Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED5D88ABBE211EEBF228DA1775412E6.roa
File: 7ED5D88ABBE211EEBF228DA1775412E6.roa (raw, json)
Hash identifier: Q11FFao/fHAl6gH5YDmzyOTKzwZGv7zneiBhIyZoO3A=
Subject key identifier: 3A:E7:50:C8:E6:3B:D5:D1:7D:8D:45:2F:D2:AA:46:1F:E8:DC:42:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7D03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED5D88ABBE211EEBF228DA1775412E6.roa
Signing time: Fri 26 Jan 2024 00:33:16 +0000
ROA not before: Fri 26 Jan 2024 00:00:13 +0000
ROA not after: Wed 01 May 2024 00:00:13 +0000
asID: 216038
IP address blocks: 154.86.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32003 (0x7d03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 00:00:13 2024 GMT
Not After : May 1 00:00:13 2024 GMT
Subject: CN=65b2fdcc-924c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:e5:65:c9:c7:20:54:c3:27:f9:cf:34:a4:
a1:13:b1:f3:6c:15:6f:16:1b:aa:49:4f:0d:e5:36:
b4:13:78:94:ef:65:45:70:7c:b1:e2:3e:2b:b0:c3:
a6:d7:d2:d4:66:86:93:55:7e:53:6d:cb:83:aa:fa:
19:14:3b:f3:8e:41:fc:b4:fc:e9:49:86:4f:a4:0e:
d4:f1:94:ff:a4:00:19:84:1e:0f:65:0d:88:f5:bb:
86:f5:ad:97:d7:45:81:01:fa:37:db:e1:ba:b7:30:
5b:04:e6:07:18:74:82:68:ba:d4:3e:27:d3:20:e8:
6b:65:2b:0b:85:83:c3:b0:0e:06:15:8d:dd:02:88:
f5:f1:7c:c3:80:fc:1a:c6:60:65:c0:32:89:cb:c0:
56:cc:2d:b9:91:1b:95:7f:66:25:40:c0:f4:35:24:
97:ba:a1:3a:9a:a5:5c:55:f2:ba:b4:30:1e:6a:ae:
72:6f:1c:e1:07:ef:57:ce:f1:45:b2:c0:fc:a4:41:
e0:c4:fb:dd:b3:54:cc:52:f9:4d:d7:ac:fe:ec:b3:
e4:6f:a8:2e:29:c7:47:80:ca:e4:de:c9:45:f3:61:
92:ea:f1:c6:75:73:71:35:fb:21:3a:5d:19:fa:5e:
91:19:39:4b:2a:1c:98:c4:cb:9d:3e:70:7a:16:c8:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:50:C8:E6:3B:D5:D1:7D:8D:45:2F:D2:AA:46:1F:E8:DC:42:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED5D88ABBE211EEBF228DA1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e9:2a:26:9a:af:83:64:54:17:7f:bf:19:00:6f:31:60:00:
b9:e7:a1:5d:09:c4:2d:b8:31:97:29:74:28:d8:57:71:32:39:
4a:8e:7c:d2:d7:ee:57:b3:f0:30:e5:72:bc:c1:6a:79:9b:f6:
50:4f:07:15:c2:86:9c:e4:01:6b:bd:da:40:ee:94:36:23:dd:
5d:1c:d5:13:e7:89:73:75:e0:8d:79:de:bc:da:73:11:92:64:
2a:98:a0:06:af:48:85:7d:62:e3:8c:b5:cc:c0:8e:d3:db:fb:
8a:fb:cc:9b:de:2f:17:f8:50:ea:6e:a3:e6:f6:70:24:fb:e3:
c0:69:70:e0:d3:d9:aa:41:24:1c:81:a3:8a:2f:de:23:f7:01:
e4:a9:5f:eb:d6:ca:00:35:14:03:bf:f4:86:e5:d9:46:00:79:
85:fd:0a:4e:69:cb:79:28:18:8e:8a:98:e3:48:c8:8b:ed:37:
e8:ed:db:6c:74:ee:5c:bd:7e:da:35:f1:7b:4f:74:f8:2a:68:
aa:16:54:88:e1:2e:bf:fa:8f:89:c0:d1:17:aa:d6:27:1f:38:
c3:65:d3:13:8d:bc:32:04:69:a6:75:45:5e:62:2f:1c:f9:65:
26:be:ab:69:b8:1c:2e:03:4a:56:0c:9b:9b:44:fb:c9:9d:23:
6b:b9:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org