Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E9BE14FB9A11EEAF705E0C017001B1.roa
File: 30E9BE14FB9A11EEAF705E0C017001B1.roa (raw, json)
Hash identifier: B0zkE/Pc65kXxRHiLoigmBdDxtXsCyBXYDf1+U6sfcc=
Subject key identifier: 74:55:50:91:3F:E7:A7:43:1C:F9:C9:40:1B:EA:FB:CE:BD:1F:87:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E9BE14FB9A11EEAF705E0C017001B1.roa
Signing time: Tue 16 Apr 2024 02:36:56 +0000
ROA not before: Tue 16 Apr 2024 02:36:52 +0000
ROA not after: Thu 25 Apr 2024 02:36:52 +0000
asID: 142062
IP address blocks: 154.212.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44303 (0xad0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 02:36:52 2024 GMT
Not After : Apr 25 02:36:52 2024 GMT
Subject: CN=661de448-c393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:f7:30:36:20:4b:0b:93:67:7b:4d:ef:a9:
08:96:be:99:2a:0c:b2:26:05:ac:bb:12:d0:5b:b4:
ef:d0:b2:e5:62:0b:f0:14:be:f8:e3:44:64:3c:c1:
fc:fe:79:fd:8a:6f:f4:b4:d8:b6:77:e6:4e:7e:11:
03:9c:b6:df:20:ff:30:df:3e:e8:db:7c:9a:01:55:
ee:ce:91:04:f0:0b:cd:88:17:33:5c:33:78:69:47:
c8:14:55:77:de:0f:90:4b:e5:80:ea:1b:4f:86:0c:
4d:a8:b3:43:3f:f8:e4:44:c6:b6:e5:b5:c4:50:5b:
a3:d9:95:d9:b4:c6:f2:4a:93:96:05:0e:9e:4f:3e:
27:c0:f0:be:12:a4:61:24:67:e0:29:51:a3:3d:6c:
10:cf:a3:8e:19:9c:e6:f0:86:91:f1:44:ef:47:45:
47:aa:c7:79:e5:e2:be:be:76:38:6c:33:e6:b8:eb:
d9:fb:40:48:4c:f5:31:8c:48:d6:89:2e:46:15:c5:
4a:50:e9:46:75:a6:7e:26:e7:3a:bb:ad:ef:a4:b2:
11:a8:23:35:ad:e1:67:96:91:db:92:95:fa:cc:b8:
0a:45:4e:ea:62:72:5a:6b:b4:99:ff:0e:f1:a5:a9:
5a:c3:11:d0:1d:6e:91:e2:76:13:47:da:40:58:46:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:50:91:3F:E7:A7:43:1C:F9:C9:40:1B:EA:FB:CE:BD:1F:87:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E9BE14FB9A11EEAF705E0C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.150.0/24
Signature Algorithm: sha256WithRSAEncryption
52:00:1e:aa:a5:e5:77:57:3d:d4:10:d3:05:69:69:b8:6c:eb:
d0:f8:1f:5f:fb:05:ec:eb:50:10:88:97:c8:b7:61:eb:18:a7:
07:10:fc:5f:22:79:c4:00:a2:aa:07:95:8b:74:bf:49:9a:26:
28:82:cf:5e:f1:e0:ae:18:7b:35:71:ff:75:4e:ed:37:53:5e:
4b:ea:e0:70:5a:e1:f1:52:d4:05:50:61:f3:fb:82:7e:0c:f5:
93:38:fb:d7:0b:04:47:2f:04:4a:fa:5b:eb:22:b1:e1:11:7b:
ef:8b:3d:e4:db:03:b8:f6:91:8c:2f:15:b6:98:ce:ee:63:7a:
ac:21:e9:92:7a:1b:89:41:fc:18:3b:d1:e0:14:f7:aa:38:dc:
41:34:c1:c4:5a:2f:6c:ce:97:28:27:48:3e:f2:3c:ef:81:37:
77:2e:ec:44:8d:e7:6a:1a:6a:6d:fb:79:93:75:cd:38:10:04:
e5:a2:7f:b5:78:11:43:e0:bd:c9:dd:7e:50:74:90:09:81:51:
0a:21:1d:7b:13:76:fc:60:73:2f:de:b3:32:fe:81:85:3d:8b:
ae:3b:62:47:9f:f2:b6:ec:4c:be:03:bb:de:48:a3:c0:75:41:
e3:63:d5:c3:63:77:be:f5:cd:d0:10:b3:0f:16:e9:d8:2a:bc:
9e:90:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:10 2024 by rpki-client on console-ams.rpki-client.org