Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79654A4CCCAA11EE98442E66775412E6.roa
File: 79654A4CCCAA11EE98442E66775412E6.roa (raw, json)
Hash identifier: 77XmiiDUHqxgPpLEhC0to47XYrP+T8QPvADaLKyiQzY=
Subject key identifier: 18:92:42:1F:E8:7C:30:2A:21:D2:56:5A:EC:38:B0:6D:46:09:26:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79654A4CCCAA11EE98442E66775412E6.roa
Signing time: Fri 16 Feb 2024 09:05:05 +0000
ROA not before: Fri 16 Feb 2024 09:05:01 +0000
ROA not after: Fri 26 Apr 2024 09:05:01 +0000
asID: 9009
IP address blocks: 154.218.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35425 (0x8a61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:05:01 2024 GMT
Not After : Apr 26 09:05:01 2024 GMT
Subject: CN=65cf2541-70d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:a5:b4:5b:18:83:bc:ae:81:c7:d2:ff:0d:
5f:75:ee:e9:dd:fc:3b:73:a3:77:b1:f0:2b:ac:1b:
1c:ff:5b:81:f3:da:04:95:50:15:8b:6d:4d:a8:80:
c7:98:e9:2c:f6:7e:09:0d:7b:dd:47:ca:bd:4d:d9:
28:57:96:1b:71:cd:f0:6f:59:c8:48:b5:bf:3f:02:
bf:15:88:3f:ae:c6:c9:c7:92:18:96:c3:9f:91:91:
26:22:d7:37:59:6d:dd:3c:e0:08:ce:47:59:67:ba:
7e:6a:0a:94:ad:f2:52:c9:81:94:b7:3f:4e:67:14:
04:a3:44:7e:96:89:45:f0:31:f1:b9:b6:0d:57:4e:
27:35:7f:7d:6e:30:53:0b:f8:d7:ef:63:e9:93:a6:
b3:03:08:bd:15:bc:49:8a:fd:47:88:36:09:16:5b:
09:7c:35:7b:2f:be:24:e1:8e:35:b0:18:cb:8d:8b:
40:3a:16:ce:8d:35:d4:ef:30:14:9c:b3:0c:18:8c:
b1:83:ed:7c:df:34:16:62:1e:19:ee:b3:94:5c:38:
b0:c1:7b:61:7a:d0:d0:3c:0a:b2:6b:73:97:0f:ba:
ea:ea:63:41:22:29:0d:d3:af:35:4b:27:60:f5:81:
b5:ca:14:61:20:21:ef:78:27:70:98:37:7f:31:c6:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:92:42:1F:E8:7C:30:2A:21:D2:56:5A:EC:38:B0:6D:46:09:26:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79654A4CCCAA11EE98442E66775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:77:27:c3:47:bc:67:09:59:13:3c:60:5c:00:b7:f2:e0:9b:
fc:35:f0:bf:d1:f6:ce:ae:c7:cd:fd:4f:27:bd:7c:48:2b:ba:
18:d2:96:cb:37:da:87:78:cd:eb:5d:29:a9:77:9e:97:6f:1b:
9f:58:8f:ec:53:8f:6a:a0:94:a8:e8:11:4e:c2:69:32:9d:dc:
5e:19:53:35:c2:9c:71:e8:72:c2:a3:6e:f3:63:e6:b9:4e:d5:
19:51:55:83:dc:38:3b:4d:e9:3d:44:c0:42:e4:47:4d:52:39:
e7:29:85:8b:6d:f2:e8:d0:3c:23:2b:45:53:e4:56:fa:a6:2d:
19:35:0d:9f:c8:b0:ea:a1:b9:39:7a:f9:74:32:a8:1c:fc:01:
cd:6f:07:4e:e8:8b:cf:86:f6:80:ff:71:47:a3:71:4c:ee:83:
b9:a9:1b:58:d2:3b:f4:db:be:0b:dc:81:a8:35:9f:c8:50:3c:
90:50:fa:fd:80:cb:32:0b:c3:c9:34:e0:22:31:51:d5:d1:5a:
9a:c3:fb:f0:e6:c7:77:39:8f:2a:80:77:2a:0c:b3:6a:dd:4a:
e1:af:6d:10:e6:65:ee:e5:f6:09:c7:f7:e9:bc:9d:74:63:e4:
61:0a:8a:b8:56:f1:97:d5:3b:93:82:b9:9b:a1:dd:88:a1:ec:
01:81:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:40 2024 by rpki-client on console-ams.rpki-client.org