Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC1729C4CCB811EEA4C2877C775412E6.roa
File: BC1729C4CCB811EEA4C2877C775412E6.roa (raw, json)
Hash identifier: jlywYwUzANA6NInJpOpA7+uGS8MhGCFLw3+aS87VWTM=
Subject key identifier: 1A:93:0D:97:5F:09:61:A1:5E:07:D3:4D:79:56:B9:AD:0B:B7:45:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC1729C4CCB811EEA4C2877C775412E6.roa
Signing time: Fri 16 Feb 2024 10:47:10 +0000
ROA not before: Fri 16 Feb 2024 10:47:06 +0000
ROA not after: Fri 26 Apr 2024 10:47:06 +0000
asID: 9009
IP address blocks: 154.218.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35555 (0x8ae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:47:06 2024 GMT
Not After : Apr 26 10:47:06 2024 GMT
Subject: CN=65cf3d2e-aed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:dd:07:60:f4:6b:0d:6f:28:d7:ae:96:1c:
4f:a1:55:72:aa:c2:2b:fd:b6:a1:0b:33:78:66:5d:
98:4a:98:1c:46:a5:7d:e7:01:b5:d0:3a:c2:f9:d1:
ee:16:bf:87:38:1b:bf:36:b1:98:2c:3d:26:32:9d:
19:8c:4f:b4:62:3a:88:83:36:62:19:67:87:6b:41:
5a:b6:41:59:c0:83:71:2f:3d:19:d9:80:96:8b:1a:
f8:e2:20:63:f2:c4:22:8c:2d:4a:c2:64:d2:67:4e:
97:93:9e:01:40:86:15:30:4f:82:31:0c:56:55:a4:
c9:ed:3c:d5:38:12:81:f7:4f:17:6b:fd:93:e9:3b:
93:36:3c:25:09:c8:95:ef:1d:0a:92:ef:e7:b2:cd:
83:fa:28:63:4b:6d:38:66:65:01:93:c3:2b:72:85:
f6:4d:38:71:c0:d2:63:12:ce:72:39:ab:55:9d:c1:
b5:3c:98:10:ea:ef:ac:6e:9d:58:54:8f:15:1f:15:
da:e5:ba:fe:2e:79:a6:fd:01:d3:44:5c:ee:29:28:
79:0d:1c:78:31:c0:67:e5:00:2e:b7:76:9a:6c:5f:
33:d4:8d:48:7b:43:b9:40:85:56:9c:b6:21:a7:8d:
df:05:eb:a3:ad:9f:df:55:ec:6b:17:13:2a:47:9c:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:93:0D:97:5F:09:61:A1:5E:07:D3:4D:79:56:B9:AD:0B:B7:45:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC1729C4CCB811EEA4C2877C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.255.0/24
Signature Algorithm: sha256WithRSAEncryption
53:66:fe:d0:9a:3b:b9:75:b8:a4:7e:bb:e9:e4:e3:ce:2a:34:
b9:4b:4a:30:7c:f9:1c:74:e6:f6:84:8c:69:63:94:48:a1:cc:
14:b9:05:c4:57:29:5f:1c:2e:3d:52:02:d9:4e:80:a7:8d:dc:
7d:70:47:5f:c8:14:08:19:5f:a7:e0:10:6a:da:69:1a:ab:cf:
35:95:a1:14:7b:76:bc:25:3c:2a:f2:ec:c4:e8:9c:ca:77:e5:
1c:67:bc:24:12:47:95:fa:12:e5:f0:58:ea:97:8f:a0:08:76:
0a:7c:f6:7f:59:5b:4e:8b:ed:08:76:00:7e:1b:e2:30:ae:0b:
c4:1a:bc:c8:e4:0e:0a:30:7e:bb:01:69:54:65:c1:01:27:16:
12:b3:e0:00:a5:76:4f:db:57:89:82:e6:74:15:97:0e:ee:13:
ca:fb:9f:2b:d7:c0:36:2d:25:9f:27:61:94:48:18:9c:89:89:
99:84:c3:38:31:f0:bd:54:2b:86:f3:76:17:be:1f:9a:05:4a:
c2:de:ad:ee:72:11:4e:2c:9a:6a:df:60:22:e7:9b:75:09:72:
60:52:cd:88:96:30:3d:5d:7e:1b:dd:43:fb:9a:3c:3a:98:65:
99:6a:ef:fa:b5:ed:d1:a0:70:86:96:78:7b:5b:d6:0a:9c:ec:
48:33:35:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:47 2024 by rpki-client on console-ams.rpki-client.org