Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BAA6CDCCCB011EE9579BC6F775412E6.roa
File: 7BAA6CDCCCB011EE9579BC6F775412E6.roa (raw, json)
Hash identifier: yElH7G5iWV7hDJxzayGtvtFpe8Fuj0y8gLbCY/sBaUg=
Subject key identifier: EF:D6:BA:15:DF:04:B1:18:9F:65:C9:AB:32:DE:02:73:96:66:8B:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BAA6CDCCCB011EE9579BC6F775412E6.roa
Signing time: Fri 16 Feb 2024 09:48:06 +0000
ROA not before: Fri 16 Feb 2024 09:48:02 +0000
ROA not after: Fri 26 Apr 2024 09:48:02 +0000
asID: 9009
IP address blocks: 154.218.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35477 (0x8a95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:48:02 2024 GMT
Not After : Apr 26 09:48:02 2024 GMT
Subject: CN=65cf2f56-2379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:54:d1:f6:cf:37:01:13:88:45:fa:06:c2:a0:
66:a8:53:72:3d:b4:c6:ae:f5:29:9c:1c:29:4f:4b:
87:26:0a:b7:b2:13:4b:7c:c5:e3:11:e3:48:fc:ce:
16:25:92:47:3b:3b:c5:af:4c:62:b0:5c:bc:6b:be:
6b:9e:5d:5c:f3:80:e9:ae:b5:41:56:e9:cd:21:22:
c0:2b:49:22:9d:f4:d1:71:38:cf:ab:40:00:29:e5:
45:57:b9:5a:bc:84:d1:87:ad:50:81:3d:ea:c7:8e:
9d:90:32:96:47:75:ab:55:b6:d3:2b:61:80:61:58:
f9:6c:43:33:d8:71:02:c5:6d:ff:47:f9:ab:7b:21:
a4:1c:7c:d2:3f:79:19:19:6b:0d:41:ed:c5:8f:35:
f1:5e:7c:7b:7f:6f:24:56:5e:60:0b:db:c4:da:6c:
91:bd:3a:7c:bb:4f:75:b0:52:cf:51:a3:fa:8f:c2:
64:91:b9:31:40:fb:fe:d1:4c:7d:cc:4c:98:26:35:
ad:e2:2a:14:51:82:45:bb:a7:e5:27:ae:fa:7c:ad:
3a:b3:8b:5f:e5:6e:0f:39:e6:7b:c2:52:c1:33:a1:
4f:0f:53:4a:77:15:64:37:7c:49:e7:65:07:cb:3e:
df:46:09:4e:80:c0:cf:ea:c7:28:29:07:b7:8e:29:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D6:BA:15:DF:04:B1:18:9F:65:C9:AB:32:DE:02:73:96:66:8B:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BAA6CDCCCB011EE9579BC6F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
23:04:d7:7f:33:c4:c4:10:07:c7:9a:13:0c:27:6f:31:c9:9b:
43:29:68:8b:fe:2b:01:1a:b0:92:31:bf:c6:1a:79:4c:2d:1b:
ed:2f:01:60:f7:c1:1f:b0:5d:b3:13:2f:4f:bb:c0:40:8e:04:
28:2e:48:e3:4e:2e:5d:57:3e:13:26:58:55:ca:f1:18:48:0c:
c5:f3:04:12:60:a0:b5:54:7c:af:45:81:37:66:90:f2:ec:72:
93:8b:6b:d3:b5:87:51:ad:f1:e1:72:12:42:19:46:cc:7f:d4:
40:22:a7:62:f5:b6:13:2d:90:c6:35:88:b3:c1:89:78:63:00:
58:30:15:95:54:fb:3a:b0:47:15:30:67:9d:de:d9:d0:c7:cf:
e5:14:f7:92:96:88:56:c5:ec:9d:64:e9:40:08:9f:76:9a:c6:
6f:99:ee:eb:bf:80:04:cc:dc:d4:b4:3c:30:c3:64:90:bb:19:
9c:99:91:02:a2:ca:13:e8:03:23:7b:7f:2e:d9:a5:ed:22:0e:
6d:a7:d1:93:1e:b1:fc:66:de:8c:03:79:6c:61:13:41:2d:d5:
7f:fb:a2:09:d5:fb:9a:bd:98:97:d5:c2:8c:c7:d0:d8:48:1c:
43:3c:21:8d:f0:58:87:29:ea:c6:ee:f3:f4:d5:83:d4:18:dc:
e2:6c:a7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:40 2024 by rpki-client on console-ams.rpki-client.org