Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C737CF1ECCA611EE85C86760775412E6.roa
File: C737CF1ECCA611EE85C86760775412E6.roa (raw, json)
Hash identifier: Z+GcvWoHWJ+336KloX3B/ngoFgd+KPJRao34/kyfSUU=
Subject key identifier: 79:20:C5:81:F4:58:B0:46:B7:83:A0:DB:DE:F4:33:A3:3F:F6:C0:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A3B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C737CF1ECCA611EE85C86760775412E6.roa
Signing time: Fri 16 Feb 2024 08:38:37 +0000
ROA not before: Fri 16 Feb 2024 08:38:33 +0000
ROA not after: Fri 26 Apr 2024 08:38:33 +0000
asID: 9009
IP address blocks: 154.216.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35387 (0x8a3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 08:38:33 2024 GMT
Not After : Apr 26 08:38:33 2024 GMT
Subject: CN=65cf1f0d-0455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d2:e2:29:eb:4c:7e:ff:09:22:be:31:a1:06:
2e:1b:45:5b:db:31:55:9b:2d:5f:b3:42:31:64:50:
9b:24:b3:9e:32:44:3c:a2:40:e6:6c:95:13:16:60:
80:7d:9d:11:de:e5:3c:df:a4:94:26:31:88:bb:94:
58:5c:fe:e7:55:93:d7:b9:a1:0a:1a:af:5b:38:ef:
42:4d:90:63:71:4b:c6:f7:45:52:84:d1:60:b9:e1:
9a:4d:af:c5:1e:dd:6b:d9:94:7e:b1:72:ae:82:71:
79:72:c8:cf:dc:6a:28:94:16:c9:cc:1c:73:67:18:
ac:fa:91:7d:45:c2:44:e2:58:53:0f:18:fa:a3:18:
ae:24:b3:34:ff:34:59:c8:86:df:1d:18:a8:86:45:
2b:4d:bb:c4:13:f0:95:3f:88:64:37:57:85:44:dd:
3e:4b:4a:10:e7:eb:56:69:ea:64:5e:de:d6:f4:0e:
58:48:42:1a:56:0c:9b:2b:a9:f8:92:44:5e:6d:4a:
39:57:cb:a1:a8:dc:ef:16:34:5d:26:2a:b0:5e:98:
1a:63:7c:9b:39:4e:bd:50:7c:f6:44:58:49:28:ef:
87:74:00:41:a2:e7:67:9d:df:86:30:e0:dc:a9:59:
2b:ae:13:c8:29:7e:7c:6c:28:97:d3:37:30:43:93:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:20:C5:81:F4:58:B0:46:B7:83:A0:DB:DE:F4:33:A3:3F:F6:C0:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C737CF1ECCA611EE85C86760775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:2b:94:da:20:d8:cb:7e:c2:0a:05:6e:14:61:69:43:1f:10:
0a:f2:97:30:88:cf:dd:39:e3:68:10:78:05:59:ce:66:c0:26:
d4:af:ab:7f:7b:3e:66:69:ed:ac:77:6b:dd:51:08:ae:cc:02:
cb:4e:9c:e4:c3:29:d4:e6:53:b6:23:17:8b:14:58:53:11:e8:
60:52:c8:4e:16:06:7a:56:9c:dd:83:c5:ac:3e:07:9c:8e:d3:
99:57:de:f2:dd:92:0f:e2:64:f6:7b:61:45:02:e6:a4:65:6b:
bf:19:4a:6a:31:c1:43:2c:87:19:59:70:e2:cd:28:dc:cd:b1:
9f:cd:ea:07:f1:78:55:9c:a6:0b:04:76:b0:4a:f6:42:32:97:
16:09:8e:45:f8:c1:0c:c5:af:00:3c:d3:dd:5f:66:5d:96:6f:
38:65:e6:df:ef:6b:ef:3c:0c:2a:81:2f:38:25:92:21:f0:46:
55:c6:dc:de:9e:92:ce:8e:23:4c:c0:df:87:23:7b:8e:a0:99:
a8:ca:f0:de:7b:d0:2a:8d:be:45:c8:f0:58:11:e8:2e:b9:0d:
ae:e1:8a:c5:db:a5:26:6e:c5:80:2a:c6:ba:b3:37:77:1d:64:
59:d3:fb:2d:93:58:75:ec:e6:50:76:46:2e:a5:62:94:4c:df:
89:1c:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:48 2024 by rpki-client on console-ams.rpki-client.org