Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B53746BC8A11EE85A70D60775412E6.roa
File: 13B53746BC8A11EE85A70D60775412E6.roa (raw, json)
Hash identifier: /U8Ny86lLDI1TeqQyg5rBivq9dXmYsOpAGxxui1xf0w=
Subject key identifier: 90:DC:E9:B4:FF:82:92:41:AB:45:A6:F2:94:C5:C8:92:B9:4B:84:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7EB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B53746BC8A11EE85A70D60775412E6.roa
Signing time: Fri 26 Jan 2024 20:32:52 +0000
ROA not before: Fri 26 Jan 2024 20:32:48 +0000
ROA not after: Wed 01 May 2024 20:32:48 +0000
asID: 216038
IP address blocks: 154.86.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32440 (0x7eb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 20:32:48 2024 GMT
Not After : May 1 20:32:48 2024 GMT
Subject: CN=65b416f4-f90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:9b:97:cf:1e:06:4f:19:64:bc:c5:62:7e:
c7:ef:b1:e8:87:5c:ca:fd:a5:b9:38:ba:7d:e4:c7:
2f:8a:78:06:56:14:54:c3:1f:90:ad:a9:b7:1e:e2:
49:46:0c:c7:77:a8:f4:a8:59:56:8e:48:f3:5a:65:
92:4e:95:15:ba:8b:38:58:e1:cd:d9:49:16:15:f1:
56:d2:7c:fe:6b:cb:c4:e1:07:2c:b3:b1:fd:cc:32:
15:86:dc:6b:51:18:b2:9b:ee:f7:03:2a:b5:b6:8b:
64:72:cb:62:06:4c:9b:3c:e8:1f:f6:0a:ad:35:3e:
74:cb:36:66:94:78:40:bc:44:ee:85:c0:9c:3a:8f:
f9:f3:c5:c7:e7:e4:bf:2b:99:fa:ba:1c:25:77:0b:
9e:5e:fe:0e:fe:23:f7:ae:f7:b8:4b:f3:a4:bf:10:
74:bf:aa:c4:b0:d9:44:58:c6:59:4c:ca:c0:89:0e:
b0:71:c0:9b:7d:c6:b4:7e:e1:7e:ce:93:97:c9:22:
19:94:0a:c1:47:21:80:81:4c:a5:7e:e8:8b:4a:af:
62:85:99:a1:8b:94:76:6b:59:9f:36:55:42:5e:a2:
30:84:ae:46:5b:ba:0d:8f:a6:e8:eb:11:be:f3:81:
d9:a8:af:ec:6a:d5:ef:be:22:f0:b9:e6:db:b7:ca:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DC:E9:B4:FF:82:92:41:AB:45:A6:F2:94:C5:C8:92:B9:4B:84:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B53746BC8A11EE85A70D60775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.27.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a1:3f:d4:34:fe:d9:1b:ef:0c:c6:ad:c8:b0:11:99:31:ea:
9d:44:b2:67:c9:11:f9:2b:0f:7c:d2:d0:94:1c:5c:82:fd:21:
b8:71:70:97:1f:1c:01:ff:f7:25:ec:88:90:b4:db:79:14:46:
5a:12:aa:3f:04:88:ed:db:39:03:2f:c8:e1:74:e3:42:60:90:
b9:12:d3:cc:e8:b9:08:c1:c5:03:7b:94:2b:ce:39:18:f6:0b:
c6:4f:d6:bb:f1:ef:f2:5c:ef:77:e1:7c:a6:fc:8e:db:21:22:
16:67:d3:32:44:4e:74:7b:17:91:10:90:15:2d:bf:37:e5:11:
83:9b:6a:5c:d0:c9:f6:23:66:a6:60:c6:79:6a:ed:4b:02:0c:
5d:b7:0f:e9:4d:89:3a:52:b2:b3:00:5b:e6:a0:96:93:57:2a:
0e:24:f0:56:74:cb:e1:8e:3f:62:86:aa:ef:3d:5b:f3:d3:94:
f1:5b:71:6b:bf:01:14:3d:a6:be:30:e5:ff:24:f6:24:7e:04:
79:e8:17:b8:58:ae:b6:cd:1e:a3:b6:4b:36:ae:18:db:cf:18:
01:63:1b:63:90:47:62:d3:70:4f:5c:2d:c6:cf:87:cc:30:88:
e5:bf:c3:09:57:95:bc:76:43:50:88:e3:aa:cf:a5:11:36:95:
8b:7a:8f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:47:49 2024 by rpki-client on console-fra.rpki-client.org