Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/1139055EE72211EC877698A3F1222468.roa
File: 1139055EE72211EC877698A3F1222468.roa (raw, json)
Hash identifier: PQTSfUr7l1LFcX6+vR+3C4ZXFIqOgSINJTO0cXOvJNU=
Subject key identifier: AA:6A:FB:11:55:AE:DE:DB:6C:07:C0:F7:8C:DF:E6:56:DE:CE:32:4C
Certificate issuer: /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial: 05
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/1139055EE72211EC877698A3F1222468.roa
Signing time: Wed 08 Jun 2022 11:56:45 +0000
ROA not before: Wed 08 Jun 2022 11:56:41 +0000
ROA not after: Sat 08 Jun 2024 11:56:41 +0000
asID: 328155
IP address blocks: 154.65.84.0/22 maxlen: 22
2c0f:f610:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F7F21AF
Validity
Not Before: Jun 8 11:56:41 2022 GMT
Not After : Jun 8 11:56:41 2024 GMT
Subject: CN=62a08e7d-785c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:01:cc:7a:d0:8e:b2:4b:d3:c5:c1:c6:9d:
2b:ef:44:b3:0f:53:1c:50:82:a3:c1:71:90:c3:58:
c7:37:cd:3d:e4:96:c4:3b:33:8c:f8:bd:c9:0b:16:
a4:26:3d:ca:35:64:a9:88:f9:da:92:74:98:4e:de:
c6:17:47:40:72:8d:3a:7d:d1:29:6e:5a:fe:fd:13:
09:de:0a:63:f7:c1:47:ec:de:80:d0:6c:0b:eb:e6:
44:32:c0:1b:e1:8a:9f:91:60:04:e9:ae:ce:83:e9:
7b:bb:75:b7:7b:32:5f:a4:82:45:01:9d:5f:26:4c:
0c:9b:29:bd:74:86:ca:3a:18:7a:01:5c:92:4e:1b:
b8:5d:0f:db:89:df:36:de:a7:0c:51:d9:cf:53:51:
0a:42:5c:c0:7c:01:e8:d7:3e:d9:ae:04:aa:3e:d5:
4f:ec:45:36:0a:64:92:c7:cd:47:57:9b:c7:97:5b:
ab:7a:5e:92:36:3f:51:c1:51:80:c0:8b:a4:d0:7b:
b4:f1:ed:63:83:3b:e3:ce:b3:c0:07:7b:ce:86:77:
b7:79:7b:ad:32:63:9b:28:ad:cf:cf:00:b6:68:80:
8c:ce:06:c5:86:bc:0a:41:18:eb:11:f0:6a:80:1c:
cc:e2:60:7a:7a:2f:b9:4b:08:e1:32:64:eb:4c:8c:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6A:FB:11:55:AE:DE:DB:6C:07:C0:F7:8C:DF:E6:56:DE:CE:32:4C
X509v3 Authority Key Identifier:
keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/1139055EE72211EC877698A3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.84.0/22
IPv6:
2c0f:f610:8000::/33
Signature Algorithm: sha256WithRSAEncryption
05:5d:dc:b2:a6:28:39:37:9b:7c:81:27:8b:5d:17:5c:52:64:
64:11:b5:79:9b:0d:7f:cb:3b:5e:1b:64:93:52:eb:5f:04:06:
23:b8:d2:f6:25:46:1d:e2:7f:3d:43:37:c1:bd:c6:f4:39:f4:
18:1e:86:a2:aa:48:b9:26:d0:34:ec:3b:36:39:42:ae:30:1f:
40:f0:e7:d8:68:c3:5c:a3:4b:91:af:5d:09:e0:7c:ec:9a:98:
4d:86:cf:3c:b2:fa:dc:37:94:d3:1f:02:3b:db:49:32:72:40:
29:c5:91:c4:51:34:1c:4f:d2:9b:84:85:47:48:f8:37:5c:26:
ca:67:5c:66:67:4f:2a:3e:09:5e:f8:82:21:f8:99:b2:53:05:
bc:91:64:d7:2a:9e:ce:fb:5c:76:33:b9:9b:5b:86:7c:d8:8f:
91:62:b9:de:89:39:5f:f1:b4:21:d7:e4:2e:a7:39:f6:23:43:
58:6c:73:da:fe:98:94:d9:c6:f3:72:14:2e:f2:41:47:1a:ee:
79:31:30:26:b5:98:36:c1:c6:27:b6:90:5d:1d:10:3a:30:dd:
1e:19:57:17:a1:88:7a:77:5d:ce:01:1b:4c:76:e9:eb:0f:63:
94:06:ba:50:ad:08:7c:9d:9d:3a:0a:68:9e:ea:9f:4e:a2:91:
8a:93:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:37 2025 by rpki-client