Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/389CFCE0CCA911EE885B2564775412E6.roa
File: 389CFCE0CCA911EE885B2564775412E6.roa (raw, json)
Hash identifier: VXiMUJTLIhTGJjGYLaNRE4DwyS7YYRc32tBqKXonJ70=
Subject key identifier: 9C:FF:E5:74:5E:E2:13:9F:86:AC:83:A2:19:11:32:AD:DD:D7:9A:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/389CFCE0CCA911EE885B2564775412E6.roa
Signing time: Fri 16 Feb 2024 08:56:07 +0000
ROA not before: Fri 16 Feb 2024 08:56:03 +0000
ROA not after: Fri 26 Apr 2024 08:56:03 +0000
asID: 9009
IP address blocks: 154.218.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35413 (0x8a55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 08:56:03 2024 GMT
Not After : Apr 26 08:56:03 2024 GMT
Subject: CN=65cf2327-163f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:fd:5a:d7:06:d6:5c:09:78:03:2f:3f:2b:
f6:87:38:68:06:7e:c2:46:56:55:65:a7:fe:53:6f:
36:ab:d7:d3:5e:b4:5f:10:1b:57:3b:2d:a9:09:6c:
00:40:3e:1b:61:24:60:20:61:05:3d:d1:7f:ea:c3:
37:7f:28:4a:06:ad:91:a9:28:0b:76:80:a7:5d:42:
22:2b:c3:fe:8b:62:3d:98:53:a6:82:8b:e6:e0:03:
f7:81:0b:8b:2b:8b:e5:50:31:13:6a:9b:e8:40:33:
fd:66:7a:b9:44:a9:c7:60:45:88:3f:18:3f:7b:81:
a0:36:63:c2:23:8b:55:96:51:46:0a:63:66:1d:ba:
19:3c:ab:d3:bd:d0:6f:75:70:7d:16:68:df:f5:27:
e3:bb:65:ad:d4:6d:2e:46:76:3b:59:36:47:62:8c:
88:55:b9:d3:cb:6b:69:ec:5c:4f:3c:b2:09:7a:e2:
4e:35:63:f3:ed:1b:c0:a1:e6:2d:56:8f:9f:23:d2:
99:b8:fe:cd:41:a9:d3:06:d3:79:f1:50:4f:e9:a7:
15:6f:ab:6b:94:70:d4:6e:02:b5:99:74:f3:94:38:
86:03:fd:d4:69:16:6b:fc:92:b2:9c:99:9b:75:32:
91:23:da:ad:94:e9:6d:5a:89:88:aa:2f:e4:17:3d:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:E5:74:5E:E2:13:9F:86:AC:83:A2:19:11:32:AD:DD:D7:9A:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/389CFCE0CCA911EE885B2564775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.211.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:cb:a7:94:c5:90:41:ea:05:9a:cc:3c:fa:7d:30:c3:76:5c:
8f:cf:47:f8:28:6b:8a:d8:ee:06:2b:a6:90:8b:30:0f:7d:fc:
ef:d3:ee:58:db:3e:d0:08:13:83:9c:68:80:63:ab:3a:32:6c:
48:87:73:83:4e:dd:c6:dc:03:bc:26:19:ad:0c:e6:a6:f2:c0:
78:c3:eb:ea:f7:49:03:95:b8:d3:b5:00:a3:9e:20:54:d2:1e:
43:15:e0:80:91:a2:7a:2f:cb:f9:8c:64:e6:9b:2b:c2:47:eb:
1f:0f:1b:a9:25:f4:b5:ed:bc:b8:bb:97:23:75:97:95:42:7e:
f1:db:27:72:71:5f:94:8a:6f:6e:6e:1c:92:e1:eb:2b:b1:71:
83:65:df:da:4b:23:f9:e0:3b:3a:fe:7b:c1:b7:cf:69:20:8e:
05:90:9f:07:56:19:db:30:7a:9e:7c:00:2c:7a:b9:1c:aa:1a:
61:d5:b4:45:40:d7:05:86:81:c1:8d:30:26:e7:da:a3:a7:8d:
12:cf:91:eb:9d:4a:50:e8:f9:3b:89:40:43:a8:9b:1e:4a:58:
42:aa:b1:69:12:cb:ea:26:d3:7f:ea:f4:a3:f7:b6:e3:10:84:
64:04:21:9d:52:19:86:89:45:c4:fb:20:78:7a:1b:cb:18:39:
23:11:e7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:33 2024 by rpki-client on console-ams.rpki-client.org