Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/413E3CBAE78911EEA34A944D775412E6.roa
File: 413E3CBAE78911EEA34A944D775412E6.roa (raw, json)
Hash identifier: 15bJT8/KTKeGw1VPl4Rl48P8WE262bNO09elCLomr0o=
Subject key identifier: 5C:8B:9B:6F:DE:D8:95:47:0F:74:CA:B1:61:F1:4B:DC:E2:93:53:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/413E3CBAE78911EEA34A944D775412E6.roa
Signing time: Thu 21 Mar 2024 13:45:19 +0000
ROA not before: Thu 21 Mar 2024 13:45:12 +0000
ROA not after: Thu 25 Apr 2024 13:45:12 +0000
asID: 5065
IP address blocks: 154.206.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42437 (0xa5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 13:45:12 2024 GMT
Not After : Apr 25 13:45:12 2024 GMT
Subject: CN=65fc39ef-9659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:34:11:66:df:94:54:d9:cc:cc:8d:42:b4:
bc:fd:9c:83:76:ca:b3:31:0a:0f:52:0b:f7:7a:b7:
2c:d3:59:ec:d4:56:4b:cc:f9:e2:c7:11:3a:27:f7:
cb:ce:68:ed:3d:40:70:e9:1b:33:e5:65:23:57:e5:
ff:eb:f6:45:ae:db:2c:a1:2a:7e:81:e4:ed:a7:38:
af:c5:9c:dc:eb:59:9d:79:67:cd:18:c5:f3:b5:c1:
cd:3b:7a:fd:e8:d1:bb:56:72:1c:75:e5:0e:96:80:
7f:a8:34:b0:67:4e:ba:b7:07:71:07:8b:8d:c8:6b:
d7:f3:d6:f9:66:ff:2f:32:aa:e7:09:47:f6:db:c6:
fa:ef:2b:48:1e:b9:fa:5d:79:5c:5d:a9:a2:0c:ef:
5c:ea:1b:b7:ae:36:8a:f3:fa:71:39:dd:8b:96:ac:
6f:ef:fa:2b:4b:92:18:c9:33:62:30:ec:c7:5f:0a:
aa:99:52:35:d4:1f:1d:4e:7d:4c:d1:7f:5b:6b:c2:
4f:98:87:0f:2a:7b:65:35:da:78:8b:96:e2:cb:7d:
3c:95:a5:d0:73:c3:2f:08:e7:32:ca:6e:09:09:3c:
aa:59:40:4e:15:a4:d0:ac:de:74:80:11:da:e4:43:
6f:8e:10:e4:2f:a0:f1:19:aa:bb:69:61:cd:a3:32:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8B:9B:6F:DE:D8:95:47:0F:74:CA:B1:61:F1:4B:DC:E2:93:53:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/413E3CBAE78911EEA34A944D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.35.0/24
Signature Algorithm: sha256WithRSAEncryption
25:dd:16:3e:23:7d:10:86:bf:8e:da:3c:68:54:20:a0:62:0c:
aa:89:e5:da:73:a1:17:62:1c:3c:d6:ea:ab:66:1f:08:10:c7:
ba:45:c0:c9:76:92:31:f4:38:28:75:e0:3a:07:08:94:78:18:
19:01:91:8e:8a:b5:97:ca:a7:a7:b2:6e:ff:3d:89:3c:a1:5a:
91:3e:ee:6e:f3:0b:75:62:cb:80:ac:5a:fa:86:53:65:11:1a:
a9:57:0b:8a:40:a6:6d:1d:42:e4:25:ed:72:8a:7c:f5:ce:ad:
37:9a:b8:fc:80:65:53:7a:27:2f:c6:64:23:99:20:ff:e3:b5:
05:f4:d9:fc:15:00:c4:26:05:09:05:2b:76:10:80:41:9d:bb:
c6:f5:04:27:e1:c1:8d:d1:2c:ec:5d:f0:3e:ca:ff:ac:26:db:
08:28:b0:08:c0:c6:23:a8:59:df:d7:17:d7:44:2a:ee:e8:95:
97:11:e2:e3:de:8b:f4:be:98:5a:b5:a6:0a:c0:45:2a:e4:7d:
71:5d:5a:30:32:6d:20:d7:8b:dc:53:db:92:0a:9b:f1:f7:91:
15:2a:1e:35:6a:3b:56:09:2e:b5:26:ab:12:e6:b4:89:c1:83:
f9:fb:a8:00:9a:46:be:c7:ed:d3:38:07:bb:69:2f:99:22:9c:
de:5f:84:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 01:59:41 2024 by rpki-client on console-ams.rpki-client.org