Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/692595441A2E11EEB2F3D26A4AD9E6FC.roa
File: 692595441A2E11EEB2F3D26A4AD9E6FC.roa (raw, json)
Hash identifier: A9hhiNHwfBQTFrxvTJVzy+9YQf/P93KJMdZNY7pxb2Y=
Subject key identifier: 5A:DF:FF:5E:76:4A:4E:AA:02:B1:20:32:CF:15:BC:47:83:31:38:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2FE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/692595441A2E11EEB2F3D26A4AD9E6FC.roa
Signing time: Tue 04 Jul 2023 05:48:33 +0000
ROA not before: Mon 28 Aug 2023 05:48:29 +0000
ROA not after: Thu 25 Apr 2024 05:48:29 +0000
asID: 28458
IP address blocks: 154.212.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12261 (0x2fe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 05:48:29 2023 GMT
Not After : Apr 25 05:48:29 2024 GMT
Subject: CN=64a3b2b1-2244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:23:9f:4f:14:4e:23:e5:ec:ca:44:c5:40:
98:95:26:ee:cf:b8:74:6d:79:ed:e4:9d:ac:1c:54:
28:72:1a:c1:fc:3d:75:0d:5d:63:92:99:8e:9f:68:
61:57:0d:cf:02:f7:76:6f:ee:56:9d:7c:33:e5:0d:
ac:b1:ec:50:3f:4a:75:e6:22:37:96:21:0f:be:36:
81:69:18:da:bf:b9:fd:ee:a5:2a:81:6e:9c:34:f6:
01:da:82:f3:6b:8d:9e:bd:20:33:fe:0b:f7:5b:88:
57:cd:a2:f2:bc:c7:35:f8:89:7d:42:91:e4:d3:d4:
43:93:64:a4:0a:a5:5e:fb:3e:42:f6:16:c6:83:09:
f7:03:e6:b0:44:c3:6c:67:f2:70:89:1a:94:7f:9c:
ed:a0:54:d3:52:3d:a1:27:bf:d4:5e:67:9a:2d:97:
9b:75:b3:dd:e1:a1:59:cd:ba:63:5e:2e:0b:89:44:
17:ba:51:e6:23:5d:80:94:4b:25:c9:1b:2d:b3:42:
7c:dd:d7:94:aa:71:c4:61:b1:b2:04:eb:7d:06:c4:
6e:04:a5:10:3d:5e:18:b5:ce:6e:52:56:4e:5b:2a:
c7:e6:82:06:ca:0a:6f:76:3f:51:21:89:6a:64:28:
ea:64:48:fe:78:ac:e2:62:51:b9:58:ba:55:c9:90:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:FF:5E:76:4A:4E:AA:02:B1:20:32:CF:15:BC:47:83:31:38:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/692595441A2E11EEB2F3D26A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.5.0/24
Signature Algorithm: sha256WithRSAEncryption
47:51:a6:97:6c:20:20:67:00:a9:a0:bc:b6:7c:e8:8d:2f:97:
6e:86:4c:ec:d4:d4:85:ef:2c:16:8e:57:2d:e7:e3:eb:d0:46:
70:ee:4f:1f:a5:7b:11:96:3a:9b:5e:6f:c7:ff:9a:44:f7:5d:
9e:ba:31:c0:df:40:ab:32:cb:a7:e6:82:f1:c6:fc:40:50:cb:
c7:c4:20:7d:5b:63:32:45:ef:47:eb:d9:ef:a6:80:7f:0d:10:
60:57:55:ce:76:8e:32:fc:41:5f:3a:2f:c3:53:04:59:d8:05:
dd:44:e6:9a:ad:fb:a0:a8:00:2b:93:af:9d:33:eb:24:bf:16:
91:92:cc:ef:62:00:c1:b1:60:d7:c3:a2:d1:1d:a3:12:1d:ec:
4f:c4:11:9a:4f:cf:85:0d:17:2e:f5:ca:ca:b6:ba:32:e0:37:
d3:da:51:07:32:04:0d:47:7f:52:1c:70:23:9f:ca:6b:c5:3c:
03:85:7b:1a:2f:7a:98:97:b6:a2:5a:5b:c4:00:fa:6d:54:97:
ff:e6:07:6d:f4:70:57:ed:6e:e1:e2:4e:1a:31:1b:d5:21:ae:
0f:5a:28:41:08:bc:a3:57:61:13:79:5e:5a:e1:93:a1:2e:bf:
50:45:f0:22:21:32:53:99:8f:20:97:1d:ad:ae:fe:9c:db:69:
e6:cb:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:10 2024 by rpki-client on console-ams.rpki-client.org