Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2186FBE8CCB111EEB6389670775412E6.roa
File: 2186FBE8CCB111EEB6389670775412E6.roa (raw, json)
Hash identifier: IWrZ+jqjlkJPRuvjyaHy79zRbC+oAzxtoF7C8Kls5Fo=
Subject key identifier: 0B:2A:28:8A:D0:C4:2E:F2:D0:B6:CB:6E:4D:58:6E:76:8A:1A:B4:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2186FBE8CCB111EEB6389670775412E6.roa
Signing time: Fri 16 Feb 2024 09:52:44 +0000
ROA not before: Fri 16 Feb 2024 09:52:41 +0000
ROA not after: Fri 26 Apr 2024 09:52:41 +0000
asID: 9009
IP address blocks: 154.216.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35483 (0x8a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:52:41 2024 GMT
Not After : Apr 26 09:52:41 2024 GMT
Subject: CN=65cf306c-e467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:76:fc:bc:fd:76:9d:7b:38:0a:71:e2:3d:
a9:79:0e:94:81:c5:d2:31:b5:9e:2c:28:c7:d4:ff:
f0:6c:4f:6b:14:a2:ea:a3:f8:d6:46:cb:e9:49:86:
61:e6:f3:67:f6:0f:20:39:20:e5:1b:51:07:3d:62:
a0:82:0c:76:03:9f:a9:94:5d:42:2e:ab:63:9b:9c:
ee:18:8a:10:76:e8:a9:e5:4c:cf:28:b1:9f:4f:e8:
e3:33:70:1a:83:69:b0:d7:7d:ec:19:86:79:49:24:
99:9d:65:76:3e:d0:82:7f:c7:15:70:2b:bc:b6:f0:
5c:9f:6b:8a:35:c6:dc:03:52:62:84:d1:aa:17:26:
a1:6b:bd:09:b3:dc:65:ce:22:e1:ea:87:c1:a2:90:
e3:5f:61:6c:19:dd:9c:42:6d:4f:c7:5d:61:7c:2c:
e7:0b:ec:43:6a:8e:87:80:b0:8c:f7:53:10:bb:d5:
06:9b:ac:d2:0e:67:04:ad:c7:56:7b:78:3b:73:b4:
3f:39:ec:8e:05:8d:b8:44:8a:67:2d:d0:6b:ac:6f:
7f:0c:59:26:02:36:73:04:e9:e5:e2:24:4e:c4:21:
72:5e:6d:6e:9e:f2:1b:3e:c1:ee:e8:98:3b:7f:ab:
fe:86:b7:76:cb:53:be:f3:bc:97:25:e4:a6:f7:15:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:28:8A:D0:C4:2E:F2:D0:B6:CB:6E:4D:58:6E:76:8A:1A:B4:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2186FBE8CCB111EEB6389670775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:76:32:94:1d:8f:39:16:e5:8c:96:49:ec:b1:e8:1b:83:ce:
54:0f:f8:48:72:78:d9:18:98:45:07:2b:95:51:41:96:c9:a5:
55:fa:97:08:5e:9c:ee:21:55:44:2f:a6:da:3d:4d:40:bf:e7:
b3:29:9f:2e:08:18:4d:f5:20:eb:b2:88:c8:b5:0d:b6:a1:da:
f4:42:e5:4b:44:d7:5f:14:20:f8:68:0e:7b:0a:2a:ec:1a:b5:
57:27:d2:e5:29:27:9a:27:a1:0e:d6:5e:a0:69:b4:82:a7:63:
0d:32:da:0e:44:1b:e7:89:12:2b:fe:93:d0:0a:29:62:66:c7:
15:ad:f2:19:b7:a3:bb:c1:df:76:c3:0b:ed:54:e5:fd:03:17:
c5:bf:7b:2f:d7:74:ba:01:1b:61:11:02:d8:cb:a5:2e:8a:7d:
de:1c:f3:bb:ed:4f:f0:6e:e3:31:77:b6:ff:6f:95:e2:fb:5f:
dc:43:e5:7e:46:33:cc:08:82:bc:46:80:71:4d:f2:09:da:0f:
07:a0:b1:ed:7a:0a:27:e9:0c:37:4d:86:5f:b5:c7:4f:8e:c0:
81:99:3f:f9:6d:c9:59:8d:7c:37:9c:36:3b:74:83:6c:81:a2:
a4:cc:5c:1e:75:46:67:b8:02:df:f1:c4:b7:ff:c8:ae:04:c7:
7d:94:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:29 2024 by rpki-client on console-ams.rpki-client.org