Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15CA0F9CCCAD11EEB5CF486A775412E6.roa
File: 15CA0F9CCCAD11EEB5CF486A775412E6.roa (raw, json)
Hash identifier: VKH9g2yTgSMNJnEp/i/lewRIhT6Wra3YB7fuu7yGgno=
Subject key identifier: 05:8A:10:26:4E:28:52:F9:DA:EF:01:2A:F5:A3:20:EC:3F:D8:C1:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15CA0F9CCCAD11EEB5CF486A775412E6.roa
Signing time: Fri 16 Feb 2024 09:23:46 +0000
ROA not before: Fri 16 Feb 2024 09:23:43 +0000
ROA not after: Fri 26 Apr 2024 09:23:43 +0000
asID: 9009
IP address blocks: 154.216.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35447 (0x8a77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:23:43 2024 GMT
Not After : Apr 26 09:23:43 2024 GMT
Subject: CN=65cf29a2-bf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:c7:dc:f2:fb:c8:f3:df:91:d2:1c:05:18:
2c:96:4f:a0:16:7b:c8:f7:4b:5b:9f:6c:5c:9a:e0:
26:93:99:2d:d3:d5:04:24:ab:09:ab:7f:02:eb:d9:
49:d3:14:48:57:98:bc:76:8b:fa:30:4c:a2:63:6a:
51:8f:97:bf:28:37:07:1c:4d:f6:1a:a2:90:bc:5c:
52:68:01:45:6d:db:ae:46:66:87:b8:99:49:8f:c6:
ad:dc:c7:25:99:6b:95:ba:37:16:c1:d9:62:fa:c1:
fd:67:f2:02:01:e2:fa:a2:c5:e3:12:c8:0c:34:54:
1a:ee:0b:fe:a4:96:36:ef:20:5d:11:40:ae:ba:34:
9d:36:85:5f:7e:e2:f5:e9:b9:03:8a:ab:94:2c:b6:
39:b0:75:87:e8:0b:df:07:d7:d0:d8:5c:4e:3a:fb:
cd:95:e5:27:15:2a:98:8f:90:ef:86:ab:5d:df:98:
48:38:62:ef:86:50:27:ad:6a:71:f7:87:8d:a7:de:
2d:9b:ee:96:cb:0a:e7:e9:c8:2d:86:bb:0c:46:32:
e3:2f:1b:b4:75:61:f6:96:10:76:67:90:6a:09:c3:
b1:79:c7:7e:35:7b:42:bd:ea:57:14:db:e3:40:ea:
43:1c:3f:8e:37:41:9e:22:8b:65:36:68:6f:af:a9:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8A:10:26:4E:28:52:F9:DA:EF:01:2A:F5:A3:20:EC:3F:D8:C1:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15CA0F9CCCAD11EEB5CF486A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.207.0/24
Signature Algorithm: sha256WithRSAEncryption
28:96:7a:a6:3b:62:78:19:dc:e5:85:6f:ba:79:1b:a8:e1:f3:
22:9a:9a:ab:99:7e:d9:27:eb:a1:ae:14:90:e0:a4:cc:29:fa:
cb:d8:9e:e4:43:57:52:f8:32:65:de:d1:05:b7:5a:38:49:73:
e4:26:e6:38:c8:1b:2f:fc:91:f1:3b:f1:7b:bc:f0:2c:eb:23:
bc:e7:a7:cd:3f:28:9b:c2:cf:a0:13:fd:59:4f:a8:e3:ef:35:
30:c8:80:1b:f7:83:9b:c6:87:f7:21:d1:91:8b:b3:6c:3c:5d:
5c:f9:08:44:17:45:dc:29:07:02:3d:2c:b5:61:bb:8f:20:d6:
6a:6d:23:0a:81:22:8b:80:40:3b:67:a6:cc:02:81:94:9f:19:
2a:49:5d:4f:c0:6b:5f:77:5e:ee:aa:95:04:9a:e5:33:05:42:
7f:5c:35:41:66:73:2d:e6:2a:70:72:b6:cd:76:ba:dc:7b:92:
85:eb:64:af:b2:eb:41:5a:e2:97:25:a4:20:a1:c9:a6:fb:2a:
db:17:f4:e3:1f:5c:7d:33:fb:43:b5:8b:97:c7:6d:84:c2:68:
46:98:1e:f4:a3:0a:a9:af:06:4b:48:46:a9:c9:3b:9a:9d:d6:
8c:0a:54:ad:26:bd:6b:da:ce:00:63:89:79:56:da:2a:b4:0c:
03:f4:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:28 2024 by rpki-client on console-ams.rpki-client.org