Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DBC2680CCAD11EEA923C16A775412E6.roa
File: 7DBC2680CCAD11EEA923C16A775412E6.roa (raw, json)
Hash identifier: csjOC31+fO1/msMCiRvvA8qeiqEgEfe173lYmxevE/0=
Subject key identifier: 45:7E:A6:EF:F8:68:DB:97:C1:AB:F6:4A:E7:38:C2:82:65:9B:1B:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DBC2680CCAD11EEA923C16A775412E6.roa
Signing time: Fri 16 Feb 2024 09:26:41 +0000
ROA not before: Fri 16 Feb 2024 09:26:37 +0000
ROA not after: Fri 26 Apr 2024 09:26:37 +0000
asID: 9009
IP address blocks: 154.216.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35451 (0x8a7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:26:37 2024 GMT
Not After : Apr 26 09:26:37 2024 GMT
Subject: CN=65cf2a50-5abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:e5:6a:79:4f:c0:85:fd:88:5b:39:40:9f:
47:bb:1b:a3:49:e6:6f:f6:41:fd:d4:0b:da:37:33:
bf:a3:1c:36:a2:91:2d:62:ac:49:ad:49:a9:52:cc:
bf:5a:e8:9f:f3:db:3c:22:46:cf:76:79:d6:13:5f:
0d:97:dd:ce:da:b4:8d:aa:f3:35:2f:f0:41:56:f7:
37:01:10:22:00:85:d0:6e:2f:9e:1d:68:35:14:85:
27:f8:18:20:07:4e:82:53:a8:ea:fa:ed:b9:0f:5b:
91:4f:77:76:4d:bb:5c:26:a9:02:ba:1d:88:36:fb:
b2:74:32:d7:0c:c1:07:37:c4:9b:0b:27:83:ea:30:
15:a2:e2:1c:06:89:77:ed:f9:aa:ae:28:26:26:53:
94:d2:82:ba:19:9a:b7:9f:83:f7:e7:df:bc:31:f0:
01:f6:93:20:a7:02:21:b2:9c:9d:5d:e4:1c:03:9a:
7e:e5:4b:5b:2c:57:5e:b9:66:7a:98:9c:13:4e:33:
c8:fa:5a:03:6d:f9:c4:18:18:0b:21:b0:ed:c3:3b:
64:fb:7c:64:d7:66:d3:de:09:59:9c:98:e1:a9:04:
9b:a6:59:57:c1:e0:15:eb:f1:c9:e8:04:3d:00:34:
fa:d6:6b:6e:51:e5:9c:22:b5:08:73:30:49:9d:ff:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7E:A6:EF:F8:68:DB:97:C1:AB:F6:4A:E7:38:C2:82:65:9B:1B:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DBC2680CCAD11EEA923C16A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e5:77:34:27:35:15:6d:d9:39:e4:03:91:88:8d:ca:53:37:
40:91:4b:4f:91:13:23:23:5b:a0:d2:c5:d1:67:f4:ee:f8:69:
26:a6:60:75:0e:bb:28:59:df:76:56:e0:b8:95:a0:ec:6d:d1:
f7:2e:08:3d:e7:22:62:73:3d:e3:f4:31:fe:8d:b5:07:2c:e8:
c2:f2:c2:00:fc:82:e5:d2:56:10:27:3e:4b:40:94:e3:2e:b0:
52:45:27:41:d8:df:35:92:fd:3b:d5:c3:ef:90:47:17:94:29:
1c:59:2d:42:1f:f3:3e:24:96:58:6a:af:a9:7e:4f:15:38:34:
23:29:2d:08:a1:e8:75:de:e8:7a:7a:fb:99:06:27:a1:db:b8:
54:d3:9a:38:73:b3:3d:c2:06:37:6e:32:4c:f4:8c:9d:44:8c:
dc:af:55:e3:c0:fb:d8:04:86:c4:02:71:25:67:e4:9e:11:9a:
ac:2a:41:68:45:b3:11:39:46:d9:67:c8:3d:83:be:27:f1:55:
52:1d:66:f0:70:14:e1:62:dc:90:c7:87:84:df:2c:de:bd:2c:
4f:c4:e5:d6:25:84:5a:df:2e:37:e2:51:5c:56:c3:60:a2:73:
b0:4b:28:17:b1:c6:26:3f:8c:8d:df:34:05:3f:32:16:4b:1d:
5b:ea:ae:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:40 2024 by rpki-client on console-ams.rpki-client.org