Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C8272F8FB9D11EEBCEA8627017001B1.roa
File: 4C8272F8FB9D11EEBCEA8627017001B1.roa (raw, json)
Hash identifier: q1LtqpzQTNos4s5yIfkjBWINUXm7Kw73vMz3GQh17gA=
Subject key identifier: 2C:9A:09:BC:D0:DA:AC:37:E1:D3:9D:8F:A2:8E:96:47:A7:0F:49:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C8272F8FB9D11EEBCEA8627017001B1.roa
Signing time: Tue 16 Apr 2024 02:59:11 +0000
ROA not before: Tue 16 Apr 2024 02:59:07 +0000
ROA not after: Thu 25 Apr 2024 02:59:07 +0000
asID: 139471
IP address blocks: 154.215.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44325 (0xad25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 02:59:07 2024 GMT
Not After : Apr 25 02:59:07 2024 GMT
Subject: CN=661de97f-2737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:4c:cc:2a:24:ff:d6:bd:36:34:7e:ce:b6:
a7:a7:63:42:63:9a:3e:2a:09:93:e3:f5:fa:72:2b:
a2:f1:ca:67:76:5e:4a:27:44:7c:38:ad:d6:c3:f0:
ac:e8:ca:a3:96:9a:2e:07:c5:2e:50:66:b5:2f:54:
0e:1d:92:0f:a4:8a:ef:54:7f:99:c2:f6:2d:98:04:
86:d1:7f:a0:e0:c1:88:f5:77:71:c3:1a:88:a7:d1:
0d:ed:85:66:f1:44:37:0c:c3:d1:b0:2d:0c:00:cb:
9f:73:e1:dd:65:f5:cc:00:d3:ee:03:f0:5e:f0:da:
e8:8d:5c:93:af:f8:5f:b0:35:a5:39:91:20:82:37:
e9:51:c2:ef:47:a6:5a:6a:34:d6:45:1e:c1:18:b2:
37:af:e0:06:d1:14:13:f6:12:64:cf:fb:c4:82:0f:
6d:db:f2:87:86:2d:72:dc:86:41:c0:32:4d:c5:55:
11:14:ef:97:83:96:e8:13:eb:2b:c7:41:c8:57:f6:
9f:d9:07:3f:86:71:8c:8a:e0:4e:0c:8c:76:0e:c3:
12:12:56:c5:3c:37:4f:82:2a:14:2c:86:1a:e2:f6:
e5:b8:fb:17:a3:a7:c8:a9:47:fb:d5:b7:e0:0f:4f:
91:15:69:85:9b:51:81:1a:cd:0d:94:ab:76:e8:5a:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9A:09:BC:D0:DA:AC:37:E1:D3:9D:8F:A2:8E:96:47:A7:0F:49:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C8272F8FB9D11EEBCEA8627017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.16.0/20
Signature Algorithm: sha256WithRSAEncryption
58:67:85:c0:79:24:1c:44:67:0c:50:f1:b9:38:d5:ef:4b:37:
ca:da:e3:9a:62:42:cd:b8:0c:38:ae:96:4c:aa:dc:7c:0e:91:
a9:ee:89:4c:ce:4f:d4:65:ed:60:6a:6a:26:73:a2:58:c4:07:
86:aa:30:00:b8:a5:92:e3:09:2b:77:b4:39:d0:34:2d:6e:a5:
54:6c:82:5b:fb:dd:2a:66:75:cb:ff:3d:84:6a:d4:0d:77:85:
cf:e2:ea:99:6c:e2:4d:27:b1:9d:2a:10:68:f9:b7:2f:51:9c:
dc:47:30:a3:1a:81:bf:a4:88:a1:b0:27:2f:2a:4d:53:b2:cd:
8f:47:b7:19:4a:3f:f8:a5:e0:47:9f:36:8a:e4:19:d6:1e:04:
8b:f3:56:eb:50:2c:97:0a:fe:68:0c:a8:3f:90:5e:f0:18:cf:
f7:cb:b9:24:3a:d8:73:1a:09:84:0b:e0:82:62:c0:4f:1b:5b:
b1:df:00:1a:1d:de:89:f9:70:2a:5f:c2:7e:42:17:40:a9:b8:
7e:78:1f:e6:22:fd:af:d0:c1:97:82:ee:80:e1:bc:f3:c2:63:
c5:c9:93:be:86:8f:55:d9:c5:bc:2c:dd:d5:55:bc:9d:6e:88:
c4:41:e3:20:f3:36:91:7c:2f:a3:ab:b4:3e:cb:49:a9:a0:59:
b4:99:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org