Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567351ECF0C611EEA881AC9C775412E6.roa
File: 567351ECF0C611EEA881AC9C775412E6.roa (raw, json)
Hash identifier: XTWhfHT+cm9kLSmvRN4fy6aap7yZy5y8EAh2P2NW1Bg=
Subject key identifier: 1D:7C:F6:CF:3B:3E:F5:A2:02:26:B7:65:1E:E2:D0:A1:F8:9C:A9:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A8CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567351ECF0C611EEA881AC9C775412E6.roa
Signing time: Tue 02 Apr 2024 07:55:14 +0000
ROA not before: Tue 02 Apr 2024 07:55:10 +0000
ROA not after: Mon 29 Apr 2024 07:55:10 +0000
asID: 139646
IP address blocks: 154.218.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43213 (0xa8cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 07:55:10 2024 GMT
Not After : Apr 29 07:55:10 2024 GMT
Subject: CN=660bb9e2-6e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:02:79:69:a2:c6:51:6e:29:09:f9:25:5a:
b4:1b:e7:79:90:24:b4:b9:80:77:00:4e:2e:1e:6e:
35:1f:70:51:21:a9:4d:24:45:e7:8c:08:90:97:88:
a1:06:9f:b7:af:70:d7:8a:d2:04:d8:ee:08:33:34:
47:4c:1f:6d:52:d3:3c:8f:42:86:64:2e:3c:b7:b7:
06:74:7a:fa:ef:4b:e2:52:57:9d:63:e9:f3:cd:1f:
16:d5:9e:c4:bc:f4:98:f1:b8:17:81:7c:34:2a:4d:
9e:a4:9b:a9:37:4a:2e:33:36:77:e6:b3:da:e7:38:
f5:2f:54:40:e5:5d:f3:6a:76:a5:98:0b:0c:59:cd:
f7:6a:c9:d6:95:53:a2:4b:88:ea:5e:78:7c:40:f1:
4a:74:b9:ef:1e:cd:08:28:df:9a:2f:02:34:00:fa:
ea:fd:cf:4e:32:a0:27:18:dc:e5:23:ba:a7:41:e7:
dc:f1:5b:b2:04:16:8c:f2:0a:dc:4b:1e:80:dc:0b:
a7:1c:b1:0a:fc:16:79:67:49:a2:aa:82:88:60:63:
31:e7:df:fa:0c:ba:bf:f7:26:82:62:f6:70:53:e9:
04:bd:3d:38:94:af:dc:51:02:42:c4:a1:e6:d6:08:
70:4c:65:8d:dd:ae:b0:51:cf:7a:0d:b5:6c:29:b2:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:F6:CF:3B:3E:F5:A2:02:26:B7:65:1E:E2:D0:A1:F8:9C:A9:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567351ECF0C611EEA881AC9C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.0.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:1b:5e:c2:c8:9d:ab:9e:f0:c3:2a:e8:74:4c:93:db:ab:6f:
9f:cd:b8:66:c0:fc:11:02:88:b1:89:44:e1:e2:62:c8:3b:4f:
a3:23:aa:18:35:3b:44:c0:08:90:fb:42:de:8f:f0:8c:05:d7:
c6:d1:a2:a7:0d:5a:b1:2d:8b:30:53:c3:60:80:f7:50:a8:1c:
02:a9:51:80:0b:ac:b5:d0:ee:a8:eb:ac:ff:04:c1:b6:1d:21:
66:a7:03:0d:0a:a2:c1:e8:ea:b3:f0:1c:4e:b3:9a:29:27:b5:
c4:f6:18:1d:37:8a:92:e3:73:35:c6:9f:03:ef:ee:4c:a9:2f:
e1:7e:77:5f:d5:71:56:ba:fb:01:43:78:ee:47:7e:d9:f0:ba:
92:d6:d8:c5:78:cb:ce:b9:95:35:e0:4f:9d:98:64:78:a1:81:
9d:35:e4:7e:bb:10:db:a5:4a:43:41:f2:ff:f0:7b:7c:c1:60:
72:67:62:bd:da:5d:c4:00:04:7a:3e:76:1f:b8:2b:fa:84:2d:
67:f5:36:30:79:69:f5:d0:66:f3:74:37:80:fb:36:19:f2:86:
80:a5:59:0c:41:7c:5b:65:27:2f:ae:56:00:12:93:d7:03:b5:
9e:a2:0c:3d:16:c1:02:ca:05:0f:69:5d:e3:88:a2:48:de:e7:
63:d6:ef:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:00 2024 by rpki-client on console-ams.rpki-client.org