Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39EE2A6CFBA011EEBA04A640017001B1.roa
File: 39EE2A6CFBA011EEBA04A640017001B1.roa (raw, json)
Hash identifier: n+y/jHocd2LLsJjkfQvqr8dtb0t20fhNPfK8MnNBqv8=
Subject key identifier: A7:FF:BE:90:06:89:36:CB:36:27:BB:A8:C5:D3:7B:59:E0:DA:96:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39EE2A6CFBA011EEBA04A640017001B1.roa
Signing time: Tue 16 Apr 2024 03:20:08 +0000
ROA not before: Tue 16 Apr 2024 03:20:05 +0000
ROA not after: Wed 24 Apr 2024 03:20:05 +0000
asID: 136970
IP address blocks: 154.213.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44349 (0xad3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:20:05 2024 GMT
Not After : Apr 24 03:20:05 2024 GMT
Subject: CN=661dee68-0837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:5a:fc:b3:8f:cd:b9:3f:4b:39:b5:65:9e:
af:83:87:53:3d:06:cc:a8:cf:1d:6c:c9:9c:42:c4:
e7:5a:de:81:e0:12:57:94:38:f1:a3:be:fa:97:2b:
52:72:73:35:7a:5b:11:27:62:19:41:52:ec:81:89:
6e:00:96:4f:13:0a:c1:54:2d:77:3f:2f:2b:9e:27:
a2:85:14:d7:87:c3:da:fc:af:65:e5:37:93:e1:a3:
85:27:17:bc:0d:49:da:06:c2:5e:50:3a:64:9f:94:
14:e3:25:1d:df:2c:a1:1e:6a:66:97:8b:3e:4f:a0:
c7:58:c5:0d:35:b6:a4:ae:f4:60:35:74:d7:47:5d:
3e:33:6c:4a:53:c2:96:16:c4:1b:0a:60:a1:76:50:
59:d5:50:23:1a:37:2a:29:e6:24:d5:fd:7e:60:36:
d6:b6:e3:22:a0:3d:ad:a1:e2:ac:84:bf:ec:99:a1:
0c:a7:43:23:1c:d6:7c:0d:eb:38:bd:9c:84:89:91:
33:36:30:aa:37:cc:89:87:a0:95:22:e0:93:8c:13:
62:34:41:fd:e7:f7:3d:7f:98:10:b7:05:67:a7:9d:
ae:da:49:fc:8e:80:70:d5:1a:39:ee:b4:92:98:b4:
92:36:56:c8:85:91:5f:0a:08:96:95:a9:c1:42:3e:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:BE:90:06:89:36:CB:36:27:BB:A8:C5:D3:7B:59:E0:DA:96:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39EE2A6CFBA011EEBA04A640017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.25.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:3d:04:c5:1e:0b:63:71:cb:8a:5c:82:bb:ac:84:3f:35:a6:
1b:6c:79:8a:1d:5f:b6:72:91:01:81:a9:11:30:ae:ed:08:18:
02:80:48:0e:cb:d3:63:33:b6:40:9c:c4:df:b0:ab:6d:67:f8:
2e:d1:27:ec:b7:e9:b5:00:a2:86:66:c4:c9:93:06:22:36:d9:
84:c8:85:d1:a7:25:f5:b9:8b:6e:11:cb:3f:6d:41:83:6e:19:
93:49:2e:65:93:2a:27:79:ba:a8:15:3b:6d:f7:7b:72:8b:80:
29:d9:4a:6a:4b:fe:d9:15:69:a5:60:53:3c:f1:86:7e:02:87:
ef:98:6c:d5:6f:58:ae:cc:40:21:14:3f:6c:8d:db:ab:4d:63:
21:9c:fc:01:cb:d7:f0:4e:82:30:17:39:26:9b:fa:fc:db:cb:
71:89:30:20:44:29:3e:19:c2:60:44:49:b1:a8:08:ef:34:0c:
f0:18:3e:bc:ce:c3:c6:59:b1:fd:83:8a:a4:18:ae:5e:1d:c5:
7a:08:cd:bb:a2:d8:3f:ac:30:b8:4a:c2:3c:8b:72:e5:a5:b1:
f1:1b:91:df:93:94:8a:7b:6a:0b:1b:49:f5:5e:6e:f1:5b:71:
0e:0d:e4:f9:f1:a1:79:dd:ea:88:bd:f7:01:33:a6:63:1c:5f:
94:17:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org