Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A68FDE4CCB811EE82EA2D7C775412E6.roa
File: 8A68FDE4CCB811EE82EA2D7C775412E6.roa (raw, json)
Hash identifier: AuHhy0l3FzoltjaqKrzinfua+v92kCiiYunU6gudbec=
Subject key identifier: 6E:CD:E4:FD:6C:89:14:32:9D:83:31:11:8E:78:1F:B7:EF:34:C3:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A68FDE4CCB811EE82EA2D7C775412E6.roa
Signing time: Fri 16 Feb 2024 10:45:46 +0000
ROA not before: Fri 16 Feb 2024 10:45:43 +0000
ROA not after: Fri 26 Apr 2024 10:45:43 +0000
asID: 9009
IP address blocks: 154.218.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35553 (0x8ae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:45:43 2024 GMT
Not After : Apr 26 10:45:43 2024 GMT
Subject: CN=65cf3cda-7cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a8:cd:27:86:9e:79:cc:20:88:7d:10:d6:99:
db:a4:7e:02:c2:e8:57:5e:78:9d:ca:ed:43:c3:da:
d9:d8:a6:14:5f:16:f7:ee:f1:0e:70:33:ef:4c:1f:
99:59:41:d2:7b:2e:a5:fc:6c:4b:1f:27:c0:77:db:
06:52:37:b5:90:54:72:5d:d9:ad:3f:71:d8:2c:b0:
c6:47:5e:bb:72:5c:f1:59:fb:dc:b0:06:bb:39:eb:
b5:4e:72:8a:0b:4e:36:4b:f8:fb:f1:27:2c:72:f3:
84:2f:cb:5e:e4:85:c8:5d:45:cd:bb:4a:c9:13:1c:
b7:81:4f:aa:f2:42:83:5c:ae:51:c1:04:ed:57:25:
46:6b:82:f0:e9:f4:5b:15:4b:12:d5:5d:1b:6b:70:
6c:d7:c0:16:33:41:f0:e4:3a:d2:eb:c8:7a:3c:2f:
36:62:76:74:2f:44:e0:70:0e:e2:89:50:5f:21:e4:
f4:14:44:74:25:f0:27:7d:f9:bc:51:d7:04:a6:84:
a7:48:96:1b:5c:0d:9d:61:f9:59:54:a9:09:62:1d:
8c:1c:c3:b8:22:b6:35:8e:39:dd:98:18:75:27:30:
9e:df:94:e7:bb:36:ce:86:ed:fd:ed:48:35:86:b4:
b8:ef:fb:8b:eb:4c:b0:04:b6:9f:7c:55:65:d5:db:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CD:E4:FD:6C:89:14:32:9D:83:31:11:8E:78:1F:B7:EF:34:C3:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A68FDE4CCB811EE82EA2D7C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:09:19:13:08:9e:04:fe:5f:4f:b6:c4:b1:a1:69:e7:fb:c1:
1e:ab:41:85:16:d6:fa:bf:47:0c:d3:d3:67:05:52:f0:23:6c:
3c:d4:9c:0c:51:48:b3:ba:7d:70:10:d7:57:9a:65:8f:d5:ff:
fe:af:e3:65:bf:73:c1:4f:1e:9c:58:77:fe:8f:91:15:6a:42:
5f:a9:42:76:7d:d6:6b:b5:b2:4f:f2:b0:8a:83:e4:cc:f0:c8:
fd:40:d6:ea:37:5b:39:cc:ae:22:a1:cf:cd:9f:b5:ad:82:ca:
46:5a:aa:bc:45:35:68:2c:7a:24:ff:3a:ef:95:bc:20:4c:e1:
30:90:7b:9f:c5:a6:b4:9f:5d:35:2d:bf:a4:27:65:6c:17:24:
8a:c2:65:f2:83:85:ad:07:48:af:e7:aa:ef:8d:12:f3:05:65:
52:35:f5:5c:57:fc:91:7a:9b:23:ba:fe:21:bc:b9:54:6a:92:
0d:28:93:87:40:db:af:fb:dc:b4:3a:a9:83:33:2c:ee:53:e8:
bb:6e:b0:d4:40:53:ad:57:b6:f5:63:b7:6a:75:8f:a4:ef:34:
22:30:6c:bd:71:45:c8:f5:53:bb:6c:8e:cd:e6:ac:cc:d4:b8:
f9:0f:ef:92:46:f3:47:1d:d9:84:db:bc:09:42:6f:30:df:94:
2f:7d:95:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:42 2024 by rpki-client on console-ams.rpki-client.org