Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5C5CFB0CCAD11EE9C5B846B775412E6.roa
File: E5C5CFB0CCAD11EE9C5B846B775412E6.roa (raw, json)
Hash identifier: Rq5lwJsq8qY4bfWZslleyQ17zvlo07qUdhPlMOQcOqs=
Subject key identifier: 07:3A:16:22:59:60:54:DC:91:14:10:BD:F4:D3:2E:9E:1C:E4:38:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5C5CFB0CCAD11EE9C5B846B775412E6.roa
Signing time: Fri 16 Feb 2024 09:29:35 +0000
ROA not before: Fri 16 Feb 2024 09:29:32 +0000
ROA not after: Fri 26 Apr 2024 09:29:32 +0000
asID: 9009
IP address blocks: 154.216.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35455 (0x8a7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:29:32 2024 GMT
Not After : Apr 26 09:29:32 2024 GMT
Subject: CN=65cf2aff-0fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:d1:ad:6f:10:1a:89:33:b1:b3:f9:7e:ed:
cf:09:f5:c5:bb:9e:72:e0:46:4d:87:b8:42:e5:95:
67:ad:a8:a8:6f:11:b4:fc:51:d8:4a:f6:3f:1a:d6:
cf:1c:42:54:97:df:e7:59:04:56:82:6c:8a:7a:94:
3c:71:e4:30:ed:f4:21:0d:6a:6d:6e:80:3c:09:29:
4b:83:d3:7d:c2:60:c5:4a:28:c9:45:a8:99:05:b9:
88:42:a3:bb:5d:23:73:b9:ca:0a:9e:df:c3:01:c6:
39:56:d9:f4:ca:23:d0:16:f1:46:97:b9:0b:d8:19:
f3:3b:61:d4:c7:17:30:21:62:cd:48:5c:b5:26:fd:
d9:c4:61:3c:11:2d:aa:71:46:7f:2b:09:b7:35:cc:
15:69:e7:79:ef:7b:a0:28:2a:a4:73:92:0e:bd:13:
9a:aa:93:a4:3f:61:bc:da:fd:54:39:b6:32:c6:c1:
a5:d7:74:6e:95:46:f2:b5:6b:cb:74:fe:11:a6:43:
46:96:11:d6:a6:34:54:e3:ae:9e:1f:b1:97:55:b2:
70:77:64:47:93:4b:75:3f:16:c8:e3:dc:e8:b7:e5:
13:52:c0:f4:59:b3:fb:bc:78:65:25:b4:aa:d9:03:
b4:b2:01:d7:d7:5d:4c:5f:d6:06:3f:61:d7:87:cf:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3A:16:22:59:60:54:DC:91:14:10:BD:F4:D3:2E:9E:1C:E4:38:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5C5CFB0CCAD11EE9C5B846B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a6:05:e7:72:b7:cf:a2:30:22:12:49:ff:1b:e2:69:5f:25:
6d:d0:d8:fc:1e:da:c2:bb:06:ad:7c:2b:5f:f3:90:d4:5e:a3:
ec:da:91:e5:ad:99:d8:f8:76:74:60:9c:84:39:2d:ad:ee:62:
0a:3b:f5:8b:23:35:e4:83:b6:a4:8a:f1:83:b2:d8:39:9a:d7:
77:98:62:7e:89:6e:34:cb:6d:45:9b:a2:d1:88:43:cb:0b:55:
d2:06:ad:1a:67:84:da:b9:4d:93:b4:dc:5f:a7:0a:d2:05:3f:
b9:cc:4e:1a:77:b4:6b:e1:47:09:52:60:50:e0:5a:99:a0:51:
bd:dd:f6:13:c5:86:f4:5c:b0:9e:b3:ad:6e:dd:32:ab:15:9b:
de:86:0e:7e:98:87:0d:eb:50:35:57:9d:e2:b4:cc:51:21:0c:
2b:f7:5d:37:fb:f3:2d:95:98:ca:9f:f2:73:56:fb:1b:c5:45:
b2:9f:ce:42:a3:ca:b2:89:a7:8f:e2:6e:2d:b7:23:c3:83:35:
d8:07:76:4d:b7:78:0b:8c:3f:c7:e9:af:88:b4:08:d2:07:d5:
c8:1c:f3:4f:15:69:60:b0:10:7b:69:b2:87:f3:24:23:41:b7:
57:22:cb:cf:79:22:63:6a:1f:d3:c4:e7:24:c6:5a:c3:20:7b:
3d:5c:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:49 2024 by rpki-client on console-ams.rpki-client.org