Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279ECE46CCB811EE8687C07B775412E6.roa
File: 279ECE46CCB811EE8687C07B775412E6.roa (raw, json)
Hash identifier: 9BNPcHSdCfPkzZwpQ7uP9eCCtU6e3McrKPo1YBtmJIY=
Subject key identifier: 32:F5:22:CB:57:0D:83:2E:09:ED:BB:AC:F4:A1:93:89:B9:2F:A0:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8ADD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279ECE46CCB811EE8687C07B775412E6.roa
Signing time: Fri 16 Feb 2024 10:43:01 +0000
ROA not before: Fri 16 Feb 2024 10:42:57 +0000
ROA not after: Fri 26 Apr 2024 10:42:57 +0000
asID: 9009
IP address blocks: 154.218.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35549 (0x8add)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:42:57 2024 GMT
Not After : Apr 26 10:42:57 2024 GMT
Subject: CN=65cf3c35-a422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:6d:a0:e9:e0:9c:bc:4e:4e:f0:36:f2:54:
33:44:9a:54:b6:bf:f7:91:a5:5f:df:19:df:1a:6d:
21:97:ca:83:c5:28:66:db:0b:b4:74:8c:c5:1e:ba:
f3:c7:0a:02:fb:f2:06:fc:99:97:b2:98:f8:30:ff:
d9:16:76:24:6e:44:f1:7f:25:0e:29:a0:dd:cf:43:
ab:4a:15:63:3f:99:93:c1:64:b0:d0:aa:1e:c8:8c:
bb:51:b1:f7:4c:c1:f3:2e:b4:b0:0d:c5:d8:16:fa:
2d:57:0f:b0:7f:ee:63:7e:e5:ca:bf:47:df:9e:e2:
72:e1:09:27:bd:d2:bb:7d:66:dc:97:93:b9:7d:b0:
db:b7:cc:a7:70:8b:0a:0c:ac:d5:81:69:34:2f:6f:
04:aa:73:fd:28:e9:94:61:c5:25:a2:2e:a6:a0:4a:
c0:2f:6a:93:62:c1:e8:aa:f5:d2:39:2d:5b:c0:e6:
c1:75:64:08:fa:fd:1a:f4:b8:54:a6:62:99:77:dc:
54:5e:fb:12:b9:b5:d7:70:d2:61:70:82:13:ee:ab:
4f:ee:58:33:88:57:7c:40:55:d8:8c:2b:e9:1c:76:
88:9b:9e:ea:c7:0f:f7:35:0f:85:d6:e2:25:f6:48:
26:35:c6:13:9e:bb:af:5d:4f:c7:10:0d:dd:e8:ad:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F5:22:CB:57:0D:83:2E:09:ED:BB:AC:F4:A1:93:89:B9:2F:A0:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279ECE46CCB811EE8687C07B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.252.0/24
Signature Algorithm: sha256WithRSAEncryption
28:01:2b:cb:91:06:56:e5:71:f3:d1:89:87:f9:13:49:97:aa:
0b:8f:13:ff:2a:2a:9a:e3:0b:9a:d8:54:49:e2:52:8e:67:ea:
47:e3:e3:33:b9:9e:8c:c3:5b:0c:66:4c:a8:8a:70:f1:80:c2:
ce:66:e1:21:00:06:93:1a:ae:c7:61:d1:e9:4d:89:b3:34:54:
63:34:62:df:46:bf:0f:a3:17:50:4a:ce:91:41:fc:91:f3:9d:
e1:3a:fa:6a:07:8a:3b:cf:71:0e:82:dc:9b:89:4a:43:8b:50:
4f:2a:65:c6:22:5a:a3:97:9e:fd:9e:6f:9f:d6:8f:c0:36:66:
65:10:ee:47:3d:e5:28:03:b3:9f:7c:fb:99:a2:69:2a:c9:40:
33:8c:2b:ab:ad:74:14:65:65:7e:0f:5d:2a:f9:bd:14:62:6d:
d3:57:b4:1e:f1:26:51:a7:9a:bb:97:be:70:00:9b:97:9c:28:
e2:8d:7f:3f:0e:6e:94:a7:cb:a8:6c:4d:da:ff:bd:74:c2:2f:
22:6c:30:33:90:aa:bd:32:0f:cf:64:0a:c7:33:a9:e9:45:ff:
29:86:f6:3a:fd:63:e6:67:e1:00:a1:45:81:b7:e9:14:d1:de:
63:33:8d:ff:18:bd:3e:99:04:e0:5e:7a:25:37:3c:7f:81:ee:
8d:1c:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:31 2024 by rpki-client on console-ams.rpki-client.org