Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/8EAE1BFA363D11ECBB3C6867D8A014CE.roa
File: 8EAE1BFA363D11ECBB3C6867D8A014CE.roa (raw, json)
Hash identifier: 9rVJtktNdGuOHvAP7w9b3evJdYerUuQitIXnhW6px1g=
Subject key identifier: 82:2A:A8:75:4E:B3:B9:A3:BE:42:0E:F8:E5:DE:EA:A1:06:96:F8:96
Certificate issuer: /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial: 011B
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/8EAE1BFA363D11ECBB3C6867D8A014CE.roa
Signing time: Tue 26 Oct 2021 09:17:36 +0000
ROA not before: Tue 26 Oct 2021 09:17:32 +0000
ROA not after: Wed 26 Oct 2022 09:17:32 +0000
asID: 327790
IP address blocks: 154.73.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAF
Validity
Not Before: Oct 26 09:17:32 2021 GMT
Not After : Oct 26 09:17:32 2022 GMT
Subject: CN=6177c7b0-8319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:ff:cc:12:04:b6:3a:9e:8d:33:49:f7:f0:
9a:d0:98:95:ab:be:2c:a5:5e:0b:02:5a:f3:a0:2d:
1e:2e:d7:65:a5:0a:8d:df:1a:a4:8a:22:2a:89:db:
80:b1:35:6d:88:81:c4:a3:61:9e:4e:4e:00:86:9c:
a1:c6:60:4c:65:14:15:da:2f:d7:17:d6:b7:94:87:
e8:43:8f:f1:49:8a:d0:de:56:b7:45:dd:32:42:8d:
a8:ad:3e:b7:d7:5f:7c:46:b8:9e:67:13:56:66:3b:
49:02:c9:00:ff:4e:ef:22:8f:cf:9e:ff:9e:4b:45:
6a:22:93:1c:61:ec:2a:ae:57:6f:d8:7d:bd:f8:a7:
9f:d2:39:76:f5:b3:76:f7:b8:9c:38:c1:19:90:24:
fb:10:61:06:fd:09:30:d0:de:d7:6c:4b:ba:3b:2d:
c9:d4:c8:ef:a2:b5:4c:32:1d:04:97:a7:50:d3:43:
ff:e9:7c:ab:8c:eb:77:df:9a:69:de:2a:17:e2:14:
f7:da:69:70:c6:2d:d1:a7:05:77:04:5c:4e:4c:37:
4a:97:11:d1:b4:f0:4f:e0:09:07:e6:94:37:42:83:
c0:cf:57:e2:fc:d4:fb:aa:b5:a8:23:ea:d3:de:b3:
f8:96:9f:b6:6f:e1:04:c2:58:c2:7f:dc:bd:71:31:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:A8:75:4E:B3:B9:A3:BE:42:0E:F8:E5:DE:EA:A1:06:96:F8:96
X509v3 Authority Key Identifier:
keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/8EAE1BFA363D11ECBB3C6867D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5d:ec:db:f1:91:61:a1:84:c5:90:f1:a9:fd:43:b2:3a:c2:
1e:67:8c:00:09:b4:74:66:f0:d9:df:cb:7f:f8:a7:9c:7a:09:
26:57:af:11:65:a6:23:6e:ae:83:c3:dc:9b:09:b4:e0:48:8e:
4e:33:e7:84:1a:c8:65:50:89:2a:95:b1:19:37:d0:b4:b7:83:
61:a4:f2:f7:ce:20:75:06:54:a9:78:cf:84:99:98:29:0a:b7:
17:4d:24:98:30:da:61:10:56:9d:07:e7:da:6d:74:da:0e:cd:
28:63:44:73:98:c9:f7:52:4f:fb:bc:82:18:88:b6:31:0e:24:
9f:e9:b0:76:9e:19:c1:f1:16:8c:39:a6:e2:6a:45:43:d7:c2:
e7:51:3b:45:8d:49:f2:3e:6f:cc:26:d2:7b:54:d0:69:c5:6d:
61:96:b4:11:14:d6:56:26:c7:cb:4a:db:12:53:1f:fa:e3:0f:
f9:d3:eb:8e:f2:96:18:df:07:cf:a5:95:ac:18:0a:3b:da:b3:
a0:bc:de:a5:e6:25:97:9b:6e:fc:56:36:20:a8:de:2f:6c:15:
80:ab:bb:4c:56:b2:96:ff:86:06:47:ce:b4:dd:bd:b6:67:27:
2e:f9:d0:3f:0b:7d:5a:50:9a:bb:79:38:67:b7:8f:f5:f8:c6:
5c:a3:19:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:14:45 2025 by rpki-client