Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B964D88CCB511EEA4F9E276775412E6.roa
File: 2B964D88CCB511EEA4F9E276775412E6.roa (raw, json)
Hash identifier: LLLDwGb1XXUNGkZzvUowFDri+IHD5jtNdJzJlwtZmRI=
Subject key identifier: 5B:7D:F6:7F:94:D5:47:10:9B:C9:F2:26:E1:BD:D7:C7:48:7A:15:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B964D88CCB511EEA4F9E276775412E6.roa
Signing time: Fri 16 Feb 2024 10:21:39 +0000
ROA not before: Fri 16 Feb 2024 10:21:35 +0000
ROA not after: Fri 26 Apr 2024 10:21:35 +0000
asID: 9009
IP address blocks: 154.218.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35521 (0x8ac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:21:35 2024 GMT
Not After : Apr 26 10:21:35 2024 GMT
Subject: CN=65cf3733-87aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:bf:50:c5:e1:fd:80:a8:5b:ad:97:29:c4:
78:0e:f9:66:2e:b0:a5:61:ce:d9:00:a8:13:34:cf:
ba:61:7f:ae:34:1d:1c:90:57:bc:e3:d5:9f:6a:82:
fc:fe:47:87:22:ba:93:aa:1b:84:fc:f7:49:25:c4:
dc:40:44:f1:e2:1b:63:dd:ff:a0:53:80:9b:1f:41:
65:e3:29:64:c0:7b:7d:88:92:aa:fe:4d:28:38:81:
95:9b:3e:64:01:cf:22:6f:9c:72:86:d3:1c:ff:fc:
70:68:c1:d3:d9:fc:c9:75:dc:2f:c2:18:55:f7:57:
29:bc:61:68:46:0a:c2:40:89:41:90:e5:21:67:d6:
1a:35:7f:8b:30:ec:a3:83:d7:2e:34:43:73:50:93:
cb:b0:9f:48:fa:ca:5c:52:39:05:05:4e:34:2b:cc:
10:53:e2:56:bc:d6:6e:89:bb:db:e2:23:f4:bd:b4:
90:30:22:c3:58:ad:03:3f:71:12:b5:5a:12:e6:74:
64:a1:ec:0c:6e:f5:87:84:2a:3b:0d:2e:6f:3f:c2:
a0:95:94:0b:20:9f:a3:28:a4:32:8e:c6:75:90:b1:
cb:c9:3c:b0:42:42:e2:54:6e:2e:5e:7c:58:77:74:
f0:51:95:e0:14:65:d5:32:e8:1e:c7:de:cd:29:5f:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7D:F6:7F:94:D5:47:10:9B:C9:F2:26:E1:BD:D7:C7:48:7A:15:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B964D88CCB511EEA4F9E276775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.238.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c0:48:f2:c8:1d:fa:3d:ce:19:06:67:3d:dc:51:de:8e:14:
e5:a4:9d:a4:cf:d4:06:bf:87:73:a2:79:9c:2f:07:ac:d0:5b:
7a:ad:50:c6:88:f3:66:36:d4:74:7e:bf:6b:94:fb:8b:75:60:
35:5e:3f:2a:e4:e3:3b:d0:21:63:8b:54:11:0f:86:d3:a6:24:
02:74:98:c6:c8:cf:65:59:bb:6f:67:f8:03:90:56:1c:17:25:
44:93:3f:52:7b:4d:ce:56:0d:7a:6a:14:03:d2:de:34:37:2b:
6d:73:57:54:f3:68:07:09:56:50:47:89:5d:60:b3:6d:9b:94:
28:94:f7:20:ec:8e:54:cd:d3:59:55:e5:ee:28:14:1e:f8:af:
be:37:cd:ed:fc:0b:ff:44:2a:7f:de:9b:19:54:90:c9:27:80:
d8:fb:55:fd:19:76:3e:86:a4:cb:99:cb:b8:13:4d:5f:0a:b7:
46:49:ef:5b:8e:3c:de:98:01:51:08:de:b3:74:67:ac:a3:0f:
09:43:ca:cb:54:3a:52:91:30:a2:9d:01:90:39:d6:5e:2e:69:
a2:c1:8c:2e:e3:e9:bd:23:f8:24:00:5e:5b:41:c3:3c:e4:86:
7c:9f:32:25:fb:4d:8d:c7:b3:eb:bb:a1:fd:37:ba:2e:0f:1d:
4b:cc:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:32 2024 by rpki-client on console-ams.rpki-client.org