Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/99DC2C00CF0D11ED84A6FBEDF1222468.roa
File: 99DC2C00CF0D11ED84A6FBEDF1222468.roa (raw, json)
Hash identifier: hmmQbnQMudObWwf6O8y0nirIcZ2h9oe5FCAD/bhlYuI=
Subject key identifier: 7D:13:6D:70:44:46:B2:D1:18:D6:22:ED:16:E9:82:FF:7F:0F:70:78
Certificate issuer: /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial: 036E
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/99DC2C00CF0D11ED84A6FBEDF1222468.roa
Signing time: Thu 30 Mar 2023 15:14:44 +0000
ROA not before: Thu 30 Mar 2023 15:14:40 +0000
ROA not after: Sat 30 Mar 2024 15:14:40 +0000
asID: 204765
IP address blocks: 154.73.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878 (0x36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAF
Validity
Not Before: Mar 30 15:14:40 2023 GMT
Not After : Mar 30 15:14:40 2024 GMT
Subject: CN=6425a764-16a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:3a:cb:ad:fb:ea:42:b1:c0:4e:6a:f8:3e:
42:7d:8a:b0:52:3c:64:e7:a0:10:88:38:a7:bd:10:
5e:69:6b:43:16:6f:0b:98:ce:03:c6:23:ea:d8:f4:
9b:9b:14:77:df:8d:2a:73:1f:7f:23:49:98:12:c3:
98:1c:14:d5:cb:3a:7d:69:24:0d:3e:96:71:5c:51:
4c:79:e0:01:99:d4:e8:17:c2:32:c4:b6:c4:37:ad:
9b:c7:d2:9a:de:58:5b:a3:b5:aa:d9:d1:53:73:51:
13:7d:0b:b6:47:4c:8e:70:80:3a:f7:19:bf:ba:34:
8e:43:34:10:8b:b2:37:40:87:f6:3f:06:97:f1:91:
95:f6:20:89:a6:2f:b7:47:24:63:a8:6e:f2:ec:9b:
ca:ca:d2:40:d9:8a:36:f9:92:e4:10:5f:cb:b5:8b:
cd:41:f3:f5:f9:c3:ea:8c:89:48:71:0d:2c:0f:54:
9f:4e:78:29:73:0a:2a:00:72:69:17:f8:2c:d1:73:
cd:a6:f3:50:57:dd:23:43:46:26:35:7a:c8:59:68:
95:3a:80:bb:2b:5e:bc:46:37:f3:18:4c:61:62:9e:
75:68:e1:89:c4:af:8f:68:39:cb:d9:27:d0:b2:3b:
86:0a:e3:2a:0d:55:a4:18:3d:d1:20:f9:de:78:1b:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:13:6D:70:44:46:B2:D1:18:D6:22:ED:16:E9:82:FF:7F:0F:70:78
X509v3 Authority Key Identifier:
keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/99DC2C00CF0D11ED84A6FBEDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.251.0/24
Signature Algorithm: sha256WithRSAEncryption
24:17:0c:4f:ab:08:b9:f3:e1:cd:a9:0d:51:65:4f:35:c7:84:
68:c4:0f:21:a0:50:43:3e:ae:d4:fa:2c:f7:77:fa:2c:a4:90:
28:4d:ee:16:ea:da:90:16:fd:ab:4e:1c:36:6d:60:fc:f7:b4:
41:60:f5:1c:44:aa:6f:14:54:e8:33:cf:f7:74:94:40:3b:17:
ae:83:6b:69:37:41:91:cd:47:90:b6:f4:65:4c:a7:45:bf:2d:
df:59:15:6e:3a:0e:9d:82:11:40:56:73:01:f5:30:fc:6a:11:
51:f7:96:f2:93:0a:26:5e:3e:4b:5d:e4:8b:67:3a:e4:2d:e2:
3b:4a:64:d1:52:81:7a:84:a0:d3:ca:9b:a8:2e:93:cf:c5:ae:
2e:7f:1e:fd:c8:b9:e7:ee:ee:15:bf:4b:9c:60:a2:d5:66:bf:
c7:03:6d:11:51:14:b4:c1:74:3e:6d:c2:09:c9:a7:d6:f1:35:
40:14:64:20:f9:64:62:d3:95:29:cd:d2:fe:46:de:ad:8a:5e:
c1:49:73:c6:6b:9f:77:7c:3b:88:a3:45:28:47:5d:c1:90:49:
bb:7b:5f:98:5b:1c:d7:68:5b:88:d5:8f:db:c4:80:a9:ba:79:
82:2b:21:f7:73:0f:be:a8:b3:69:e6:52:db:ba:94:e9:a7:11:
65:80:d8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:11 2025 by rpki-client