Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8ED31CECCB111EEA01AF371775412E6.roa
File: F8ED31CECCB111EEA01AF371775412E6.roa (raw, json)
Hash identifier: +v+lIsn/eQCl59cQOwKNNcoOFOzULJrmtEni/u7ri8E=
Subject key identifier: F7:9A:41:17:9E:2E:F6:50:7A:56:10:A5:6D:A7:33:75:57:EA:ED:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8ED31CECCB111EEA01AF371775412E6.roa
Signing time: Fri 16 Feb 2024 09:58:45 +0000
ROA not before: Fri 16 Feb 2024 09:58:42 +0000
ROA not after: Fri 26 Apr 2024 09:58:42 +0000
asID: 9009
IP address blocks: 154.216.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35491 (0x8aa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:58:42 2024 GMT
Not After : Apr 26 09:58:42 2024 GMT
Subject: CN=65cf31d5-f784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:c3:36:b3:9a:99:c1:11:74:4e:75:a7:11:
9e:05:ae:23:a6:89:56:74:75:45:0b:3d:d7:cc:f8:
2b:5a:5f:02:b2:9c:f2:dc:a3:2d:b5:ae:6d:15:3a:
97:08:9e:43:c8:11:f6:fd:61:ac:c1:34:54:56:37:
a4:78:76:51:da:b9:2f:de:11:19:94:e9:46:8d:26:
99:5f:13:fb:5f:cf:91:13:24:de:d3:55:e7:ad:e2:
f3:6f:2c:0b:3e:b3:cd:9e:d9:14:df:5f:94:19:c5:
4d:fc:aa:38:ac:c3:a6:46:e9:b4:45:7e:8e:7a:db:
ec:66:00:9b:62:bb:4b:f3:ad:1f:31:0b:35:59:6e:
5b:bb:1b:46:1d:17:04:63:1d:4c:d0:3c:e8:dc:fa:
86:ed:e9:87:2d:1f:76:99:49:4c:28:52:fb:ae:95:
4d:f0:17:ab:a9:98:9d:94:b4:dd:37:6c:01:a5:c7:
c4:5a:82:26:f8:88:d1:41:c5:e8:fc:3b:e4:01:53:
e6:2c:de:66:ab:cf:48:24:9e:6a:1b:47:aa:34:ce:
a2:2a:2b:84:a3:4d:6e:60:b8:27:1a:41:3c:0b:1e:
76:b2:82:96:db:cf:4f:60:37:be:a0:c4:ce:22:f6:
a8:5e:87:01:1b:a5:aa:92:18:9c:88:51:4d:04:b6:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9A:41:17:9E:2E:F6:50:7A:56:10:A5:6D:A7:33:75:57:EA:ED:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8ED31CECCB111EEA01AF371775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.218.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b6:a1:2e:94:fd:c1:12:8b:41:4e:d0:dd:84:cc:59:bd:c2:
3f:37:9f:ff:9e:fa:f4:ab:5d:bf:59:0b:eb:12:d5:a7:a8:10:
7c:d9:81:61:7b:d2:ab:9e:38:49:d9:3f:d8:67:db:cb:0b:9f:
b6:fd:31:44:25:63:82:f1:12:e7:6d:06:04:d3:ea:e6:16:7d:
8f:83:53:d1:bd:9e:6b:13:cf:94:d8:30:bf:a4:93:4c:fc:b2:
63:c9:90:0d:bf:bd:93:94:6f:e8:af:b7:16:8f:e1:ff:f3:57:
f6:cf:df:58:c5:ba:16:53:0c:83:64:ff:40:7d:f2:1a:b3:1b:
aa:84:f5:70:dc:63:7b:2b:24:b5:33:e4:71:d4:22:af:e8:11:
9c:78:ac:8b:0a:a1:3f:93:36:cc:df:a0:67:19:2d:f2:ae:9d:
6d:e8:7b:de:28:9f:9c:a5:aa:3b:ea:29:2f:e2:59:a9:1b:8f:
70:49:2c:e2:cb:ee:d4:48:ff:15:23:f6:34:34:4e:aa:a5:1d:
a2:a2:a2:83:22:4b:29:1a:34:a8:ad:7a:84:08:a7:7e:5b:1c:
9a:2d:93:71:b3:b1:33:60:32:1e:00:ad:d0:65:5d:0e:45:14:
3c:1f:78:b0:72:54:65:4e:2a:38:ab:4d:83:a8:11:9a:db:d9:
3b:1b:08:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:50 2024 by rpki-client on console-ams.rpki-client.org