Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03D39FE2CCA811EE8A643D62775412E6.roa
File: 03D39FE2CCA811EE8A643D62775412E6.roa (raw, json)
Hash identifier: 6FN9hhGteARp6tM/SspN6VK/KCnwuhm6DF4UBT9iIoM=
Subject key identifier: 5A:62:A9:B6:77:7D:A5:51:3C:1C:9C:D0:83:28:75:D9:E9:3B:15:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03D39FE2CCA811EE8A643D62775412E6.roa
Signing time: Fri 16 Feb 2024 08:47:29 +0000
ROA not before: Fri 16 Feb 2024 08:47:25 +0000
ROA not after: Fri 26 Apr 2024 08:47:25 +0000
asID: 9009
IP address blocks: 154.218.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35401 (0x8a49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 08:47:25 2024 GMT
Not After : Apr 26 08:47:25 2024 GMT
Subject: CN=65cf2120-4aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:78:92:ca:84:b9:be:bd:48:2e:d6:2c:4e:
5c:04:d8:b2:b6:e3:9e:c4:3f:ad:95:dd:a9:41:6b:
d0:ba:14:8e:cd:c1:1d:62:22:75:10:4a:0a:d9:2e:
c9:54:93:d0:97:52:7b:bb:b5:62:c8:8d:cd:b3:00:
25:d2:d8:bb:7a:ef:a5:19:a0:89:47:d0:de:5b:2c:
45:94:3b:ea:cb:91:71:ff:d7:6d:79:03:20:6a:9e:
20:cd:39:57:a2:97:d7:73:83:3e:ae:6a:05:c8:ca:
1b:de:8e:e6:7a:cf:01:84:dd:3d:ac:6d:a0:66:f7:
42:40:f1:e7:cb:24:34:05:4c:28:7b:c0:4c:45:24:
89:f1:0e:9c:2d:9e:5c:40:75:e8:a2:bf:2d:ca:15:
3a:3a:e9:75:61:de:30:08:7d:5e:b7:14:67:2d:2f:
23:56:8e:d9:7e:f4:20:fe:81:57:cc:f5:48:59:c0:
c7:d4:68:2c:4b:fe:6c:e9:5d:1a:97:9a:6b:31:58:
de:df:1e:d8:16:7c:ce:be:d6:54:0f:2a:b1:ea:fc:
2d:30:06:3c:1d:72:ee:ee:77:5c:4f:0f:22:10:97:
d1:c5:c8:2e:2b:31:c0:21:37:9c:70:11:86:8f:27:
ae:9b:5d:3c:bc:7b:0a:7e:49:d8:4e:71:90:01:45:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:A9:B6:77:7D:A5:51:3C:1C:9C:D0:83:28:75:D9:E9:3B:15:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03D39FE2CCA811EE8A643D62775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.208.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:12:6f:3d:34:74:3f:31:2f:b5:ed:fc:a0:77:da:2f:8a:9f:
49:28:ee:ad:6f:88:96:20:2e:8f:77:6c:f1:19:6d:3a:07:67:
26:ce:40:34:ca:37:96:97:48:cf:11:35:93:e3:71:a8:8a:83:
f3:23:4b:86:8e:f1:c3:1a:ad:e0:36:f7:05:dd:5a:d0:61:6f:
8b:96:ca:70:04:82:52:b9:a5:e3:f2:42:f3:5f:7f:f4:76:f9:
2b:94:f8:ec:cf:28:0f:10:7d:4b:34:cc:71:18:38:d1:82:3e:
24:41:09:82:da:da:0c:fe:68:67:ae:17:4c:05:9f:19:a5:62:
b0:f7:4f:03:fd:7a:97:d8:78:d8:23:55:4a:22:3b:63:43:56:
87:68:c8:3e:f4:c4:0f:c5:35:ea:6e:23:7a:11:f0:b3:3a:85:
4f:11:00:da:da:ba:a8:6a:4a:92:80:4d:fa:31:ce:2a:05:52:
7c:f7:9c:4b:56:00:38:83:ba:94:ba:87:ac:10:dc:9f:26:ff:
2c:89:1e:70:e7:a3:84:80:e4:bd:d9:19:70:d4:77:61:0a:4b:
af:34:f4:ad:49:7c:89:15:5d:7e:7e:e4:17:a7:ee:84:7e:48:
8b:61:3e:b8:bf:fb:bf:8d:8f:76:53:76:c5:29:e0:7a:9f:19:
51:3e:eb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:27 2024 by rpki-client on console-ams.rpki-client.org