Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/635D6310A00D11EFB7AC564F762E951A.roa
File: 635D6310A00D11EFB7AC564F762E951A.roa (raw, json)
Hash identifier: fGriKLs4CopYFHAQBp5dugWXDqTqN5ioW9iVrazYfXw=
Subject key identifier: DD:29:92:4B:C5:35:05:0C:A2:1C:97:AB:80:C9:F1:0A:E9:9B:96:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/635D6310A00D11EFB7AC564F762E951A.roa
Signing time: Mon 11 Nov 2024 09:14:43 +0000
ROA not before: Mon 11 Nov 2024 09:14:39 +0000
ROA not after: Fri 22 Nov 2024 09:14:39 +0000
asID: 215240
IP address blocks: 154.216.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68577 (0x10be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 11 09:14:39 2024 GMT
Not After : Nov 22 09:14:39 2024 GMT
Subject: CN=6731cb03-e6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:7f:9f:1e:69:ee:ea:ea:e7:11:18:50:3a:
b7:56:c6:d6:6c:0e:6b:d3:43:89:d9:38:58:a3:bc:
b1:4c:49:ef:8f:26:cc:99:85:20:39:c9:55:fa:33:
d2:73:78:fa:2b:fc:40:94:7f:31:2d:e1:4f:93:22:
3c:a1:b0:66:1d:7d:56:73:14:63:13:92:9d:53:ee:
4c:e2:f4:ec:ec:2f:5f:62:e3:31:07:29:fc:61:91:
8c:3d:18:de:ca:0f:23:0c:e2:29:08:ce:12:38:f5:
18:91:8e:9e:42:04:ca:b5:3c:db:e8:87:1e:98:ca:
e6:c4:72:35:f9:b1:7f:e5:60:cb:ae:d7:2d:89:74:
f4:3e:ea:90:d4:1b:85:6a:86:fd:6b:04:df:15:5a:
11:9f:c7:41:7d:cf:66:c6:f2:7b:99:89:a5:73:3e:
11:67:d4:32:78:37:e8:22:f3:f2:51:ac:9a:e9:f4:
da:67:22:8c:c5:cf:c9:84:58:8e:01:c2:7b:88:09:
20:27:f9:92:2d:f9:7d:99:76:05:68:f7:9b:63:2e:
f6:ac:32:76:4b:18:dc:90:49:83:4b:c2:b2:dd:ec:
65:e2:66:65:7b:60:da:b6:b1:f4:55:f3:f5:e0:c4:
ab:fd:9f:fc:4b:16:bb:ae:a6:e0:6b:89:79:86:2f:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:92:4B:C5:35:05:0C:A2:1C:97:AB:80:C9:F1:0A:E9:9B:96:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/635D6310A00D11EFB7AC564F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:bf:9d:58:fc:1f:a1:d7:3e:f4:fb:3e:1a:0c:62:63:52:fd:
34:41:22:07:d2:df:14:49:ed:c1:c0:ff:fa:be:51:e9:16:a7:
ce:7d:61:90:74:c8:1f:76:ad:dc:6c:b5:a9:14:fe:f5:42:96:
32:90:03:d0:ee:87:fe:09:37:4e:1c:c9:dd:4a:89:14:27:48:
44:52:42:43:49:b3:1f:e8:b1:0a:15:f4:36:e8:6f:48:23:61:
cb:d7:7a:bb:b6:af:f7:3d:fc:07:9c:6e:f2:c1:0c:a4:61:6a:
02:ef:2c:3f:6e:d7:50:df:f8:54:f8:9f:68:0e:90:e7:90:50:
76:35:74:98:3b:7f:7e:18:2a:f5:7b:74:25:24:56:fa:60:b8:
0f:92:75:53:97:8f:0c:c9:19:63:95:84:aa:47:97:20:1e:9c:
a9:49:f1:84:07:70:aa:38:38:51:f3:2a:0d:85:e9:d7:7c:98:
4a:ea:50:59:22:71:c1:20:e0:58:c7:4e:0c:d8:d4:2c:d9:45:
99:35:2a:37:c3:b1:32:b5:31:34:e1:15:a0:8e:7e:31:c2:20:
e7:36:41:94:50:3f:23:9e:c6:63:05:33:18:8c:ee:75:28:b7:
7e:9f:4b:ea:67:8a:2a:b2:f9:e3:c7:b2:3b:36:8d:95:0b:9f:
69:cb:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:20:26 2024 by rpki-client on console-fra.rpki-client.org