Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8CD04D80B4711EF81D83246017001B1.roa
File: F8CD04D80B4711EF81D83246017001B1.roa (raw, json)
Hash identifier: h7cCkpHLyq4ITDQnZN8FqqpX7/NzPM36aiLdcC7Nw84=
Subject key identifier: B0:97:8A:AE:EF:CE:C9:55:3B:7C:15:D4:76:0A:A4:86:32:78:29:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B452
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8CD04D80B4711EF81D83246017001B1.roa
Signing time: Mon 06 May 2024 01:28:42 +0000
ROA not before: Mon 06 May 2024 01:28:38 +0000
ROA not after: Thu 16 May 2024 01:28:38 +0000
asID: 44559
IP address blocks: 154.83.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46162 (0xb452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:28:38 2024 GMT
Not After : May 16 01:28:38 2024 GMT
Subject: CN=6638324a-f97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:cc:5e:ef:da:ae:5e:d7:46:ca:1f:fc:0f:
e4:7f:2c:59:ab:3d:cd:ae:b5:e0:ba:b3:d5:b3:5b:
4c:f5:30:de:56:82:a2:c5:56:9f:27:93:c6:b4:43:
4e:bd:5e:d6:b1:07:61:a1:c3:dd:67:cc:11:a9:d8:
9d:ff:32:20:7d:16:94:8b:02:bb:f6:5c:b7:ad:58:
ca:bb:d3:e2:3f:da:4d:0c:fc:95:72:b9:88:c1:d6:
72:ed:e0:31:bf:72:8a:8c:1d:ff:d0:d1:84:de:f0:
b3:e2:f4:11:2e:5a:23:81:b9:d6:61:08:7e:42:a9:
77:16:76:54:55:34:7b:b9:a9:ee:20:fd:81:61:2c:
a8:27:ec:84:3d:50:4e:d1:c4:53:31:69:5b:ef:00:
a1:fe:6f:05:cf:9f:0c:dc:71:05:d1:37:ee:d2:81:
b3:bb:5b:06:b6:85:e1:8b:10:60:b5:4c:da:6f:ab:
58:96:68:5a:66:52:ec:7d:2d:03:d2:3d:fb:ae:e2:
2e:a9:25:5c:e7:72:2d:37:e8:87:12:c5:24:b8:e8:
f3:fc:8a:7b:c4:fd:3a:65:49:eb:69:7f:77:5a:99:
13:c0:19:d5:45:13:67:c0:0e:1e:94:b3:f9:7c:d8:
3e:52:26:5c:92:16:c7:da:db:1f:b1:d7:d2:a6:3a:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:97:8A:AE:EF:CE:C9:55:3B:7C:15:D4:76:0A:A4:86:32:78:29:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8CD04D80B4711EF81D83246017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.128.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:6f:1e:01:52:2b:83:bb:d8:9c:b6:87:0f:1a:1f:3d:28:8b:
da:d1:40:18:cb:5d:7d:79:c4:7b:9d:6e:91:6a:73:2a:ec:e4:
be:3d:b6:ef:21:fc:70:d0:23:55:ac:11:76:a0:f3:c5:8d:b5:
83:64:f1:9d:04:76:a2:a0:65:da:1c:47:4f:60:74:a2:0d:e0:
58:37:54:9e:e4:a0:90:3c:81:cf:89:e7:16:43:e6:74:37:03:
c3:b8:b2:31:5d:4e:a7:24:9f:c0:03:52:93:54:65:19:09:9b:
a6:e1:7b:ba:9b:10:d4:86:d8:f0:5b:03:f1:04:8f:02:eb:c1:
1e:8c:f9:56:0b:64:17:ca:57:b7:0a:38:bd:89:67:f2:ff:8f:
59:ce:5d:dc:53:52:ec:2e:68:86:45:84:55:c4:7f:b3:49:b0:
0d:8f:f2:e0:fb:5d:99:43:a6:72:5e:a4:ea:80:ba:5f:e0:a5:
0d:73:79:1e:43:3d:ec:b7:4d:03:e2:a2:c0:24:20:c2:15:a1:
8c:11:71:9c:0c:4b:46:89:f0:8e:ab:f4:38:09:f1:cb:e0:0e:
05:55:af:df:9f:e3:66:8b:e9:74:2e:04:c4:c5:fa:21:e0:22:
ac:1a:29:ac:09:6f:ca:44:68:57:42:eb:6b:f4:2d:04:22:7a:
6e:24:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 08:57:54 2024 by rpki-client on console-fra.rpki-client.org