Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BCE1FF6CCB211EEA6627B72775412E6.roa
File: 5BCE1FF6CCB211EEA6627B72775412E6.roa (raw, json)
Hash identifier: lZLzmh/MSu0WBru89ZwxAbbOa5QdBCqtOgmMci4l+UM=
Subject key identifier: 69:D0:FF:37:26:AC:59:72:2F:18:B2:F2:21:B1:68:FA:F0:EA:39:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BCE1FF6CCB211EEA6627B72775412E6.roa
Signing time: Fri 16 Feb 2024 10:01:31 +0000
ROA not before: Fri 16 Feb 2024 10:01:28 +0000
ROA not after: Fri 26 Apr 2024 10:01:28 +0000
asID: 9009
IP address blocks: 154.216.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35495 (0x8aa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:01:28 2024 GMT
Not After : Apr 26 10:01:28 2024 GMT
Subject: CN=65cf327b-b12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:5b:17:99:54:d3:40:f8:b0:88:37:2c:df:
d3:6e:75:f0:f3:99:d1:ce:0a:43:22:55:23:9b:d0:
2d:9b:52:4d:07:2c:eb:fd:9e:ee:6d:0a:af:cd:4a:
46:6f:dd:c3:d5:5f:78:43:87:31:65:77:ec:8c:85:
2f:bf:ce:6c:8c:66:95:68:01:b6:e2:b1:b4:70:dc:
d4:32:72:47:be:93:7f:44:1d:be:17:1c:d6:20:46:
1b:b9:c9:8c:8e:12:7e:d1:f2:34:2b:1e:32:95:36:
85:34:78:86:e9:7e:b0:81:ee:8d:f9:f7:db:b7:7e:
b2:01:b2:b7:bd:15:a4:ea:79:5d:39:a5:18:47:b6:
c3:93:a6:f9:0d:2c:2b:6f:92:da:a3:63:c5:72:a6:
a2:13:69:1f:3d:00:23:99:67:5b:60:1e:e0:b8:cf:
28:25:2c:ac:9c:4c:d3:2d:57:d6:c9:f5:51:c5:48:
3c:20:de:df:b0:fd:b2:0f:1f:cf:a2:70:87:2a:64:
a3:e9:74:22:1e:14:69:d3:b6:a7:ff:16:51:b7:eb:
d8:15:45:fa:fb:ba:5b:05:ca:76:66:31:a0:fe:0d:
fa:d4:9c:27:b1:b6:fc:1a:96:be:6d:a0:8e:20:af:
6f:3f:2b:49:78:17:59:07:91:30:9c:fa:ac:5c:0b:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D0:FF:37:26:AC:59:72:2F:18:B2:F2:21:B1:68:FA:F0:EA:39:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BCE1FF6CCB211EEA6627B72775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.219.0/24
Signature Algorithm: sha256WithRSAEncryption
40:33:ff:0e:f6:a5:68:52:85:e6:a5:a7:bf:23:75:dc:7b:f4:
1a:0c:78:bc:2a:93:7f:1b:e3:f2:f1:31:24:2a:a1:99:6a:63:
55:8a:8e:56:d3:fe:a0:44:77:42:18:b8:55:31:1e:8d:bf:f4:
4b:b9:92:29:0e:b2:b1:04:2f:ce:d3:9f:bf:fa:30:17:a2:2f:
1b:45:41:8e:a4:49:48:d9:29:50:6d:da:97:a6:0f:55:87:5e:
a1:cb:ea:b6:a7:6b:1e:d1:b9:48:ad:d1:a6:d4:1c:5d:ab:43:
02:14:52:f5:e1:26:d0:44:c1:1a:82:d8:ca:01:1d:4b:01:c8:
f8:23:42:78:28:e9:7c:51:b9:9f:e8:62:91:4c:53:c8:47:3a:
0a:d8:d6:fe:ff:64:39:d7:32:f2:bc:35:8e:8d:e7:cc:5d:04:
4e:77:61:d8:bf:bb:88:c3:b2:c6:32:2c:f2:f5:44:b7:e7:52:
c6:43:a5:69:98:aa:58:d2:46:d0:aa:03:aa:c1:99:97:1b:31:
f1:df:5d:4d:87:55:6b:96:2e:d0:8d:64:c6:11:95:0b:ca:0d:
88:a7:72:d8:0a:1e:4f:0f:b8:d3:70:3b:f5:1a:a7:22:2c:8b:
32:6b:bd:8f:3e:10:86:bd:76:8f:c7:a0:ae:4f:8f:a4:4b:bf:
cd:17:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:37 2024 by rpki-client on console-ams.rpki-client.org