Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A12158F6CCA411EEAC0E105D775412E6.roa
File: A12158F6CCA411EEAC0E105D775412E6.roa (raw, json)
Hash identifier: sWTBJSQ97ZWIxlgiaXXwJBV46GGCxhV5gM2IRJ4tDGs=
Subject key identifier: 95:23:A5:D4:4B:FB:25:35:42:38:F6:64:3E:07:35:7A:55:9A:74:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A12158F6CCA411EEAC0E105D775412E6.roa
Signing time: Fri 16 Feb 2024 08:23:14 +0000
ROA not before: Fri 16 Feb 2024 08:23:11 +0000
ROA not after: Fri 26 Apr 2024 08:23:11 +0000
asID: 9009
IP address blocks: 154.218.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35371 (0x8a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 08:23:11 2024 GMT
Not After : Apr 26 08:23:11 2024 GMT
Subject: CN=65cf1b72-5599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:41:ca:d2:f0:76:22:15:6d:1e:78:0d:ae:
01:33:35:e4:14:43:84:83:e8:80:d3:bf:f1:5c:cd:
8b:4e:9b:4a:e2:a0:44:70:eb:0c:bc:cb:0f:3a:65:
c4:f1:8c:37:60:fc:20:ee:a0:b7:c2:02:d9:1a:c5:
7b:07:fb:a0:e9:27:06:07:37:03:75:73:4e:a1:1a:
96:cf:4c:b1:66:e5:8d:b9:e3:8c:b5:89:82:2f:e5:
50:70:dd:3a:ca:f6:4f:cd:02:ac:6f:46:be:4f:5c:
2b:b4:7f:dc:d4:5a:07:50:2f:d3:1a:9f:bc:29:f3:
ca:83:6f:e6:5a:1f:f9:74:05:ce:92:a9:a0:9f:62:
54:19:ba:0a:f2:38:4e:b6:a8:84:ad:f9:39:0f:64:
68:b4:b3:24:0f:76:0c:83:ab:06:2c:6d:a7:78:c9:
4f:13:3b:71:e5:06:82:d9:41:30:11:30:58:ad:06:
40:24:60:dd:fd:d5:2a:f4:ce:59:a0:1c:f7:3d:ce:
61:d3:04:63:56:e7:b1:57:48:0e:88:23:59:be:c3:
7c:94:99:2c:74:c8:38:7f:73:f5:23:de:10:74:26:
49:7b:b3:bd:0f:0f:3c:e1:0f:da:19:f5:6f:5c:2d:
c6:d7:25:91:47:94:e5:5a:0a:50:7e:ba:61:96:11:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:A5:D4:4B:FB:25:35:42:38:F6:64:3E:07:35:7A:55:9A:74:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A12158F6CCA411EEAC0E105D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e7:16:ff:2c:ef:ab:2e:1e:85:04:94:1e:eb:06:b8:fa:f3:
9f:17:51:2a:48:dc:df:4a:c6:35:f1:de:2b:43:27:b7:00:21:
73:78:df:8f:52:03:4b:e6:b8:c9:eb:88:e7:c4:29:54:49:54:
6b:40:e8:7b:f8:a8:f0:cc:4a:3c:b4:4b:50:1e:e5:94:ac:b0:
19:8a:20:7b:c5:cc:be:f1:f4:14:96:10:34:c5:0c:f4:75:3b:
91:2a:38:25:74:db:27:af:07:e6:23:c5:91:04:a6:2d:c6:5f:
b3:28:7d:a8:42:bf:06:3a:e8:ca:27:b7:e2:a0:d9:e4:d8:59:
b4:6c:2a:e1:af:94:53:3e:f2:c4:66:0e:d5:95:e1:60:14:73:
6b:5b:60:19:ed:e1:57:4b:58:c3:29:72:97:a1:b4:b0:23:7f:
66:cc:76:75:46:6b:83:07:34:06:6f:7b:da:35:bd:47:a8:03:
58:ac:50:5c:3e:21:c9:a7:2b:1d:93:33:a0:96:17:7b:81:3e:
06:d5:af:3a:18:50:11:24:ea:81:b5:b0:24:a3:d4:8a:5a:d8:
d2:18:e8:04:a7:5b:87:6e:ea:41:20:0b:b0:c7:49:66:0a:b7:
16:bf:29:94:3d:17:0d:65:67:b0:e1:0c:a6:1d:ae:72:81:db:
54:1d:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:45 2024 by rpki-client on console-ams.rpki-client.org