Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B26C638D7EC11EEA4779568775412E6.roa
File: 2B26C638D7EC11EEA4779568775412E6.roa (raw, json)
Hash identifier: coSgq0L3KODY+g+oOWRWI7iIDNRFuHJa6WXE2pBEMFk=
Subject key identifier: EF:DA:EF:90:4B:B5:E0:81:36:90:FB:76:BC:21:D3:8E:A3:2B:3D:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 96EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B26C638D7EC11EEA4779568775412E6.roa
Signing time: Fri 01 Mar 2024 16:53:03 +0000
ROA not before: Fri 01 Mar 2024 16:53:00 +0000
ROA not after: Fri 05 Apr 2024 16:53:00 +0000
asID: 212238
IP address blocks: 154.94.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38634 (0x96ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 16:53:00 2024 GMT
Not After : Apr 5 16:53:00 2024 GMT
Subject: CN=65e207ef-be33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:a1:f6:5c:8d:d3:a6:eb:c3:2d:f3:e6:27:
d5:24:17:fe:fa:07:13:64:8a:13:49:9f:ab:b0:4a:
4c:61:e6:83:07:35:80:7a:cc:ef:80:c3:97:c9:c1:
cf:62:be:ce:33:8d:9b:ab:f9:f8:6c:2a:74:a6:ff:
99:1a:34:c6:52:1e:78:78:d3:f8:5b:87:53:9c:e0:
5e:b1:1a:75:5a:f5:52:8c:0b:21:0d:9d:92:7e:79:
ad:d3:bf:63:e9:ad:4e:36:d0:79:52:46:9f:30:62:
89:66:87:81:ca:cb:06:79:b3:4c:80:cc:e6:30:d8:
8f:83:86:94:bb:c8:13:f0:c6:31:03:9f:c6:2c:4c:
a2:36:da:24:e5:83:33:26:e0:57:78:c8:5f:37:a7:
54:5d:9e:d2:37:ef:3c:c3:ab:1c:b3:4a:69:40:f3:
f6:03:dc:2e:c3:b6:7b:7c:00:95:9f:4c:f5:cc:4c:
c8:ac:ff:59:af:55:ed:5c:bc:3a:c0:f7:1c:74:7f:
4d:1f:60:a4:e4:20:3e:20:74:a2:c3:72:c4:9e:c1:
17:00:be:e3:51:e3:28:ed:8c:06:57:b3:0d:b9:8a:
83:fc:0e:b3:f0:23:c4:b2:54:9d:80:ac:94:02:3c:
2b:3b:b9:57:d9:a7:87:87:0d:38:da:93:27:c1:bf:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DA:EF:90:4B:B5:E0:81:36:90:FB:76:BC:21:D3:8E:A3:2B:3D:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B26C638D7EC11EEA4779568775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4a:0e:62:cc:f2:8c:5b:05:78:bc:bb:d5:a6:d9:b7:f4:c3:
cc:24:43:78:2d:95:2c:7c:2e:26:65:64:30:97:18:95:9b:b3:
c1:d2:f3:74:fe:52:fb:51:1d:ca:81:6a:af:c7:48:c4:1b:6f:
eb:12:25:d9:74:3c:c1:c2:c6:e1:77:42:f0:6d:c2:89:b2:85:
6e:aa:c3:59:f6:b4:90:25:6e:3e:ba:d3:07:11:2d:4a:77:b6:
92:5f:f6:0b:30:26:1f:66:53:0f:c4:98:87:dd:55:2a:3d:af:
f8:96:b2:58:79:c4:73:e7:ff:a5:98:a6:da:c3:31:63:b4:79:
49:21:9d:f0:4a:bd:23:a0:98:f6:f9:0c:6d:56:05:cb:ac:d4:
40:f3:5a:0c:69:a9:7d:96:56:cd:3a:91:91:a0:8c:6e:da:3d:
3a:a6:1b:fb:cf:03:8c:05:d8:1a:8e:d3:62:33:be:46:9a:e6:
ea:7a:66:5d:6a:cd:19:51:12:97:c5:fc:81:cd:4d:e3:18:66:
79:6e:f7:8a:dc:11:6c:17:03:44:67:57:39:1a:dd:df:4c:3b:
87:36:4b:ce:52:40:5f:43:6d:6e:55:7d:f1:3b:80:9b:f2:f1:
97:f5:e7:49:8d:56:38:39:70:27:99:29:eb:a4:d4:5d:45:7b:
60:6e:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 01:49:15 2024 by rpki-client on console-ams.rpki-client.org