Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02CAA1B4E82711EE8DC75CA3775412E6.roa
File: 02CAA1B4E82711EE8DC75CA3775412E6.roa (raw, json)
Hash identifier: rXibzOZbtKtgUc1kKz2G1wL8GHc2+ffCS84ZXSCGT6A=
Subject key identifier: 79:20:AA:95:1A:DA:EB:D1:62:D2:AC:5F:A9:53:C6:FD:9F:F2:AE:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A632
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02CAA1B4E82711EE8DC75CA3775412E6.roa
Signing time: Fri 22 Mar 2024 08:34:34 +0000
ROA not before: Fri 22 Mar 2024 08:34:31 +0000
ROA not after: Thu 25 Apr 2024 08:34:31 +0000
asID: 44559
IP address blocks: 154.83.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42546 (0xa632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 08:34:31 2024 GMT
Not After : Apr 25 08:34:31 2024 GMT
Subject: CN=65fd429a-ca14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:14:9e:18:63:dc:c8:af:b1:ca:49:a7:68:
fa:2d:57:ae:22:67:85:46:7a:74:a4:63:81:84:79:
e9:29:ae:06:24:85:53:3f:92:76:6f:72:8f:8d:ef:
bf:8f:da:da:7e:d7:e8:eb:88:cd:64:05:fa:b7:45:
a2:68:07:83:44:cb:6b:02:8b:76:f2:da:c6:90:b0:
2a:39:a5:a7:4b:74:85:88:1b:8a:fd:90:37:23:b4:
37:cf:57:9d:dd:c5:ba:77:05:31:23:75:ad:71:3f:
23:a7:98:36:09:25:4a:69:20:89:d0:07:60:7e:a4:
c9:db:24:b6:84:5b:51:94:00:c1:f4:00:dc:1e:bb:
0c:f9:bf:df:7b:55:55:c6:d5:9e:02:4a:9e:22:c7:
4b:ae:15:a3:99:c8:15:ca:9a:8f:42:1f:ef:d7:73:
8a:18:f8:da:2a:0e:b9:59:7a:30:39:41:6d:e2:7b:
31:eb:0f:53:84:1a:aa:f5:74:58:18:e8:d0:26:d3:
98:6f:6d:0c:5f:f7:ce:7a:c1:9e:29:86:2b:3d:c7:
f8:fa:ba:8d:06:c1:f0:da:0e:bc:03:8d:b2:bd:05:
d9:77:03:26:61:fb:60:58:0f:37:00:a3:1d:7e:ef:
47:e9:be:9b:50:6c:c8:5e:16:63:c0:88:86:f5:7b:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:20:AA:95:1A:DA:EB:D1:62:D2:AC:5F:A9:53:C6:FD:9F:F2:AE:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02CAA1B4E82711EE8DC75CA3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.128.0/18
Signature Algorithm: sha256WithRSAEncryption
cc:a9:be:11:45:aa:68:c8:df:a7:aa:3b:1b:76:db:1d:6f:70:
c9:98:31:83:8f:35:15:16:eb:aa:75:31:ef:b1:d8:30:26:15:
61:f2:fb:be:1b:8f:60:dd:c8:b3:09:99:ac:96:4a:e0:ba:5c:
e7:ca:83:b8:ed:d4:63:bb:f4:80:66:d1:1d:f2:f8:a9:1e:61:
78:07:db:64:f4:41:e2:c1:6f:bd:7f:f4:95:3b:46:8c:87:f3:
66:10:3c:75:2e:ce:de:ac:68:b8:e5:93:1d:e6:fc:53:97:5b:
aa:6e:bb:40:0e:21:d6:9e:7e:f4:db:5a:c0:e1:60:64:f4:5b:
fd:96:e5:46:e6:e8:5c:09:d0:f8:04:11:46:8a:bd:82:84:bc:
8b:f6:1e:29:27:d2:fe:b9:b7:89:95:74:e5:8e:e0:7b:53:68:
c0:27:5d:5c:ca:65:c2:ac:03:80:db:80:37:67:af:1e:b9:5f:
5c:d4:06:0e:be:34:ca:39:e9:54:81:66:e2:07:e9:5c:2d:87:
8e:00:f1:64:49:12:e5:58:ce:ff:5b:6f:ac:d1:4e:41:fa:68:
ad:98:70:5b:ee:06:12:83:82:e3:c6:cb:d0:d7:27:e0:25:f4:
71:4e:13:ea:49:e3:42:93:db:e2:b4:6d:ba:e8:46:35:b7:7c:
65:3d:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 13:10:08 2024 by rpki-client on console-ams.rpki-client.org