Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C450E3206E011EFA17C3A71017001B1.roa
File: 0C450E3206E011EFA17C3A71017001B1.roa (raw, json)
Hash identifier: ZO7j6C4b3dRw+oJBMrxHKUQ5Snp2DozC66FjKyFVhWo=
Subject key identifier: 8A:57:23:07:CF:B3:DC:4F:2E:3A:34:24:34:75:14:96:35:9A:11:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C450E3206E011EFA17C3A71017001B1.roa
Signing time: Tue 30 Apr 2024 10:54:42 +0000
ROA not before: Tue 30 Apr 2024 10:54:39 +0000
ROA not after: Sat 11 May 2024 10:54:39 +0000
asID: 9009
IP address blocks: 154.216.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45819 (0xb2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 10:54:39 2024 GMT
Not After : May 11 10:54:39 2024 GMT
Subject: CN=6630cdf2-882c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:c9:55:bb:48:8f:24:ef:59:f6:05:2e:7a:
9d:6e:f8:5c:57:14:dc:19:cf:4a:29:7b:f8:10:68:
1f:08:07:78:b2:a7:94:ea:d5:39:2d:ff:ee:72:2a:
8f:d2:57:fb:b3:f8:54:03:b8:64:06:6d:4e:4d:c1:
ba:a8:d7:02:ad:d6:6f:90:5d:4b:bd:82:0a:b6:f8:
a0:ca:9a:9f:2e:86:94:08:db:f5:3d:52:1b:5b:24:
86:23:ca:c7:78:75:a3:fe:1f:4d:da:56:33:65:9c:
0d:e5:98:06:a6:c4:3a:50:bb:70:48:c0:05:87:04:
ba:1b:54:0d:0d:cc:8c:16:bb:dd:f1:c2:6a:2f:de:
6b:8e:f8:b7:d0:e4:74:03:85:be:48:f5:6b:08:b2:
e7:e7:04:ba:7f:38:2c:2d:86:61:92:bc:2d:67:10:
64:5f:57:45:41:21:81:b3:f5:6a:43:6f:1e:ff:c4:
71:55:52:c8:f6:1e:00:f5:f5:dc:94:07:d1:14:c1:
c1:27:7f:b6:40:fa:ea:af:5f:aa:86:4a:80:50:a8:
4a:32:0e:e8:3a:5f:41:98:24:ea:67:6c:94:22:ea:
c6:0e:51:db:7d:cc:43:db:ae:6b:1c:c3:8e:3f:7d:
ad:be:3d:dd:14:f3:2e:af:fd:6c:35:c2:66:6d:ba:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:57:23:07:CF:B3:DC:4F:2E:3A:34:24:34:75:14:96:35:9A:11:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C450E3206E011EFA17C3A71017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:a2:e2:5b:21:71:76:73:7e:97:f3:79:0e:87:39:56:e0:82:
7d:1f:19:3f:65:d8:dd:b2:40:74:1e:30:d4:4c:2d:1e:3d:f1:
62:52:14:68:94:d6:2b:2d:00:b4:9f:57:91:ea:47:e3:45:2d:
e3:55:f1:bc:61:9c:3c:89:4e:5e:df:5e:e5:17:d9:5c:2c:3a:
c2:1a:6a:42:88:44:5c:b1:f9:3f:e8:9e:ed:03:9e:f5:57:f4:
7d:43:fd:f4:9b:38:bd:39:ab:de:06:ff:29:72:24:54:b2:b9:
02:40:54:75:73:c8:5b:f1:8d:1b:10:10:58:9b:de:79:2e:90:
77:05:c3:f3:63:f7:fc:cf:0d:ac:d6:3d:92:c8:60:7e:b0:79:
24:b0:f2:52:bb:da:dd:42:a2:d6:62:d7:68:dc:65:93:f6:04:
2d:15:04:05:b0:e4:76:4a:e9:c7:67:c9:c3:dc:96:7a:d9:84:
fd:d0:03:1b:ec:8b:66:4b:3c:86:6e:b8:56:eb:c4:7b:94:ef:
7f:35:d4:c2:ba:07:b0:bb:b5:b0:67:fc:88:ee:59:47:6a:d5:
a3:09:b5:f3:89:83:14:d8:7f:a8:99:d3:2d:32:39:38:58:b5:
f6:fa:9e:41:bd:f7:18:36:b9:72:97:77:3d:81:a9:db:59:26:
e9:9d:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:19 2024 by rpki-client on console-ams.rpki-client.org