Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF1FE292CCB711EE9C8B0C7B775412E6.roa
File: BF1FE292CCB711EE9C8B0C7B775412E6.roa (raw, json)
Hash identifier: H44NlYJ+fz8EtVS7LVPG75z6OKhY1rbaWG5nCFL9+0M=
Subject key identifier: 9B:C1:F0:11:21:07:E2:78:8A:8F:E3:C9:2E:31:50:21:8B:64:1A:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF1FE292CCB711EE9C8B0C7B775412E6.roa
Signing time: Fri 16 Feb 2024 10:40:05 +0000
ROA not before: Fri 16 Feb 2024 10:40:02 +0000
ROA not after: Fri 26 Apr 2024 10:40:02 +0000
asID: 9009
IP address blocks: 154.218.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35545 (0x8ad9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:40:02 2024 GMT
Not After : Apr 26 10:40:02 2024 GMT
Subject: CN=65cf3b85-75d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:9a:35:b9:63:b8:9a:f8:53:c3:cc:bd:30:
52:ff:8f:2d:73:01:96:a8:90:28:41:cf:a6:3e:b4:
dd:82:42:ac:ee:d9:6b:32:6f:d2:df:1d:34:f6:55:
8e:9e:ce:b5:52:25:48:5b:20:20:40:f6:f4:43:2a:
c0:e9:78:fe:35:5d:4d:32:bc:1c:99:5e:c3:34:21:
3b:dc:00:11:ac:12:ed:1e:39:87:40:e0:44:aa:f5:
22:02:74:59:65:1a:ff:a4:6c:4a:9d:80:79:e1:44:
98:4d:fd:62:51:6c:ae:f9:9e:e8:80:31:b2:07:8b:
64:ce:f4:d2:19:df:0b:48:2a:9f:f2:40:74:4e:48:
ce:41:7e:ec:b6:a3:8b:9d:32:d8:0a:7c:f0:f6:5d:
89:12:bd:fa:7e:6b:2f:1b:33:b1:2b:0f:51:24:fc:
9b:19:ae:49:97:62:b0:14:30:f8:7a:fb:7d:6e:85:
b6:e2:8f:8a:03:21:d1:0e:75:d4:47:5f:8e:8d:9d:
29:77:e3:6e:a4:69:62:4c:a3:16:6a:29:58:67:25:
7d:f3:64:6e:c1:4d:81:2d:b0:b7:9e:d8:81:6c:bd:
7d:c6:b6:73:d9:90:67:0e:10:bb:89:c5:37:e8:df:
1b:18:64:44:53:79:31:eb:ef:d7:67:34:3b:6d:fd:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C1:F0:11:21:07:E2:78:8A:8F:E3:C9:2E:31:50:21:8B:64:1A:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF1FE292CCB711EE9C8B0C7B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.250.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ed:4b:25:21:28:56:2e:8e:7d:4f:70:4b:be:4b:20:fd:19:
c6:23:68:ae:5f:74:c3:2d:df:a9:88:d0:fd:4c:82:af:c4:20:
b5:fb:b1:a2:25:96:1f:ca:c1:99:c7:c7:15:b1:29:84:ea:be:
37:48:ec:b2:a2:51:ee:5d:e2:4a:64:31:21:f2:25:23:39:60:
37:b1:3a:5f:b5:4e:45:cb:a5:9b:e4:27:15:ce:87:de:61:92:
4e:31:32:b1:72:4a:e4:f3:02:bc:5e:fc:a9:11:4c:4c:75:f3:
73:9f:37:69:f8:c8:f1:d9:a9:03:d9:ec:2b:bc:50:83:76:1c:
db:5a:de:2b:64:8e:f5:4f:2c:6d:fe:31:70:cb:17:71:8e:cb:
9f:0e:75:3f:16:cd:89:43:07:da:c4:19:1b:3b:00:50:3b:cd:
a1:d0:12:5c:a9:ab:d3:25:f6:b1:aa:cc:20:f1:4a:38:4c:c8:
26:fd:bb:f1:55:3e:e3:3f:56:7f:7e:c5:1e:62:99:03:97:5e:
af:e3:9b:96:d5:6d:aa:8a:09:b3:1f:0b:10:4e:1a:c7:84:b3:
c0:3c:57:93:84:4c:ff:b7:e0:a8:1d:d6:de:32:bf:d5:5b:61:
39:55:e9:3d:da:d1:24:f4:89:e1:aa:2c:9a:68:7b:7b:41:3c:
9b:18:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:47 2024 by rpki-client on console-ams.rpki-client.org