Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0869108F57711EE9A750C60775412E6.roa
File: F0869108F57711EE9A750C60775412E6.roa (raw, json)
Hash identifier: L53aZFmvCTOpbLkdSXk1bdzzffPbu46B4jTAfDyL9i8=
Subject key identifier: 19:23:36:2D:AC:17:9E:9A:C5:CE:1D:11:74:29:F0:56:E8:CA:65:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AA53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0869108F57711EE9A750C60775412E6.roa
Signing time: Mon 08 Apr 2024 07:16:38 +0000
ROA not before: Mon 08 Apr 2024 07:16:35 +0000
ROA not after: Mon 13 May 2024 07:16:35 +0000
asID: 138915
IP address blocks: 154.206.112.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43603 (0xaa53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 8 07:16:35 2024 GMT
Not After : May 13 07:16:35 2024 GMT
Subject: CN=661399d6-0fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:ac:48:cd:49:3d:c3:14:fb:77:42:7f:93:
ab:58:a1:f4:f0:42:0e:a2:e6:23:bd:2b:b3:36:5f:
1a:36:21:45:ca:c1:a5:cd:c4:ea:4b:70:54:bc:ac:
21:ba:dd:07:fa:87:fa:dd:7d:1f:c3:1f:62:bf:64:
67:61:46:53:e9:b1:7a:27:78:32:c6:07:be:ef:b0:
1e:21:eb:36:09:cd:ca:18:7e:12:6f:42:c0:c9:d1:
f7:5d:f1:46:0f:88:bf:a9:c4:d8:27:e2:b3:24:d6:
20:4d:54:4d:3a:4a:e0:d0:7f:23:49:db:20:12:37:
5f:5b:da:9d:59:90:4a:8c:46:29:56:ed:4b:0a:1e:
27:58:85:18:e5:77:87:20:be:b9:7f:92:31:24:30:
93:f1:ad:cb:ff:eb:fc:b5:f3:e9:e0:7b:fa:56:f4:
59:b7:a9:77:29:44:f6:6a:5b:f0:77:df:0c:06:c4:
59:f4:98:fb:86:0d:c8:08:ad:e7:ce:e3:99:b6:92:
08:22:5e:91:d0:b0:c2:79:11:7d:df:d6:19:0e:56:
b3:c8:d1:24:30:f7:91:0c:b0:f8:12:68:06:8c:39:
aa:4c:be:82:d9:44:7b:f4:2a:0c:6b:f6:39:d1:e4:
5e:a7:3c:68:6e:16:9e:f9:a1:43:0d:b8:94:4c:be:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:23:36:2D:AC:17:9E:9A:C5:CE:1D:11:74:29:F0:56:E8:CA:65:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0869108F57711EE9A750C60775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.112.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:16:42:4d:4f:21:b6:b3:fe:ef:cd:c9:91:80:c7:a9:37:82:
02:36:e6:56:a5:6d:d3:b9:ed:8f:10:5d:c2:92:5a:31:b2:4f:
7e:6b:71:d6:29:0e:6f:2a:f3:4c:72:b4:8e:cf:0c:b0:17:73:
c0:67:93:4c:86:4d:0d:3b:fd:f5:4f:1a:6c:e5:93:83:24:26:
46:2c:28:61:13:a5:c7:6b:36:93:35:2e:ea:51:23:36:3d:bd:
fe:79:10:f0:d6:2b:aa:8d:af:69:26:d3:1d:2d:68:52:b3:97:
69:9b:8e:71:eb:c4:49:41:cc:c3:24:a3:32:61:81:19:6d:0e:
7b:15:5f:5e:fc:14:90:12:21:27:49:52:e1:d8:d2:05:65:4c:
7b:34:6d:7f:db:fd:36:8a:d9:41:56:89:ec:0a:d7:7f:4a:5c:
a4:f5:e4:1a:6b:c6:d7:94:ab:d0:02:cb:b6:68:87:df:94:ba:
59:d5:7b:23:57:eb:af:20:4b:70:c9:7b:4a:49:24:fb:78:d2:
b8:f2:76:62:f0:ec:83:e0:7c:48:a7:f6:3a:09:1d:92:fd:8a:
f0:aa:90:d0:ec:2c:d3:21:8a:04:f2:93:0f:c5:74:eb:a2:83:
2a:23:49:8f:19:b3:21:45:ff:c8:9d:f3:5b:3a:59:8b:a9:03:
60:79:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:01:43 2024 by rpki-client on console-fra.rpki-client.org