Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A90139AEDBD11EE88AEE35A775412E6.roa
File: 3A90139AEDBD11EE88AEE35A775412E6.roa (raw, json)
Hash identifier: i5Ij6vUi44ZFdw/9dzOmQ/L+tbMGOND8IBqkH5E7Bv8=
Subject key identifier: A2:E9:77:AB:B6:A8:41:C8:76:71:0C:C6:84:7F:D8:1A:9E:CB:D6:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A759
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A90139AEDBD11EE88AEE35A775412E6.roa
Signing time: Fri 29 Mar 2024 11:12:28 +0000
ROA not before: Fri 29 Mar 2024 11:12:25 +0000
ROA not after: Wed 24 Apr 2024 11:12:25 +0000
asID: 54467
IP address blocks: 154.223.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42841 (0xa759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 11:12:25 2024 GMT
Not After : Apr 24 11:12:25 2024 GMT
Subject: CN=6606a21c-dadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:93:42:5b:cd:8e:7a:92:b7:5b:47:a9:06:
8e:bb:9a:5d:cd:52:08:5b:8c:e8:a6:d9:e1:f1:36:
ca:e9:02:61:cc:0d:21:31:08:e4:d8:26:b4:47:70:
ca:8f:64:5e:c6:26:62:15:ac:27:ca:00:31:b7:f0:
a6:b2:e3:90:22:d0:9b:b3:b8:c8:4f:17:8e:dc:29:
be:14:4a:de:f2:89:72:c4:7a:ee:86:ad:41:53:bb:
00:20:ad:8e:2f:99:c2:d2:2a:bf:c0:af:22:01:0d:
7c:7d:85:67:c5:b1:20:80:7b:d5:6e:ac:0c:0e:c7:
68:01:e5:db:0d:59:86:8d:64:72:76:a1:54:6d:ef:
c8:fa:35:ec:d7:8d:87:8e:18:4a:7b:0d:a3:52:27:
f2:ac:45:71:cb:21:c7:1d:25:80:da:fd:af:95:23:
eb:82:9b:56:2b:28:f1:b2:4c:a0:75:96:38:eb:95:
89:65:32:41:e3:f4:fa:80:1f:39:67:7c:20:97:46:
34:b8:29:3c:14:38:26:9e:bd:cc:14:5f:ab:6b:7e:
f0:74:f3:35:05:ec:f7:68:cb:66:e8:6b:c7:76:a0:
d5:35:3c:dc:2c:87:04:12:ae:27:7c:28:ad:c4:eb:
34:84:8a:c8:84:1a:21:ff:4f:de:5b:e0:33:be:4b:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:77:AB:B6:A8:41:C8:76:71:0C:C6:84:7F:D8:1A:9E:CB:D6:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A90139AEDBD11EE88AEE35A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
90:aa:85:df:7d:4e:77:5f:7d:be:29:f1:73:b2:71:ed:64:98:
62:78:e5:40:7d:6d:9c:29:87:81:a1:79:08:db:5c:a1:e3:34:
27:d2:59:1b:ff:e9:07:b2:c7:f1:90:17:aa:83:0b:bd:f3:f3:
54:6c:3a:55:32:5e:5b:95:e7:a2:ab:d9:c6:6e:3c:dd:22:1e:
17:be:91:9b:d6:e8:86:a8:c0:b6:26:04:6d:39:04:0a:67:02:
71:d0:f0:96:9b:23:12:87:bb:5b:0d:14:f1:ae:bd:1a:71:1f:
a4:c6:04:6d:5c:d9:b6:a9:b7:e1:85:7d:8c:49:a4:61:a7:10:
08:cc:22:c3:ee:27:14:e5:85:e8:42:76:e7:5c:b2:c7:66:ca:
02:e2:a0:32:f4:70:c6:54:07:29:ed:04:a6:31:f4:60:2d:df:
e4:d0:d9:c0:b9:9c:6b:44:bc:4e:96:c7:f6:b8:d6:3a:67:07:
8b:dd:ec:f6:38:e7:1b:6c:b7:1c:d5:4a:0c:75:b4:40:23:50:
4e:9d:16:32:09:31:8f:a9:4e:e0:57:01:b6:d9:e9:be:cf:2a:
5e:6e:b5:56:e9:12:74:66:cb:0e:e4:c3:ab:e4:3e:46:e6:cf:
cb:2b:7d:8f:0c:9e:e7:1a:29:b8:23:a9:5f:37:1e:9f:34:7e:
d3:d9:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:26:58 2024 by rpki-client on console-ams.rpki-client.org