Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EB57726A0E711EFAC8BFDA3762E951A.roa
File: 2EB57726A0E711EFAC8BFDA3762E951A.roa (raw, json)
Hash identifier: 55ZQoXHqUgZlyYOPDZCgUwxR7w8ZJf64ie/4rbf6zp4=
Subject key identifier: 94:DA:1F:FC:5D:65:9F:21:77:D5:46:C9:A6:8F:BA:65:30:D0:99:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EB57726A0E711EFAC8BFDA3762E951A.roa
Signing time: Tue 12 Nov 2024 11:13:45 +0000
ROA not before: Tue 12 Nov 2024 11:13:42 +0000
ROA not after: Fri 22 Nov 2024 11:13:42 +0000
asID: 215240
IP address blocks: 154.216.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68710 (0x10c66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 11:13:42 2024 GMT
Not After : Nov 22 11:13:42 2024 GMT
Subject: CN=67333869-3d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:b2:3c:65:06:91:22:13:43:55:70:f6:0d:
c5:37:2b:f8:d1:aa:b6:67:f5:f6:45:e2:5f:55:3c:
f9:1c:ac:1e:2b:12:c0:7a:1f:82:e0:e7:67:63:a1:
a5:ec:ce:71:72:83:a4:aa:2d:9a:ea:f3:10:a4:16:
88:7d:ea:3b:e8:18:32:a3:c6:2a:a1:19:a6:e1:b4:
75:95:d3:83:bf:6b:42:90:de:d7:05:53:36:23:66:
9c:f0:1c:cf:6e:01:9e:42:94:39:5e:af:9d:2f:f6:
99:89:40:76:5a:8e:04:77:21:67:63:da:78:ee:d2:
3a:92:a0:6b:e5:5f:d3:d8:86:37:0a:99:de:b6:8f:
6c:62:c5:a4:0b:bc:ab:e0:3e:1d:59:03:64:88:4d:
13:b5:d7:37:8c:1a:8f:72:ac:1b:61:c0:d3:4f:29:
d0:7f:a8:69:30:ea:19:80:f0:36:9f:e0:61:83:74:
1c:7b:2c:65:00:bd:80:21:3e:b2:e7:4e:df:7e:21:
44:b9:ea:bb:f2:c2:a6:ba:1e:4d:30:17:49:96:27:
a1:e8:96:3f:f9:5f:d9:65:ae:cd:01:0d:a8:26:09:
dd:9f:ee:8d:09:ab:e8:51:8a:73:c2:13:0c:69:c7:
54:f6:b3:c5:6b:df:55:de:8a:06:f0:74:83:8f:55:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DA:1F:FC:5D:65:9F:21:77:D5:46:C9:A6:8F:BA:65:30:D0:99:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EB57726A0E711EFAC8BFDA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:4e:76:ea:21:93:8f:22:02:5a:7d:74:b2:29:76:57:41:b7:
fb:96:6c:99:68:55:c4:8e:da:3d:35:4c:fe:25:90:dd:22:8c:
9c:68:00:41:60:8c:3b:42:a2:89:a9:e4:d6:bd:21:c2:76:07:
f7:fa:57:b9:51:c3:bb:82:5d:72:0e:01:29:ec:50:87:c7:e5:
08:a8:46:31:30:40:1e:c1:d6:2b:11:25:e1:d3:36:c8:91:61:
a8:df:cb:d1:45:92:0d:42:a8:fb:28:1d:37:a6:e5:8b:d0:27:
8b:fe:8a:97:57:02:8d:0c:1d:84:5a:de:44:07:23:7e:87:6a:
d6:95:e2:e4:c5:ce:86:80:8f:a2:65:5f:3e:84:6b:93:46:2b:
f4:6b:88:8e:45:ca:02:cf:cd:a4:50:56:a0:7b:9c:33:52:1b:
c3:97:14:6e:3d:f6:d0:62:29:0d:3d:22:e9:57:36:d9:92:89:
39:50:f7:3d:00:16:3b:7a:f3:92:2e:0d:b7:25:38:31:9a:ea:
44:35:80:17:6a:61:11:24:26:d9:40:ca:45:f3:49:9e:bc:72:
1a:81:b0:11:65:c9:56:c9:5f:ca:2c:e0:3b:49:44:ab:1b:fe:
16:bd:0d:b2:c7:1c:01:76:d6:5e:ab:a6:8e:d9:05:de:55:f8:
af:db:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:46:14 2024 by rpki-client on console-ams.rpki-client.org