Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4CFF9DC294A11EF88B0EF1B7DDC24C2.roa
File: F4CFF9DC294A11EF88B0EF1B7DDC24C2.roa (raw, json)
Hash identifier: gYGvMhdLE4BmhgJUm8u3WIG0Tsp+9HI/lRgCtvLKilE=
Subject key identifier: B4:C0:12:5B:A5:E8:3E:55:29:FB:7A:A2:8A:3C:51:E0:AF:0C:BB:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C208
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4CFF9DC294A11EF88B0EF1B7DDC24C2.roa
Signing time: Thu 13 Jun 2024 06:05:38 +0000
ROA not before: Thu 13 Jun 2024 06:05:35 +0000
ROA not after: Fri 21 Jun 2024 06:05:35 +0000
asID: 44559
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49672 (0xc208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 06:05:35 2024 GMT
Not After : Jun 21 06:05:35 2024 GMT
Subject: CN=666a8c32-3905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:dc:7d:df:18:09:e2:4e:20:5e:8b:7b:68:
43:67:ef:3a:41:d2:64:10:33:49:fd:6b:c8:07:f1:
49:b8:5f:1e:39:35:af:30:5d:51:07:c0:dd:40:fb:
de:02:e9:0e:ab:c0:b0:f5:72:cc:42:1e:5f:f7:5a:
f7:91:54:f5:b6:8d:7a:5f:8e:05:0e:e6:34:21:0b:
8d:02:ef:ad:4c:1f:f0:e5:b3:4b:51:b6:45:a9:44:
f9:9c:37:80:82:7f:10:d7:13:ee:87:9e:c8:d0:07:
47:03:1a:3e:c2:b1:91:b4:49:5b:f3:22:9a:a2:02:
4f:a9:87:1d:10:aa:5b:00:ed:bb:fc:67:9d:90:16:
0c:72:bc:e6:3e:90:41:fa:a2:b3:ed:50:df:09:c9:
e0:ed:fd:eb:01:37:f9:40:88:be:61:31:26:54:01:
e7:b5:0e:4e:11:33:3d:57:e9:08:29:a8:58:64:64:
a9:3a:f4:54:3b:b9:99:0b:51:59:64:92:f6:15:53:
82:8c:e0:5b:dd:95:6a:32:c2:39:77:3f:5d:b0:c7:
61:90:fa:99:34:a3:eb:c2:df:b1:f4:fc:27:6f:cd:
82:07:02:33:8b:f1:5b:41:ae:6d:07:43:8a:a9:3e:
ea:d7:2a:49:bc:a5:7f:5d:e0:23:3c:7d:4f:e1:6f:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:12:5B:A5:E8:3E:55:29:FB:7A:A2:8A:3C:51:E0:AF:0C:BB:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4CFF9DC294A11EF88B0EF1B7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
82:c5:e4:b0:af:a9:38:15:c3:c8:2c:db:fd:97:ae:b6:0a:c7:
bd:38:68:34:a2:49:52:29:a4:85:5f:e8:72:58:85:63:c8:62:
a7:e5:3e:11:aa:bd:91:35:40:92:cf:2f:b5:a7:a4:ff:f6:59:
39:11:0f:4b:76:62:1a:bd:7e:f4:6f:6e:be:63:04:a3:88:5d:
e7:6e:8d:b0:e6:83:e1:c1:29:81:04:31:29:67:fa:42:43:44:
13:af:b0:68:18:af:4f:d0:76:7e:7e:ed:f8:00:2e:bc:99:2b:
ea:29:7a:ea:3d:25:56:b4:57:69:62:a3:6d:87:85:60:ba:4e:
e3:4d:a8:a0:09:b1:88:4d:97:49:c5:03:b2:66:e8:1d:ca:f4:
37:d0:ba:94:eb:97:ef:38:1c:59:df:70:b5:91:b4:88:4a:a3:
40:12:aa:bf:0b:f7:7a:51:b2:bd:67:d7:03:76:bc:35:c2:85:
67:79:3b:47:a8:2f:67:23:35:6a:a1:ff:d3:4a:eb:26:36:3c:
46:f2:ec:93:14:20:2b:64:b4:3a:1c:71:f0:a7:02:ff:11:8a:
ae:9d:81:ca:34:e9:d2:25:03:58:60:3b:af:b3:c1:3b:fa:de:
cb:4e:4d:a4:2c:fa:14:60:4d:d9:10:06:10:9a:ed:b6:94:dd:
23:b6:ee:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:46:01 2024 by rpki-client on console-fra.rpki-client.org