Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AF061C0FB9B11EEB4648B16017001B1.roa
File: 1AF061C0FB9B11EEB4648B16017001B1.roa (raw, json)
Hash identifier: lEKlGhFUBWu4SXtAA5eeXTYGsAcQlCeKZviXwLQhpkg=
Subject key identifier: D7:17:D1:31:78:C9:B1:91:7E:84:D7:12:99:AC:3F:93:87:3A:ED:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AF061C0FB9B11EEB4648B16017001B1.roa
Signing time: Tue 16 Apr 2024 02:43:29 +0000
ROA not before: Tue 16 Apr 2024 02:43:25 +0000
ROA not after: Thu 25 Apr 2024 02:43:25 +0000
asID: 136778
IP address blocks: 154.212.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44313 (0xad19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 02:43:25 2024 GMT
Not After : Apr 25 02:43:25 2024 GMT
Subject: CN=661de5d0-9cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:be:e8:32:ce:f9:b9:64:ec:22:f9:db:41:
52:e4:56:fd:22:95:da:c5:2a:74:c7:a8:bf:6c:6e:
aa:d3:34:3e:e1:f4:12:00:19:fa:5b:2c:ad:06:fc:
e2:c7:5b:89:ba:98:b8:2e:40:9b:7a:b5:c6:d1:a4:
bd:ea:88:38:d4:52:8a:21:2f:92:07:9c:e3:80:37:
33:ce:d4:e7:9c:f5:f1:d4:5a:d1:a8:f1:e5:74:df:
fe:cc:f9:00:89:3b:c7:27:d3:cd:12:b1:7a:2a:86:
dd:84:dc:3a:f8:09:03:85:ef:75:31:61:87:ab:4d:
80:09:e6:43:c3:f5:fd:e0:24:f8:30:2a:10:13:ce:
da:a9:f4:81:04:6d:36:9c:e9:38:2d:d2:a8:c6:9d:
b1:e8:65:8d:2d:1b:68:7a:8b:d8:02:e2:33:8f:bb:
4e:12:cb:c4:4f:d9:6a:12:8d:65:da:2d:2b:57:35:
a1:5f:f7:13:28:4c:85:64:7f:eb:89:ca:55:ad:10:
0a:85:0f:ba:ea:e3:40:c3:e8:ce:8a:5d:c6:8d:f3:
d0:32:ea:40:65:47:18:ca:6e:3e:ad:a1:fa:d1:d9:
d5:4e:e9:25:75:8f:01:28:6a:a9:a5:f0:56:86:07:
03:c3:d8:6a:99:06:38:5b:55:30:e3:08:22:d1:78:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:17:D1:31:78:C9:B1:91:7E:84:D7:12:99:AC:3F:93:87:3A:ED:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AF061C0FB9B11EEB4648B16017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.145.0/24
Signature Algorithm: sha256WithRSAEncryption
64:43:6f:64:e2:59:6c:7e:31:c6:4f:c5:7b:e0:36:2c:01:f5:
eb:59:94:cc:db:d1:fc:bd:88:eb:68:1a:ee:4e:66:67:04:21:
63:ab:13:6d:fd:86:bf:1e:c2:f6:21:60:62:4a:8d:ab:53:f4:
14:c7:e8:2d:21:04:e8:4c:aa:b9:66:32:b9:58:2b:3e:65:15:
73:67:7e:b2:4f:9c:8b:3b:60:5f:a4:48:06:8c:fa:a2:9f:c0:
30:68:e7:b8:a0:96:c6:db:a9:4a:c2:0c:aa:d9:ac:ef:e3:87:
2a:26:03:67:66:3b:fa:b9:2a:2a:c4:64:bb:6d:e4:1e:c3:4d:
c2:68:20:6d:3a:37:48:44:e8:90:fb:f6:99:6b:37:7e:a3:be:
0a:f9:1e:6e:da:69:a4:86:67:f5:86:9c:70:33:2c:1b:49:cd:
5c:bb:90:c0:69:35:27:c2:88:46:bd:61:85:e2:0e:c4:62:7a:
79:d6:cd:4c:7e:37:05:e6:17:30:37:50:18:a7:76:1d:ef:16:
d6:e0:c3:97:0e:ef:41:f7:77:2a:1f:5e:30:74:b7:c2:ec:1c:
28:57:c0:d0:d0:74:14:43:8d:14:1f:c4:38:41:85:63:de:1e:
a9:15:e4:44:26:de:9a:0b:5d:6a:33:53:64:72:b8:4e:13:53:
85:11:c9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:10 2024 by rpki-client on console-ams.rpki-client.org