Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EDA9A4ECCB311EE8A0E3874775412E6.roa
File: 4EDA9A4ECCB311EE8A0E3874775412E6.roa (raw, json)
Hash identifier: GTOyEa8G7chq5iQGlt+5sBD4ZakLFMKAwYbjwxKs2bc=
Subject key identifier: 8E:20:0E:91:66:96:9A:46:97:D8:43:74:75:7A:E2:92:10:81:BE:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EDA9A4ECCB311EE8A0E3874775412E6.roa
Signing time: Fri 16 Feb 2024 10:08:19 +0000
ROA not before: Fri 16 Feb 2024 10:08:16 +0000
ROA not after: Fri 26 Apr 2024 10:08:16 +0000
asID: 9009
IP address blocks: 154.218.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35505 (0x8ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:08:16 2024 GMT
Not After : Apr 26 10:08:16 2024 GMT
Subject: CN=65cf3413-20bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:20:34:f3:ba:3d:1c:c6:05:88:2a:f8:7f:
b5:2c:8f:29:3c:4d:73:65:f6:44:2e:13:41:36:a3:
5c:e2:de:34:38:8f:14:60:09:26:a8:13:cf:5e:9f:
45:76:ce:ae:f8:96:27:36:2a:bc:a2:a4:ef:12:6f:
4e:21:09:cf:b6:2d:fe:07:0a:b9:47:ea:2e:44:b6:
a7:8e:6f:a3:c9:f2:cf:ff:2b:e9:20:7b:a5:0b:c3:
44:c0:bd:12:d5:7d:0f:7b:22:1f:9d:af:63:36:bb:
93:78:ed:a8:37:76:8f:08:df:c2:74:b6:02:5c:cb:
78:23:5c:22:85:1b:ce:04:6b:20:cb:e7:a3:13:5e:
29:a1:e7:6c:ac:ba:6b:87:db:e8:fa:6d:84:dc:cf:
c9:99:50:34:c1:f8:e6:e3:2a:00:94:05:a6:62:38:
67:70:96:46:fd:75:47:6c:96:f1:aa:1a:00:63:c5:
c6:e8:5c:93:18:f2:89:50:bf:d1:1b:40:56:aa:b5:
9f:31:72:a2:3d:bc:c9:88:00:7a:46:de:98:d8:fe:
f4:59:61:ee:06:25:16:1e:29:65:b6:22:8f:a7:12:
2d:e9:07:b4:3d:01:4d:4a:78:74:fa:c4:96:8d:ff:
69:4f:93:e3:7e:14:53:5c:44:de:96:28:b9:d0:a8:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:20:0E:91:66:96:9A:46:97:D8:43:74:75:7A:E2:92:10:81:BE:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EDA9A4ECCB311EE8A0E3874775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.234.0/24
Signature Algorithm: sha256WithRSAEncryption
66:93:c6:3e:62:b4:99:82:17:b0:48:3f:6f:02:db:82:40:e7:
04:9f:33:7a:ec:fe:74:56:88:26:7c:f3:b3:fc:ce:e3:f3:af:
00:fa:f0:26:2a:fc:6f:4f:45:cd:36:13:22:98:13:78:f1:ea:
76:68:bb:5c:61:57:5e:2f:13:34:38:3f:34:24:03:59:07:5e:
f9:dd:eb:f2:47:46:82:58:f6:93:f3:a0:5f:29:42:f4:6c:0a:
3b:22:12:3b:d6:2e:98:56:fd:74:c6:52:e2:e2:3c:ec:b3:14:
71:03:18:20:ee:e6:d8:1d:ee:6b:f5:5b:8b:7c:6f:be:fd:72:
bf:ea:57:7a:e7:36:0c:4d:b5:5b:7e:4a:7a:ae:94:b4:64:38:
23:26:d6:df:c0:e9:cc:58:d3:76:94:ef:71:02:db:c3:12:65:
7e:1b:54:b8:14:23:75:17:15:8b:ed:1f:94:9f:76:32:bc:37:
31:32:e4:bc:90:fb:b4:f0:12:e7:b5:99:b0:c1:9b:87:3a:53:
81:b9:4a:2a:e9:f8:2e:fd:71:9d:f6:23:fa:17:d6:69:69:1b:
fb:62:69:1f:4e:9c:61:88:c4:68:f5:d4:4b:2d:5c:0b:70:1b:
37:0d:66:c8:fe:b3:6f:52:b1:e0:14:66:7a:b0:c4:1c:6d:b1:
c7:7c:97:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:35 2024 by rpki-client on console-ams.rpki-client.org