Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F3C899ACCB311EEBCB25D74775412E6.roa
File: 7F3C899ACCB311EEBCB25D74775412E6.roa (raw, json)
Hash identifier: ZiaYYcDSzHqFRJNVGk0xEfauuy+19tYHdGwPhYGsuhY=
Subject key identifier: 34:0F:4A:87:C4:FD:AC:CE:02:26:69:9B:7D:4C:EC:32:E0:8E:34:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F3C899ACCB311EEBCB25D74775412E6.roa
Signing time: Fri 16 Feb 2024 10:09:40 +0000
ROA not before: Fri 16 Feb 2024 10:09:37 +0000
ROA not after: Fri 26 Apr 2024 10:09:37 +0000
asID: 9009
IP address blocks: 154.216.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35507 (0x8ab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:09:37 2024 GMT
Not After : Apr 26 10:09:37 2024 GMT
Subject: CN=65cf3464-aa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:fe:bf:67:4d:57:43:2e:3f:6c:ab:9e:72:
f4:d5:53:40:c9:29:1f:fb:8f:43:a8:95:42:a9:b1:
af:46:f0:9b:ec:95:72:44:b0:5c:95:df:77:44:a8:
18:21:5d:2c:45:b0:29:49:48:88:78:fb:72:41:00:
fc:9b:94:42:03:56:b3:cc:45:7f:55:e0:d2:e0:7b:
0c:b1:1e:c8:c4:23:91:db:00:f9:d0:9a:ff:fe:9d:
32:38:09:8e:f5:26:be:23:87:66:8e:91:36:78:14:
e9:ac:67:d3:79:b0:d7:1c:b5:06:e6:fe:8e:b5:9e:
82:f9:04:07:0d:a3:d4:da:48:22:d0:42:d8:2b:34:
59:bd:d5:9f:7e:3c:80:6d:83:9a:cd:16:7f:c4:e7:
94:cc:30:13:63:24:8f:00:7e:48:db:19:ab:bf:df:
45:be:8d:ab:f4:93:99:45:f0:a3:66:dc:31:a7:33:
ca:77:8b:90:20:2e:60:ab:4d:e4:42:af:2e:96:b7:
33:b6:d1:ad:42:46:e4:99:a3:b0:9f:39:cd:d2:02:
1e:0b:d5:30:42:0e:b0:3f:aa:e1:29:7d:07:fd:68:
45:d0:1b:64:ef:63:9b:53:12:9d:00:f7:f3:b4:ba:
4b:6b:85:48:17:20:f0:08:58:ad:b1:2a:8b:24:cd:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0F:4A:87:C4:FD:AC:CE:02:26:69:9B:7D:4C:EC:32:E0:8E:34:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F3C899ACCB311EEBCB25D74775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
93:71:e6:4f:29:80:8b:7d:d9:7d:7e:88:b0:c4:d2:6d:50:f1:
08:1b:a2:85:3a:dc:6e:4a:06:4a:7b:fe:6b:40:4b:93:77:1a:
a5:ab:7a:4e:6b:e4:73:4c:dc:6d:99:4e:01:10:72:a3:a3:d4:
24:8e:96:3a:8f:33:51:65:4d:c5:9a:90:52:dc:56:0a:a8:2b:
29:86:a1:76:e4:d2:c0:3b:1c:55:5a:37:a6:2a:7e:aa:e6:ed:
5b:d5:b3:6f:1a:79:cb:2e:59:99:a9:05:8c:11:52:be:97:4f:
20:f3:e1:5a:cf:b7:2d:24:35:55:13:7b:8b:53:0d:0c:6c:ca:
6d:71:fc:df:ff:b8:51:b1:2b:c7:f9:2e:50:3c:ca:f8:9e:f9:
2e:81:91:ae:8b:86:97:b3:69:4d:40:c9:00:f8:54:49:d7:02:
6d:45:dc:0e:27:2d:94:6d:b5:0f:c8:5d:94:d6:8f:ce:fb:e8:
2f:7b:e5:75:39:39:ab:99:ca:88:43:da:56:a5:05:d5:ee:2d:
a4:fb:9f:15:db:61:f4:b2:70:ab:f6:48:30:5f:bf:87:d1:aa:
3c:ff:25:0b:6d:c9:57:1c:5c:8a:3a:80:ba:97:a9:48:50:ef:
25:42:1f:34:1d:3b:98:85:ec:fb:25:3b:41:73:cc:87:24:68:
84:9a:1d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:40 2024 by rpki-client on console-ams.rpki-client.org