Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E594D48CCB311EEB558A473775412E6.roa
File: 1E594D48CCB311EEB558A473775412E6.roa (raw, json)
Hash identifier: kNtcIDGBN8aoavzCD5NodN80Qrs78qw2j+x7XuA6JIk=
Subject key identifier: 9A:CB:7C:52:02:10:5E:66:5B:AB:BD:5A:2F:93:2D:A0:BC:DF:61:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E594D48CCB311EEB558A473775412E6.roa
Signing time: Fri 16 Feb 2024 10:06:57 +0000
ROA not before: Fri 16 Feb 2024 10:06:54 +0000
ROA not after: Fri 26 Apr 2024 10:06:54 +0000
asID: 9009
IP address blocks: 154.216.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35503 (0x8aaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:06:54 2024 GMT
Not After : Apr 26 10:06:54 2024 GMT
Subject: CN=65cf33c1-e59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:3c:a0:4e:c4:35:07:c8:eb:bc:1b:05:9f:
4b:d8:b1:04:da:84:4f:5d:bb:e0:eb:c7:28:2b:e2:
92:df:18:17:6d:3d:29:39:f9:1e:6d:05:62:01:f0:
c8:f8:ff:e1:50:a7:e3:f2:9b:41:0d:7f:7b:36:9c:
e1:0c:04:de:95:b6:37:bc:d0:1d:7f:94:04:5f:28:
ce:fb:10:14:e9:d2:7d:48:a9:a9:a1:f1:a2:99:47:
29:b6:e7:c9:51:33:d2:23:38:1c:42:a1:d7:ae:58:
94:26:2f:05:51:6f:0a:1e:62:01:a8:7a:62:10:8e:
89:60:fe:4f:fc:df:e2:87:16:38:56:f3:35:d9:12:
6b:ca:0b:d1:34:8f:98:c1:ac:91:e7:d4:4e:4f:99:
9d:a8:70:a7:a8:fe:12:9b:74:27:52:58:6d:7d:27:
3d:66:74:44:1f:3a:1c:78:c9:12:a5:22:14:ce:70:
7d:fc:14:26:28:03:24:6a:55:87:03:6d:ca:c0:7c:
bc:be:b9:f3:05:dc:d9:e0:ad:2d:b2:4b:ff:55:8b:
48:e8:fc:63:28:cb:40:68:44:b8:1f:0b:68:7e:f4:
d6:b6:bd:63:a7:f4:fe:be:3c:49:29:01:85:fc:ad:
bb:8f:22:33:d5:09:7b:06:a7:91:86:57:83:4f:0f:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CB:7C:52:02:10:5E:66:5B:AB:BD:5A:2F:93:2D:A0:BC:DF:61:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E594D48CCB311EEB558A473775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
be:46:cd:4f:24:83:c0:8c:83:28:82:5f:8c:71:d4:7a:69:ad:
5a:b8:e2:06:02:56:26:6f:5f:54:68:66:f6:a9:bb:ac:49:da:
88:2a:17:8b:57:03:3d:74:41:82:b8:e6:48:11:2c:c1:4f:83:
a5:54:c7:61:f4:37:4a:5c:9c:30:c7:14:09:aa:d3:36:82:b8:
90:e0:d2:97:9a:57:47:23:a6:52:9d:57:d9:7f:a2:fe:d8:9f:
e7:4d:7e:56:a2:8b:03:f4:71:3d:36:55:c8:d8:e2:5e:77:5a:
82:1b:b4:3a:70:c7:9b:10:f8:32:9f:8a:35:5d:56:c9:63:58:
0b:55:0c:67:9b:ef:ee:02:3e:5a:35:41:e8:a9:c5:3b:58:6f:
26:29:ad:49:9c:5d:ed:19:ea:05:14:4c:45:2f:09:47:eb:5c:
02:ee:82:5f:c4:96:e4:5d:36:03:e4:70:8f:26:8a:92:fb:f4:
e6:9d:b2:4a:3b:50:ea:61:03:a6:e6:c9:53:50:e1:26:66:5a:
ad:51:eb:4c:09:30:a3:27:c8:a9:18:85:c0:62:ad:fe:52:36:
32:fb:35:20:f3:51:5a:d4:44:14:7c:28:41:ba:d0:36:54:95:
4f:f7:46:d0:5d:da:e4:da:82:63:03:02:9c:cf:ec:59:82:e3:
64:5b:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:29 2024 by rpki-client on console-ams.rpki-client.org