Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C2FC91ACCB711EE8920CB7A775412E6.roa
File: 8C2FC91ACCB711EE8920CB7A775412E6.roa (raw, json)
Hash identifier: U/qKIRBIi1gHnQyqL3ibkzOCvTXzTlYmCEMEnm4bm2A=
Subject key identifier: 64:35:2C:E4:74:8A:27:7D:27:3E:0D:BB:D2:C9:BF:02:13:EE:55:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C2FC91ACCB711EE8920CB7A775412E6.roa
Signing time: Fri 16 Feb 2024 10:38:40 +0000
ROA not before: Fri 16 Feb 2024 10:38:36 +0000
ROA not after: Fri 26 Apr 2024 10:38:36 +0000
asID: 9009
IP address blocks: 154.218.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35543 (0x8ad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:38:36 2024 GMT
Not After : Apr 26 10:38:36 2024 GMT
Subject: CN=65cf3b30-eeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:0b:bc:8f:a5:21:ba:98:42:ac:b9:46:ec:
47:70:2e:3d:67:2e:44:48:9d:b5:82:8c:9b:fa:e1:
a0:c8:4a:aa:ca:31:90:52:4f:39:d0:8d:d1:e6:58:
02:e6:ab:98:e9:ce:95:90:4c:8d:eb:83:3e:46:85:
7b:6b:10:3e:81:35:37:cc:c6:da:f0:d0:3e:a0:b7:
50:32:8c:07:e2:f7:a0:46:40:2e:a7:3d:22:c6:e2:
e7:60:9d:e5:68:3a:5d:00:57:30:32:96:79:65:ea:
1b:e0:b1:36:56:d1:b2:3f:d5:54:b4:03:af:1c:e4:
2e:06:9f:76:b3:e6:d1:2e:bf:dd:2b:28:0e:b3:d7:
46:13:bc:56:19:69:0c:b2:06:16:3a:82:83:ab:6a:
35:6d:71:be:25:06:f7:10:f4:01:ce:fb:a3:59:25:
b9:36:38:4c:01:39:20:72:51:f0:74:94:b4:90:97:
e7:ea:92:12:44:72:59:ff:50:a8:ab:fb:ad:16:02:
d9:88:70:c1:61:78:d6:04:66:a6:56:84:31:0a:f0:
ff:6a:35:68:0f:7e:4f:73:66:38:80:cf:52:5d:4f:
4f:53:c6:f8:51:da:72:00:e9:a4:3f:39:71:ae:55:
e0:aa:c8:2f:8e:55:95:3e:41:65:27:56:52:ad:63:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:35:2C:E4:74:8A:27:7D:27:3E:0D:BB:D2:C9:BF:02:13:EE:55:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C2FC91ACCB711EE8920CB7A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8d:6b:57:3f:c9:30:6b:30:b8:a9:4d:c8:c5:ee:d9:2b:bf:
ec:b2:51:65:d7:65:66:ca:01:10:bf:85:8e:72:f1:2d:e1:20:
6e:fd:f2:5d:cb:0e:29:43:95:36:dd:61:be:8c:3e:9c:91:3c:
a5:57:35:54:61:72:07:dc:5f:b0:b5:48:7d:ae:ce:40:28:f3:
ac:d9:f6:18:e1:d1:bc:0e:5b:03:7a:fa:9f:97:a7:a0:72:62:
db:36:6f:fa:14:17:34:30:3e:55:4b:0d:30:27:1e:fc:e4:8c:
5b:6b:8c:0c:09:03:72:20:51:fb:6b:63:60:2b:7f:68:82:a6:
f4:f2:e3:d3:41:05:1a:35:65:64:83:7a:7a:e6:30:a6:3b:27:
24:d2:26:5e:c5:71:0e:1f:84:f2:9b:5c:5b:2a:42:85:91:67:
63:29:83:5a:b0:22:a2:fd:50:ff:d1:79:a2:9d:d1:8f:1a:57:
07:cf:8d:6b:4c:5d:d0:27:b7:99:ab:0d:63:a2:27:0a:c5:77:
1e:c0:ce:f6:80:9d:a2:c2:8b:cf:5a:dc:43:52:01:85:88:ad:
72:9d:ce:e2:c3:e9:48:6c:4d:74:e4:c6:b7:db:76:29:9a:0a:
06:6d:4e:36:ae:a3:f9:2d:0e:a9:99:c1:30:33:fe:04:fe:38:
2e:6a:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:42 2024 by rpki-client on console-ams.rpki-client.org