Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DE93B6C07AD11EF93D95DF9007001B1.roa
File: 2DE93B6C07AD11EF93D95DF9007001B1.roa (raw, json)
Hash identifier: CK1jbxxtuM0Iygf9Pklfp1/9ILtAPEb6jB6wJkF4DKs=
Subject key identifier: F4:26:4F:4D:10:45:4E:B6:E8:F1:2E:FC:F5:23:4F:60:D2:E3:85:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B38B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DE93B6C07AD11EF93D95DF9007001B1.roa
Signing time: Wed 01 May 2024 11:23:05 +0000
ROA not before: Wed 01 May 2024 11:23:00 +0000
ROA not after: Thu 16 May 2024 11:23:00 +0000
asID: 136778
IP address blocks: 154.212.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45963 (0xb38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:23:00 2024 GMT
Not After : May 16 11:23:00 2024 GMT
Subject: CN=66322619-7839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:89:ee:42:5c:54:7a:fd:db:69:d6:e3:20:
5f:35:e0:80:af:4d:7b:6c:84:dc:2c:a8:f6:3c:fc:
9c:84:73:7f:90:ae:c6:8e:37:fe:35:7b:bb:20:ef:
eb:ef:c4:47:24:d2:5f:f6:50:79:4e:16:8d:a2:03:
9b:09:f6:2a:b9:23:42:33:24:65:18:49:b5:a8:c0:
f1:6a:b6:c3:65:69:12:ee:ad:5b:50:ad:c6:eb:31:
b4:69:01:64:ff:ca:bf:eb:4b:89:8c:e3:05:97:13:
c3:ce:08:4d:7c:76:57:90:97:80:f5:78:27:39:e4:
db:25:7f:f8:64:e2:28:07:12:0c:ab:20:09:4b:15:
d8:8b:e9:56:6a:aa:62:6d:68:9b:34:ee:65:7d:1c:
85:b3:fe:63:d5:de:18:9c:1e:41:84:8f:38:58:14:
6e:90:e3:be:e3:26:a3:89:70:90:7f:21:2e:6c:af:
41:f6:96:19:6b:8e:e7:37:a0:66:af:07:c7:67:bd:
fa:00:76:ad:69:f0:ab:fc:33:6a:6e:0a:3d:25:0a:
06:74:ff:fa:93:d5:61:ff:93:9f:7f:dd:1a:a2:a3:
71:0d:0d:2b:15:61:df:53:12:16:80:92:b3:df:e9:
af:09:d5:c5:13:d4:e5:9c:7d:08:7a:6f:ec:93:a0:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:26:4F:4D:10:45:4E:B6:E8:F1:2E:FC:F5:23:4F:60:D2:E3:85:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DE93B6C07AD11EF93D95DF9007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b6:4b:d3:5b:17:89:83:fc:02:47:e4:d7:c4:e7:c3:51:db:
78:06:fb:c5:56:eb:05:0b:a4:56:b4:78:f3:59:c3:3f:aa:cf:
22:dc:47:4f:c6:3c:59:44:f4:95:7d:b5:d5:af:d0:c7:52:32:
89:b6:c0:68:0d:69:ee:44:91:81:b6:9d:aa:41:e7:68:05:26:
24:58:62:a1:7f:0b:67:fc:fa:12:04:db:4e:95:da:6e:45:11:
ab:80:45:47:73:0f:53:7f:c6:88:9c:23:55:25:6c:dc:cb:86:
f5:43:f3:0b:96:cb:6d:a2:85:85:63:49:87:40:2b:a2:d2:56:
73:0d:d5:02:0a:83:54:f8:3a:05:7d:8b:92:55:2c:79:da:ce:
12:a7:87:3d:c7:52:75:72:2b:c5:63:29:c4:97:a1:2f:2c:f9:
40:56:29:84:85:4c:3c:49:8e:97:00:f3:4c:d8:27:1c:98:68:
04:42:6e:ef:4d:00:5b:c5:d8:de:1f:51:ef:7e:91:45:83:65:
7c:3a:0b:06:e7:e6:ac:49:77:48:cd:73:22:70:64:2a:47:72:
d5:e4:41:99:e9:4d:3c:03:44:1d:2a:40:8e:64:ef:19:fd:d7:
5d:d3:af:ee:29:34:a7:41:44:f1:22:fe:39:bb:30:49:a9:07:
cf:58:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:22:08 2024 by rpki-client on console-ams.rpki-client.org