Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E468C4CCB311EEAA04B274775412E6.roa
File: B4E468C4CCB311EEAA04B274775412E6.roa (raw, json)
Hash identifier: w6Of/bVc3XZhXMIDDPuar9Lq2n4S18hzNG5dOIUiVUI=
Subject key identifier: 6B:DA:50:85:D3:C2:9E:4D:A7:DA:DB:4C:5D:BE:42:A4:CF:FB:15:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E468C4CCB311EEAA04B274775412E6.roa
Signing time: Fri 16 Feb 2024 10:11:10 +0000
ROA not before: Fri 16 Feb 2024 10:11:07 +0000
ROA not after: Fri 26 Apr 2024 10:11:07 +0000
asID: 9009
IP address blocks: 154.218.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35509 (0x8ab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:11:07 2024 GMT
Not After : Apr 26 10:11:07 2024 GMT
Subject: CN=65cf34be-348b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:b0:cc:75:c2:e1:97:fe:de:4e:27:b8:b8:
30:cf:9c:99:e7:12:ec:6e:23:90:df:bb:0a:7a:d8:
28:e3:79:aa:14:b3:41:60:90:25:97:34:30:71:4d:
fa:c9:e9:09:88:84:c9:1b:d3:14:cd:e6:3a:8b:97:
d9:0f:6e:4f:17:a8:eb:70:5e:35:b4:f7:cf:ea:86:
89:28:e5:1f:16:64:44:42:97:0f:ee:0e:03:86:33:
78:55:aa:c7:09:fb:19:34:d5:16:62:a3:b0:c4:50:
83:79:cd:7f:f6:b2:67:db:e0:9e:5b:ae:1a:78:98:
eb:bb:f2:8b:7c:08:11:fd:69:59:8f:ea:45:22:ba:
1b:5d:c8:eb:32:79:e0:6a:9e:36:86:9f:05:06:f9:
6b:09:72:87:8b:6e:4f:a5:4c:ca:d5:07:f5:56:fe:
b2:9e:b9:f2:4a:e9:63:b7:7b:c2:49:7e:db:56:d4:
6e:cb:18:b7:e5:b2:fa:64:2d:de:80:96:8a:9d:b3:
6a:ea:2e:a2:4a:96:a6:6e:bf:c1:f8:61:8a:36:49:
1e:70:a5:e5:3b:27:0e:93:99:fe:c8:dc:ec:06:26:
8f:64:46:fc:83:a8:c3:5b:3e:c2:ce:02:56:56:23:
25:98:f3:9c:49:ee:cf:62:40:e2:df:79:a9:97:1f:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DA:50:85:D3:C2:9E:4D:A7:DA:DB:4C:5D:BE:42:A4:CF:FB:15:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E468C4CCB311EEAA04B274775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.235.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fa:4b:18:75:33:36:96:bc:0a:8b:62:ff:15:03:a7:e4:59:
17:bc:b1:41:b9:10:e0:d2:6a:38:67:72:92:41:b0:45:62:50:
40:86:5b:b9:c4:b2:18:15:0f:92:a4:67:91:db:4a:5b:ac:39:
bf:cb:df:6f:fc:17:9a:22:e8:c4:2c:3f:c5:9f:40:f3:bc:55:
10:1a:31:7d:c4:d8:06:46:c0:db:06:39:c1:e6:a9:f3:3c:ef:
b0:18:cc:17:3c:93:a5:88:09:d1:ab:9f:7e:c3:b6:01:0b:12:
6e:2f:34:f6:23:df:8a:24:06:9a:21:dd:cd:22:0f:c6:16:6a:
45:f6:c9:47:49:a0:e1:6d:b4:f6:ab:a5:40:0f:d7:a2:26:da:
28:15:6a:21:96:e2:6d:94:a4:a1:4d:70:da:df:1a:75:1d:50:
96:ba:18:ee:fc:25:62:9e:46:e6:15:15:62:e7:95:e1:39:88:
81:68:a7:b6:43:26:8e:c6:55:28:1e:ac:97:2c:f8:18:21:46:
d9:9a:b8:a4:0e:c9:15:81:eb:6b:d4:9e:30:99:d8:1c:68:b7:
82:69:a3:73:71:f7:f1:52:c2:4b:ec:4a:d9:85:dc:7b:6a:96:
7d:16:61:1d:49:ec:59:ae:46:7d:b1:45:36:33:d2:1c:5f:02:
5f:e5:77:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:47 2024 by rpki-client on console-ams.rpki-client.org