Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6397C770FE2411EE86F1AA3E017001B1.roa
File: 6397C770FE2411EE86F1AA3E017001B1.roa (raw, json)
Hash identifier: ZBxogaoV2i9Hw/m4TeO5e0T+WfnT09RxR4e8GKN/P/s=
Subject key identifier: 46:6A:07:2B:24:EB:E2:8A:6B:C8:9B:CC:BC:66:7D:B8:00:D0:B6:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6397C770FE2411EE86F1AA3E017001B1.roa
Signing time: Fri 19 Apr 2024 08:11:14 +0000
ROA not before: Fri 19 Apr 2024 08:11:10 +0000
ROA not after: Mon 29 Apr 2024 08:11:10 +0000
asID: 5065
IP address blocks: 154.84.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44654 (0xae6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:11:10 2024 GMT
Not After : Apr 29 08:11:10 2024 GMT
Subject: CN=66222722-c7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:da:56:31:eb:7f:84:7e:16:85:a7:c4:44:
0a:36:fc:e1:9f:d8:14:02:dd:44:3b:1e:b8:23:cc:
07:50:84:ba:56:b0:08:b1:98:e6:f8:0a:ca:08:37:
5f:41:5b:84:a7:8c:e9:ba:30:55:79:4e:0a:b4:63:
bd:57:fd:a6:a6:fb:c0:54:c4:1c:eb:aa:8f:ec:68:
a3:50:6f:65:97:44:68:50:d0:44:5c:81:5b:d2:2b:
76:38:78:44:a8:2e:90:64:50:dc:96:95:24:bb:5f:
44:f0:15:05:e1:c6:80:e1:db:18:b1:67:71:a0:63:
9c:dc:62:01:70:b9:3a:d6:8a:f8:a1:e9:55:73:ec:
d0:00:46:3a:d9:e1:db:a6:02:37:24:a9:85:53:6c:
33:66:d7:1a:16:af:82:70:b8:04:b1:ad:a3:9e:0a:
80:c4:d5:7b:f4:02:a7:f3:59:1a:94:0a:95:8b:a0:
7a:00:dd:b4:ce:27:c6:92:e0:68:cb:7f:36:d4:1f:
3e:f2:3a:dd:af:3e:d7:25:52:4e:e2:90:ec:d8:90:
90:15:5e:6d:1c:da:1a:18:e9:41:99:be:12:e5:7b:
bd:e7:d6:69:a5:2e:d8:c5:79:f9:c4:8f:7b:8c:aa:
04:29:22:67:d1:cf:8a:0a:d8:87:df:e3:09:e6:c7:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6A:07:2B:24:EB:E2:8A:6B:C8:9B:CC:BC:66:7D:B8:00:D0:B6:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6397C770FE2411EE86F1AA3E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:2b:48:8f:7a:85:54:8d:c7:13:3b:11:c6:4a:ea:ef:25:60:
87:30:00:8d:13:54:c1:8d:39:49:c3:63:3a:e7:a7:48:59:91:
d9:98:01:a5:65:35:a2:b7:45:ed:e8:d5:37:2a:3e:bd:5f:86:
99:53:f8:b4:83:a8:e4:58:80:66:d3:41:af:d5:0d:2b:09:0c:
f7:6b:b2:dd:be:1a:9b:e6:8f:6c:7f:3c:5a:e1:0f:f9:e2:21:
57:bb:02:b3:f5:12:cc:a3:82:a5:6a:22:ce:39:ae:a0:ce:80:
94:f3:5b:95:ea:e5:75:4d:1c:18:41:9c:f6:a1:f6:e4:58:cb:
33:ff:1e:07:cb:c8:4f:eb:03:46:e9:98:80:9e:74:57:99:ca:
b9:d2:2c:b2:af:cc:19:36:b5:b4:ba:79:48:5c:33:94:ac:b9:
b5:3a:e1:14:9b:75:98:02:36:85:d3:37:63:52:df:7d:46:0f:
3a:fa:91:ec:34:0a:14:38:17:13:bb:a1:03:f1:d4:56:c5:b0:
6e:b4:63:0d:6f:74:06:42:12:2b:5f:a9:58:7b:05:a7:d4:c0:
c6:de:57:b7:7e:6e:0f:31:be:18:b2:25:d3:45:c4:ba:80:3a:
78:23:29:ff:63:1e:f1:9b:3a:a8:7f:06:19:84:7b:2b:78:01:
4d:64:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:24 2024 by rpki-client on console-fra.rpki-client.org