Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97F0F880CCAF11EE9B5C146E775412E6.roa
File: 97F0F880CCAF11EE9B5C146E775412E6.roa (raw, json)
Hash identifier: DL0+Y4uY3VSUBaOhq7qCt1p+fnIe0CK3GhnyMzEONE4=
Subject key identifier: 41:44:3E:7B:0A:0F:36:10:EF:2E:C0:B3:1F:FC:92:A7:5E:1F:6F:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A8D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97F0F880CCAF11EE9B5C146E775412E6.roa
Signing time: Fri 16 Feb 2024 09:41:44 +0000
ROA not before: Fri 16 Feb 2024 09:41:40 +0000
ROA not after: Fri 26 Apr 2024 09:41:40 +0000
asID: 9009
IP address blocks: 154.218.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35469 (0x8a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:41:40 2024 GMT
Not After : Apr 26 09:41:40 2024 GMT
Subject: CN=65cf2dd7-a17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:34:8f:bf:03:9a:4e:69:00:4a:fd:0d:9a:
95:a5:0e:32:74:a5:4d:6b:c4:2e:f1:34:a3:ae:5a:
6c:67:da:58:a5:c7:59:2c:87:1c:ac:12:00:6e:98:
c3:97:62:f3:ce:16:73:89:ba:4c:54:48:7f:4c:9b:
ba:a0:f4:e2:30:5a:ef:9e:16:95:ca:73:5a:46:26:
97:1f:73:d8:ca:1d:a8:90:32:68:5c:26:f2:05:0b:
7d:fb:cf:31:08:5e:ea:97:ff:df:36:b3:e9:67:7b:
ba:8f:e7:73:58:0b:62:d6:ca:55:ab:2f:1f:4f:54:
6d:a2:1f:80:d7:fa:9c:de:c0:ff:3c:40:90:01:80:
02:af:2c:05:50:a5:a6:00:2c:c3:3d:75:76:d8:3d:
3b:07:ca:b4:2c:98:8d:b4:59:75:27:6b:84:b7:95:
ba:b2:bf:84:f9:b9:77:5a:0a:50:85:4a:f9:ad:77:
e3:d2:1e:53:7e:9e:d9:14:f4:87:cd:b9:18:5f:c3:
27:ab:e5:cb:4f:ef:cb:76:ad:26:54:6c:8d:82:48:
d4:57:c7:0e:e8:b8:59:50:b7:8f:8b:73:83:33:c0:
41:0a:65:7e:0f:85:1d:73:12:8c:b7:74:f0:ec:87:
55:3c:38:17:44:a8:c2:fc:fb:3f:89:69:96:5d:ea:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:44:3E:7B:0A:0F:36:10:EF:2E:C0:B3:1F:FC:92:A7:5E:1F:6F:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97F0F880CCAF11EE9B5C146E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8e:65:da:32:d7:0e:26:e3:30:2b:dc:b6:8a:2e:3e:fc:d9:
44:35:f1:ac:1d:59:61:36:79:9e:20:1e:91:87:de:89:e4:6c:
09:e9:6d:5c:aa:ed:ed:5e:a4:d4:61:83:d2:5e:9c:26:1e:bc:
24:60:6d:7e:f3:48:d9:23:bf:4a:12:8b:ec:e5:34:86:b5:66:
14:b9:42:4f:ca:04:89:72:ed:fe:34:22:92:57:14:57:58:08:
ae:78:d6:11:e3:37:0f:57:7d:7f:99:51:65:d8:05:02:ec:fb:
96:d9:73:fe:38:62:f7:61:f1:9e:7f:e4:67:57:66:8e:04:55:
8e:51:38:f3:34:0f:ab:d9:94:19:61:71:30:56:0b:21:80:15:
56:f0:6b:d1:28:c5:73:e6:16:8e:85:a4:d4:eb:12:55:dd:b6:
8e:43:d5:35:b5:b5:9a:d4:2f:bc:78:7a:c8:38:85:fa:a4:80:
ee:f1:1e:06:eb:49:c7:81:7b:8d:53:04:7d:9a:40:d2:ec:03:
11:db:90:c9:5b:b3:97:50:be:ef:59:7a:3c:6d:2d:ae:89:50:
c8:ba:a0:a4:42:9e:b3:d2:ab:53:63:53:a7:fc:e5:f8:83:09:
05:0b:52:21:8f:f3:e3:3a:c6:b1:09:d8:89:c6:cb:e0:53:ae:
43:aa:ff:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:43 2024 by rpki-client on console-ams.rpki-client.org