Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1129B350CCAF11EE8BB16F6D775412E6.roa
File: 1129B350CCAF11EE8BB16F6D775412E6.roa (raw, json)
Hash identifier: 5YWQuLpxLUzi+9kUYcNwemFc/Az1+RjQQ9nuQEi6SyY=
Subject key identifier: A3:52:9A:1F:69:2C:66:EB:3D:22:8E:F4:6C:BC:91:D7:FC:6F:04:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1129B350CCAF11EE8BB16F6D775412E6.roa
Signing time: Fri 16 Feb 2024 09:37:57 +0000
ROA not before: Fri 16 Feb 2024 09:37:54 +0000
ROA not after: Fri 26 Apr 2024 09:37:54 +0000
asID: 9009
IP address blocks: 154.218.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35465 (0x8a89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:37:54 2024 GMT
Not After : Apr 26 09:37:54 2024 GMT
Subject: CN=65cf2cf5-7192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:05:00:a3:1d:70:7f:12:b5:e3:a7:8f:2d:
4d:9d:8c:6d:cb:15:de:85:23:e0:2d:33:22:52:79:
c5:4b:81:e9:f2:16:ec:c5:ac:68:95:49:27:f1:66:
0d:e4:b9:6f:c3:b2:99:14:f4:b3:d1:f9:81:68:7f:
f0:96:79:31:b7:3e:e8:e5:b7:3e:37:42:03:15:5e:
11:ac:ed:68:13:67:6d:a3:25:1d:86:2a:cb:39:ce:
7d:6f:26:70:e9:86:17:6c:ee:2a:23:30:96:05:95:
87:7b:ee:98:88:0f:a3:bb:e2:88:f9:16:36:3b:02:
74:5a:56:97:fb:ae:cc:72:79:a4:4e:f0:6c:6a:ca:
3f:d3:d3:12:eb:d1:f4:97:fa:53:3f:9e:ff:ab:cb:
03:cd:95:5b:98:b3:be:46:33:d6:e4:0c:9a:dc:ff:
5d:a7:de:02:86:d6:64:b5:ba:7f:34:a6:de:c5:ba:
6e:c8:a3:3c:ef:b6:03:f6:23:f7:94:7c:cf:3d:ae:
8a:5b:c5:6c:c6:5f:18:a9:0b:d8:8d:c1:3d:f8:ba:
16:90:b8:82:79:e2:ff:a5:da:77:a2:a9:80:96:82:
b0:22:52:c3:94:ad:da:08:1a:26:dc:58:0d:af:92:
be:66:b6:dc:73:10:2b:c2:15:5a:1e:59:1c:19:09:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:52:9A:1F:69:2C:66:EB:3D:22:8E:F4:6C:BC:91:D7:FC:6F:04:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1129B350CCAF11EE8BB16F6D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.224.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ba:af:09:97:c3:0a:8a:6f:d4:43:39:41:e7:54:66:7d:09:
fc:c1:8e:02:26:62:71:41:73:93:0e:d1:9a:66:96:1a:bc:c2:
e2:90:a0:de:ef:7c:b7:e6:3f:d9:e7:cb:a6:f2:70:47:c6:6d:
38:30:6d:e4:75:51:7f:26:bf:dc:de:04:00:07:7d:06:54:93:
b8:81:b2:9b:bf:3f:58:17:19:0d:2b:37:d0:b3:01:54:94:7d:
f5:5b:83:37:de:8c:3c:47:5e:f2:3d:dd:8d:d7:3a:25:45:6c:
e6:e8:04:05:e1:a0:c2:49:8a:8e:9a:1f:c2:15:cf:c8:ce:d8:
94:3a:3f:ba:57:3a:42:3a:44:41:42:98:0e:7f:2e:58:9b:bb:
ce:cb:f4:c3:d2:d8:c3:68:69:82:05:87:ca:e2:61:b4:bc:b1:
ad:81:4e:c5:b0:c9:0c:29:74:21:6a:6b:41:fb:a9:d8:41:af:
a5:c6:ab:b7:19:33:4c:60:ed:4a:d8:8c:31:41:1c:89:2c:3d:
7a:97:ad:ba:e2:a2:a4:2a:d7:70:1e:17:4d:ca:17:1e:ba:9c:
48:38:d7:80:c0:f5:ed:ec:62:ee:28:3b:84:15:db:0e:0e:a5:
45:5d:e2:9a:4a:b5:e9:53:6c:3d:9c:69:35:ad:ed:db:7e:9b:
97:ba:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:28 2024 by rpki-client on console-ams.rpki-client.org