Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CDA64F8FB9311EEAB9BF84D017001B1.roa
File: 5CDA64F8FB9311EEAB9BF84D017001B1.roa (raw, json)
Hash identifier: 4dPMlr9g0FpLy30J6vFGLpEU4ezKw7EyvSMM1HN2kkE=
Subject key identifier: 2B:64:25:BC:AB:AF:CB:E2:38:39:F9:68:50:01:42:46:64:A5:AD:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CDA64F8FB9311EEAB9BF84D017001B1.roa
Signing time: Tue 16 Apr 2024 01:48:03 +0000
ROA not before: Tue 16 Apr 2024 01:48:00 +0000
ROA not after: Mon 29 Apr 2024 01:48:00 +0000
asID: 141883
IP address blocks: 154.215.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44277 (0xacf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 01:48:00 2024 GMT
Not After : Apr 29 01:48:00 2024 GMT
Subject: CN=661dd8d3-bb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:42:4d:c1:e8:82:1e:d2:4c:e3:b5:27:03:
ab:d4:f0:fc:3c:ec:5d:43:26:25:63:2f:24:0b:e9:
5b:5c:82:56:80:0f:ab:50:c6:db:2c:7d:f7:fe:b9:
5f:17:4f:db:6a:51:fa:d7:ac:f4:88:d1:91:b4:8b:
7b:90:5b:80:4a:2f:b1:60:c1:f0:f7:35:f0:e0:7e:
59:ae:e2:3e:86:bb:b7:ef:d5:c8:b9:11:35:f1:63:
a0:3e:67:e7:b6:0f:df:e8:4c:0e:81:5e:0b:4c:ab:
e7:27:5e:47:b2:2a:13:6b:5e:19:98:4d:d9:e0:f8:
26:57:f1:ac:ea:52:b9:40:ec:d0:21:f0:76:0a:23:
57:e3:3e:13:d1:b8:93:03:81:4a:b2:09:04:de:87:
f6:42:fd:60:df:c5:82:b3:49:8e:9e:e6:42:d4:8c:
18:a0:8b:42:20:5f:6d:b6:e2:ca:c5:27:68:2b:2c:
b9:32:dc:8d:7b:83:bd:98:13:2c:56:f3:db:8e:8f:
1a:68:e1:dd:d0:d9:c9:3d:7f:0b:f1:d4:47:c8:d0:
78:13:e6:0e:d8:93:12:f5:c4:9d:63:fb:a6:34:52:
41:3a:0a:a8:57:bc:7e:31:09:30:e8:af:6c:03:79:
1a:bc:17:13:2f:bd:be:fe:78:ae:9d:e5:6c:d5:f2:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:64:25:BC:AB:AF:CB:E2:38:39:F9:68:50:01:42:46:64:A5:AD:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CDA64F8FB9311EEAB9BF84D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.0.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6b:1f:62:56:84:97:ff:ff:9f:b5:e4:8c:c3:ea:53:29:2b:
cd:4b:10:57:13:39:00:0c:5a:52:76:f7:9c:1f:2e:bf:5c:eb:
93:51:c4:67:6a:97:89:07:a7:76:64:65:9f:c9:82:ce:59:a2:
8c:bc:9e:5a:6c:7d:e3:22:0c:65:17:1d:79:a8:37:1d:82:15:
81:81:9c:0d:e9:1e:43:cb:7f:5b:11:74:f1:75:aa:b3:bb:ca:
ab:8b:d3:29:45:f6:2e:6f:3d:48:a8:f6:0d:c6:c7:ce:f0:a8:
84:19:b3:5a:13:c9:fb:4c:64:88:56:79:2f:22:26:a6:ca:ed:
84:0d:bb:95:d9:84:be:bf:d3:f1:62:a1:ca:ee:1f:16:86:93:
ea:ec:af:5f:1e:d3:d7:69:19:02:2b:ed:41:60:3f:06:4a:dd:
16:e0:57:a8:d6:6f:46:4e:19:33:6c:62:73:dd:cb:10:ff:99:
9c:41:9e:dd:3d:e1:cb:b5:9f:46:03:56:c0:8c:c1:dd:7d:2f:
93:47:55:45:1f:84:e4:9e:f1:fd:8a:a2:2f:1e:d5:f1:6c:02:
67:49:c2:d6:20:27:2f:ec:f9:97:3a:22:66:31:71:36:17:33:
f1:57:42:30:16:fa:7f:ae:b0:53:2e:8a:c3:30:f1:73:de:b7:
f9:b9:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 03:01:04 2024 by rpki-client on console-ams.rpki-client.org