Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/885906C4FD3811EE8DB38141017001B1.roa
File: 885906C4FD3811EE8DB38141017001B1.roa (raw, json)
Hash identifier: foTlR+bD1I1jGhOVO+9izIZJPWRJDSS+7p+nKUcXKcQ=
Subject key identifier: B3:34:C8:7C:AB:A1:B5:6E:8C:86:E7:E7:8C:10:E0:BC:58:2E:30:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/885906C4FD3811EE8DB38141017001B1.roa
Signing time: Thu 18 Apr 2024 04:02:54 +0000
ROA not before: Thu 18 Apr 2024 04:02:51 +0000
ROA not after: Sat 27 Apr 2024 04:02:51 +0000
asID: 7018
IP address blocks: 154.90.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44555 (0xae0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 04:02:51 2024 GMT
Not After : Apr 27 04:02:51 2024 GMT
Subject: CN=66209b6e-9029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:7c:fe:4e:ed:e6:11:6d:56:e3:c6:b1:c1:
3d:06:e1:c6:08:ca:76:47:3a:81:af:17:5e:06:e9:
49:75:7e:4b:cb:ea:a3:e2:b6:b5:53:0b:8b:ee:21:
b8:07:34:59:62:74:45:7f:7d:2b:98:b1:0f:d9:00:
93:cd:27:42:76:24:92:cc:47:91:79:35:5a:84:31:
86:f6:1d:45:4b:c7:dc:5c:01:79:39:3b:ff:10:d2:
7a:55:b1:6a:ed:08:29:5d:e2:a9:ea:bf:4b:c1:3c:
e2:05:55:f8:c3:1d:e0:ad:82:ae:65:af:20:2f:d2:
39:cc:19:cf:70:60:7f:e9:c9:a5:01:d6:1c:7b:40:
3b:67:5c:5b:99:f5:79:0b:fd:a7:19:4b:71:5a:3f:
27:96:35:f5:d6:54:b0:c4:1f:4f:5f:9a:94:9c:e8:
7f:3d:e3:ad:85:cf:83:0d:66:1f:7d:4f:2a:12:66:
0d:36:28:3d:66:94:54:88:6e:79:d0:20:0c:d3:9a:
d6:2b:58:e1:19:29:67:6b:1f:12:3f:17:05:7c:62:
0b:32:2d:a5:e6:eb:1f:af:73:88:84:53:c0:5e:14:
5c:31:6d:51:e8:1d:fa:d6:74:be:ae:2c:a6:de:2a:
8c:41:7f:c9:51:63:a3:c9:11:10:ed:b1:d0:d7:28:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:34:C8:7C:AB:A1:B5:6E:8C:86:E7:E7:8C:10:E0:BC:58:2E:30:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/885906C4FD3811EE8DB38141017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.8.0/21
Signature Algorithm: sha256WithRSAEncryption
60:49:06:38:6e:7c:85:03:e4:db:c4:58:45:38:14:d9:9d:8e:
a3:1b:d3:bc:53:25:bc:8c:b9:76:7e:e3:72:d8:0a:4b:80:6f:
83:a5:db:c0:23:88:87:2b:93:a9:65:de:fb:be:e9:13:d0:44:
fb:9b:cd:ee:b4:52:47:cd:00:ab:b0:b2:c0:d5:8a:04:28:ad:
04:a7:04:92:2a:5c:01:4b:97:87:70:44:44:89:ca:72:4a:a6:
db:db:eb:ff:66:0a:e5:ad:e8:66:38:90:c9:83:51:8c:ca:ef:
af:1b:a1:2e:31:e8:65:f9:7c:32:3d:4c:f2:9b:a6:27:ad:55:
46:c1:9d:62:d0:db:e0:91:db:94:c1:21:12:da:3f:c2:b5:53:
a4:cb:48:40:3d:88:4e:48:d8:c1:00:7e:b9:e2:8f:95:a8:75:
c6:50:74:d1:fd:ac:f8:4e:25:c8:35:fa:d7:c2:de:01:9f:48:
37:3c:b7:e5:95:a0:91:a1:98:a6:6a:92:d3:96:03:7a:6d:18:
3a:75:e4:d3:47:50:de:a9:d3:3b:54:32:55:22:a7:06:d8:83:
4d:0f:9b:a8:f5:28:19:ab:db:38:25:eb:a1:7a:f5:d1:a6:7c:
35:b9:c4:77:f5:5c:c0:7a:ef:66:7f:76:02:7a:92:00:3a:4e:
96:40:56:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:14:06 2024 by rpki-client on console-ams.rpki-client.org