Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6492144ECCA811EEB04BDD62775412E6.roa
File: 6492144ECCA811EEB04BDD62775412E6.roa (raw, json)
Hash identifier: 1lbWiMbictZLY3SloL4awjx8SKAj3Z7nwsEDDbGQ5Vg=
Subject key identifier: AA:33:0F:B0:19:9B:A0:2F:0D:D1:A7:8C:08:E4:5A:F9:FA:58:22:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A4D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6492144ECCA811EEB04BDD62775412E6.roa
Signing time: Fri 16 Feb 2024 08:50:11 +0000
ROA not before: Fri 16 Feb 2024 08:50:08 +0000
ROA not after: Fri 26 Apr 2024 08:50:08 +0000
asID: 9009
IP address blocks: 154.218.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35405 (0x8a4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 08:50:08 2024 GMT
Not After : Apr 26 08:50:08 2024 GMT
Subject: CN=65cf21c3-850a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:e2:da:27:71:fe:be:54:a2:6c:14:33:aa:
bb:5b:4a:2b:74:99:93:0d:6b:e7:03:f7:39:d3:3c:
2d:bf:57:83:40:df:39:39:bb:98:fd:a2:33:9c:75:
37:ad:b6:a1:af:94:2b:ff:27:15:54:77:c6:b3:19:
68:1a:cc:2a:89:38:c3:1f:09:79:44:b4:e4:e6:fd:
73:34:51:40:d5:66:fd:ec:cb:5e:14:27:e3:38:00:
8f:08:6c:3a:27:2b:9b:9b:1d:4e:0c:f2:2d:d3:7e:
f8:50:52:52:3b:94:da:c8:1b:40:e8:72:83:3d:3f:
80:74:96:1d:eb:be:58:ab:84:95:9f:5a:dd:36:9b:
04:e5:f0:a0:44:43:42:18:1b:35:b1:f0:86:99:e2:
7a:5b:d3:65:e3:ba:de:a5:de:7e:31:d1:26:75:21:
8b:6c:28:97:8f:04:4d:39:f1:d6:18:2f:1d:60:aa:
c0:f6:d4:1d:fb:39:8e:20:4c:1c:00:52:88:d1:d9:
8c:ac:4a:e5:0d:f3:eb:02:42:ed:b5:d4:57:7f:0d:
9a:d7:1e:a5:11:d0:03:15:23:0b:bc:8d:f4:a4:e7:
c7:1b:06:9c:75:e9:b5:7d:91:6f:8e:fe:00:89:c6:
d0:e8:4b:d8:e0:9b:77:7d:03:cf:3c:34:c7:4e:bd:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:33:0F:B0:19:9B:A0:2F:0D:D1:A7:8C:08:E4:5A:F9:FA:58:22:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6492144ECCA811EEB04BDD62775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.209.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:51:0a:01:fe:f2:71:ee:68:e6:72:d9:61:dd:b9:97:f5:e2:
f0:71:8b:2b:3e:b6:91:5b:5f:c9:7e:dc:2d:bf:c2:92:a7:90:
e8:b3:55:68:f1:87:ee:81:c3:c8:37:78:0f:05:64:71:72:69:
09:da:f5:92:76:a2:9a:ee:b1:b7:66:e9:be:8d:07:65:8b:c7:
80:21:e6:5b:b9:95:57:53:b1:de:ee:49:8a:12:ba:2a:ae:b4:
18:ca:d7:ed:63:d8:6d:03:8f:e8:24:91:3e:78:65:ad:da:92:
76:33:42:f9:d7:1f:b4:1d:fe:5a:de:30:da:a0:12:90:36:6c:
ab:31:8f:76:a5:a5:41:8c:52:18:4d:e5:ef:bf:f2:19:95:09:
3c:9e:d9:f9:09:95:59:9b:89:8a:f7:25:94:ad:cd:68:ab:5d:
ca:7b:b6:d9:b9:bd:2f:61:3b:df:ae:da:72:c9:8f:f0:f1:85:
a9:08:59:97:79:9a:5c:4a:00:71:df:17:43:b6:68:ff:eb:e7:
ef:77:f6:54:5f:3a:c6:c2:f4:9f:75:c7:af:49:aa:0a:77:c1:
38:af:18:e8:6f:4f:b4:43:da:00:69:50:69:7c:88:c2:8e:66:
39:85:6c:56:14:fc:81:4c:9c:25:cd:0a:76:b2:d8:1d:6a:01:
41:f5:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:38 2024 by rpki-client on console-ams.rpki-client.org