyoaFZnywUE7pCNi9SpQC8wahvlZaG
JdX/ULNdU8qkmbtbaCENmnuSF8N2Hev9jwZbTK5KF598YlAOAMrPS7Fuzy25fDvq
4AIfJF6ag6tredQ55IrOATRr/prjn322aAcE8nWfXpQOp2w7yqbfXadotaVVCvXy
GtEAXY/0cZVqhqY06aIgDrwNJF1VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQURTrA
SO5JP7K3YM/SlUcKftB2oFEwHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFLzBFOEM2M0VBQjZFNzExRUY5QkNGQkI1RDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELHUwDQYJKoZIhvcNAQEL
BQADggEBAEJZvL4Q/IZBoyzVQ3V+4RCfMasE0+fCdEqq3/RWbv/Kr4JvWseqKI5z
9aeXCM9bMjBeWKMxTlS/Fu+L1tY+JDqGlR1MJuuZrTw8mvGryJMDX7mnT0u/yAa7
FOQQMb54xQRfJGtP+/PraWM4ahIk6cNOHjNuNBK8+TNnDGRgornJKHqEHahl1x/l
e9SCag7DtX196qBTjpeSWr3M2Zh1Tk5ToD2zgxowpa4DYLlhQW5t+iLwTHCIYUud
WsUga7XGNLr54M6Uowhpex98/Zby58ZfqRwCJOwFCQHpm4cy8YuwkNLyuSdWz5aH
39HakH5HH/esxUP6tLvpF27AWNumcjw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:30 2025 by rpki-client