Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D075886ACCAF11EEBEF8A46E775412E6.roa
File: D075886ACCAF11EEBEF8A46E775412E6.roa (raw, json)
Hash identifier: mVnKZg+YkbEQT1oSli1oC10b0SF9Ilq9pGK2jMPoAH8=
Subject key identifier: 63:BE:09:C4:CF:C9:71:05:FA:ED:9E:18:27:27:7E:27:EE:1A:58:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D075886ACCAF11EEBEF8A46E775412E6.roa
Signing time: Fri 16 Feb 2024 09:43:18 +0000
ROA not before: Fri 16 Feb 2024 09:43:15 +0000
ROA not after: Fri 26 Apr 2024 09:43:15 +0000
asID: 9009
IP address blocks: 154.216.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35471 (0x8a8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:43:15 2024 GMT
Not After : Apr 26 09:43:15 2024 GMT
Subject: CN=65cf2e36-3f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:9c:08:20:1c:e2:ac:15:0f:1a:e7:71:38:
bd:0b:8f:24:bc:40:0c:ba:2e:89:5d:13:e7:1f:86:
d1:17:88:99:9b:ea:7b:a5:4f:3f:67:35:93:7b:9e:
50:c6:95:30:59:f6:08:1f:17:f7:5a:d6:df:41:57:
ad:5f:5d:d2:58:6b:05:15:a2:1e:2e:e9:a6:e0:aa:
f5:b4:38:9d:02:27:09:54:7f:f9:9b:a5:c8:c0:96:
a5:73:b2:72:6a:f4:50:68:5c:00:d4:03:cd:87:06:
ac:96:21:15:c0:d0:f9:68:c0:07:03:b4:27:ce:65:
0b:17:8f:b9:d5:d3:d2:76:2e:0a:d5:78:86:54:8e:
98:2b:37:c7:b2:6a:98:5c:14:84:ce:f1:ed:9f:91:
74:3c:d3:d3:83:eb:12:e3:17:3b:eb:bc:fa:49:1a:
b5:c6:9b:27:05:8c:19:b7:e5:bc:d6:a0:18:8a:39:
cf:cd:d9:6d:22:f8:b4:d2:e6:69:4b:b5:0f:77:0e:
ce:d3:13:1b:db:f3:aa:46:84:50:67:9d:dd:38:bf:
cf:ce:c0:ad:07:b2:5a:d3:9e:6d:df:36:c9:23:dc:
80:02:69:17:f1:15:91:d7:e2:0b:de:a2:96:4b:43:
6a:7c:34:5e:75:bb:ff:cf:8d:14:a2:2e:2e:47:43:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BE:09:C4:CF:C9:71:05:FA:ED:9E:18:27:27:7E:27:EE:1A:58:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D075886ACCAF11EEBEF8A46E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e9:ad:91:a9:ac:70:09:67:cd:19:6c:1a:12:a8:96:bd:b4:
05:50:74:2f:bf:21:88:34:cc:72:38:bb:fd:cf:57:6a:48:08:
e8:3a:6c:47:3a:ae:69:46:65:1c:15:63:c7:90:97:1e:fe:ce:
c0:6d:07:58:97:f7:40:fd:fb:52:82:2d:14:3a:95:1a:48:7d:
0f:97:88:f4:d8:e2:14:fd:02:c9:8c:69:5c:5b:1b:6f:4f:d1:
53:6a:cc:67:af:04:4d:c4:0b:77:62:d3:9f:49:76:3b:ba:52:
be:06:82:53:3d:3a:ab:52:44:58:75:fe:2b:e7:16:17:51:57:
79:69:a8:51:78:26:31:0f:6a:fc:91:56:cd:7b:53:b8:20:d2:
69:96:a6:f3:41:20:fd:57:6d:11:ef:84:d6:7c:bf:15:e8:67:
06:5e:44:2c:da:4d:f0:e8:22:a1:04:da:8a:b3:f3:d2:c5:14:
1d:f2:13:4e:d8:0e:92:95:ef:66:ae:fd:3c:b2:2e:a2:ac:05:
07:3b:3e:6c:46:c3:20:d5:d1:60:08:c0:e0:20:97:02:04:3b:
dd:de:d5:6b:5a:bb:90:8b:46:63:13:9a:2b:e3:9b:92:35:89:
60:c1:e7:ba:ad:af:1a:f9:db:71:d5:d5:02:13:ca:ca:81:ee:
25:21:2c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:49 2024 by rpki-client on console-ams.rpki-client.org