Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CE3DFBE038911EF8F2BC93B017001B1.roa
File: 8CE3DFBE038911EF8F2BC93B017001B1.roa (raw, json)
Hash identifier: LCP1tt7Rw0vICIEOz4CPwBCcMIzfjCwOPFcbFeQBJbQ=
Subject key identifier: 68:36:A0:AF:E2:FB:A3:31:1D:A6:6D:68:7D:BE:57:E2:7D:98:A5:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B174
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CE3DFBE038911EF8F2BC93B017001B1.roa
Signing time: Fri 26 Apr 2024 04:57:58 +0000
ROA not before: Fri 26 Apr 2024 04:57:55 +0000
ROA not after: Sun 05 May 2024 04:57:55 +0000
asID: 139646
IP address blocks: 154.221.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45428 (0xb174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 04:57:55 2024 GMT
Not After : May 5 04:57:55 2024 GMT
Subject: CN=662b3456-fae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:54:5d:07:fd:77:fd:c0:14:e9:bf:3c:d1:
76:c7:b6:fc:7a:3c:11:96:c3:bf:24:6a:46:e3:01:
a8:b0:45:ad:ee:c8:d1:ae:24:d4:d8:ea:91:1a:c2:
a3:1b:ac:4d:0f:24:6b:3c:cc:81:ac:b5:85:66:ed:
ff:e2:91:4f:4d:c4:83:4d:03:97:b8:02:b8:e3:32:
70:4c:8d:e8:34:51:20:ba:36:29:a8:fa:22:6a:cd:
f5:fe:af:46:c7:3c:f5:57:ff:a6:e6:8b:3d:f9:73:
32:a3:51:f9:a3:f4:9e:31:b4:8e:84:2f:a2:ea:e5:
0b:c3:22:8b:96:22:fc:e7:73:5a:08:0f:1e:b0:6f:
7b:94:51:1c:41:b1:f8:aa:2f:2a:33:d3:2b:7a:e2:
83:cf:fe:14:41:87:4d:61:b9:57:5e:71:16:29:f1:
91:bc:8f:ff:cb:9e:2f:e8:f7:ca:fb:af:8f:11:ac:
28:cb:93:48:78:40:72:76:4e:ed:a4:a4:95:7e:68:
82:d8:5c:1a:21:ab:60:1d:c8:0b:0c:a5:1f:06:6d:
9a:8a:bc:c5:cb:f3:c2:c6:f5:b8:b6:f6:f3:ea:2b:
29:df:8c:36:2f:c0:a6:5b:e2:c4:f3:b8:0f:62:34:
23:c5:01:93:e5:19:de:78:42:cb:a2:08:3d:c9:47:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:36:A0:AF:E2:FB:A3:31:1D:A6:6D:68:7D:BE:57:E2:7D:98:A5:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CE3DFBE038911EF8F2BC93B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
07:4a:85:c8:53:c7:28:21:17:04:c9:97:f6:83:1b:b2:86:c1:
39:6f:b2:7d:73:d5:31:ed:03:e7:37:f6:4f:61:0b:3a:7d:9b:
2e:c4:f1:9f:68:34:1b:be:66:b5:20:ec:58:71:be:e0:ef:07:
04:c0:04:d9:8d:6f:06:7b:e8:e9:c1:78:87:ce:6e:31:63:03:
ab:f7:a7:55:18:dc:b1:27:9f:e5:3e:fd:d7:3b:b9:25:80:ef:
56:9a:6f:a9:04:f9:c3:ec:53:d1:eb:3d:98:2c:85:84:3f:ae:
fa:53:d7:8f:09:31:8f:48:c3:a8:ea:77:ac:ff:8e:fc:24:79:
3b:29:45:82:88:ea:2b:c0:9d:91:b7:aa:14:ce:91:b0:6c:1c:
cc:5a:e9:e9:94:23:b7:6c:4a:5e:dc:ab:b8:a2:86:ee:a3:1f:
0d:27:df:1b:9d:99:a0:c0:ad:e4:fe:3e:ac:9c:10:0e:33:82:
fe:71:47:17:ff:3c:3e:e5:db:ba:79:8c:ed:89:85:09:b6:5a:
81:12:0a:1c:f6:0b:4b:10:f9:ff:75:b1:93:40:2a:b2:63:8a:
6a:dc:b0:61:1a:e3:ed:e8:3a:74:5e:9a:be:17:e0:9f:73:57:
88:3f:5f:9f:a4:bf:ee:4d:21:4a:ad:d8:3c:78:5f:c3:c4:f9:
3c:08:02:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:24 2024 by rpki-client on console-ams.rpki-client.org