Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E40F4D4CCAA11EE94FFEC65775412E6.roa
File: 3E40F4D4CCAA11EE94FFEC65775412E6.roa (raw, json)
Hash identifier: oN+tpkuqr85uUttgMKxSgzzy/S7NV+DLNTM6MACX4xA=
Subject key identifier: 4A:17:3A:3A:F8:F2:17:7E:94:9F:1A:7B:F6:C0:60:AE:04:FA:71:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A5F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E40F4D4CCAA11EE94FFEC65775412E6.roa
Signing time: Fri 16 Feb 2024 09:03:26 +0000
ROA not before: Fri 16 Feb 2024 09:03:22 +0000
ROA not after: Fri 26 Apr 2024 09:03:22 +0000
asID: 9009
IP address blocks: 154.216.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35423 (0x8a5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:03:22 2024 GMT
Not After : Apr 26 09:03:22 2024 GMT
Subject: CN=65cf24de-ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:9d:e1:5e:e3:bd:74:04:0d:23:aa:17:23:
d6:db:eb:6e:da:7a:69:27:76:24:9a:44:0c:eb:a2:
ff:0a:b8:96:61:3a:e9:ed:cd:29:24:59:8d:93:79:
46:7b:72:99:73:46:9a:5a:27:d5:e7:6f:21:d2:9d:
2f:df:5a:80:c9:39:65:a4:62:3d:0c:34:b9:e5:f2:
38:b1:2a:c5:d0:f9:23:ca:67:cd:ee:e6:68:6c:82:
c3:a1:92:27:95:8d:25:2d:9f:0b:c5:dd:b4:9e:2f:
68:e8:bf:7b:ed:30:70:68:ad:4d:ad:19:7b:86:b9:
3d:6f:35:90:9b:3c:10:e6:fe:74:89:74:2b:5a:25:
87:f1:4c:49:fb:26:2a:34:3a:7d:d8:2e:58:22:b3:
02:f8:42:b7:32:b0:21:7b:fc:ae:c1:c5:07:9b:fc:
b8:dc:15:7b:21:39:cb:ba:0b:ed:72:6c:06:1b:d8:
6e:d2:19:86:a2:07:1e:72:12:3e:af:35:dd:41:33:
ce:9d:eb:f6:74:b0:0d:11:d4:8a:01:6a:07:ee:dd:
79:65:58:b7:e3:00:90:c6:a0:f8:cd:aa:ea:ba:1e:
d8:96:74:82:40:61:80:73:6f:4e:80:59:ae:10:3e:
cb:80:94:64:29:b2:46:bb:ca:1c:14:aa:36:bf:b5:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:17:3A:3A:F8:F2:17:7E:94:9F:1A:7B:F6:C0:60:AE:04:FA:71:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E40F4D4CCAA11EE94FFEC65775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:76:f0:9b:aa:a6:d8:93:2b:0b:76:77:6c:62:5a:ae:55:0c:
73:36:ff:af:52:ba:44:5e:02:0c:bd:44:02:99:f0:bb:e9:f2:
fb:d8:7b:63:4f:a6:fb:f1:2a:19:96:81:4d:d2:61:c7:a0:93:
40:5d:0e:42:aa:e3:3c:d1:c5:87:f1:ae:99:18:1f:6a:2e:4a:
87:b0:cd:05:67:ab:10:22:51:96:48:2b:73:05:93:fb:66:d2:
89:84:6c:cd:b9:19:cc:d4:e7:17:35:27:4e:63:fa:e9:69:e0:
be:e9:9a:38:a7:a1:3e:0f:0e:7e:39:7b:a7:04:0b:10:a4:e2:
4a:0b:b7:b3:a5:39:75:dd:38:4a:7b:da:5e:5e:a8:af:75:2b:
15:02:60:01:b7:36:f6:b6:41:e0:7f:7e:4b:5a:b0:d4:10:73:
a6:a9:63:79:a6:d6:a5:0a:a4:d4:f5:7c:d9:12:64:9e:3d:f0:
23:69:a6:e6:a0:98:c5:a7:2b:35:91:2f:b9:cc:84:79:6f:17:
30:bb:3f:dc:41:6a:d2:97:af:cb:a9:10:fb:eb:77:d5:48:b7:
e4:f7:df:aa:93:fa:b1:bd:5e:5d:86:14:a8:0e:04:65:8d:b6:
54:13:ec:3e:2e:d8:f8:aa:74:dc:32:da:8d:42:48:8a:b6:47:
33:01:94:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:33 2024 by rpki-client on console-ams.rpki-client.org