Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E99BA62E7EC11EEB2B96951775412E6.roa
File: 8E99BA62E7EC11EEB2B96951775412E6.roa (raw, json)
Hash identifier: Q3ie2PIJ2iuQ6nr4NAYJLAuZFDBxXupsr2F7S1MCwOw=
Subject key identifier: 70:1F:F4:BF:87:3B:B6:A0:74:B4:57:2D:BB:5C:60:53:4F:69:72:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E99BA62E7EC11EEB2B96951775412E6.roa
Signing time: Fri 22 Mar 2024 01:36:09 +0000
ROA not before: Fri 22 Mar 2024 01:36:05 +0000
ROA not after: Wed 24 Apr 2024 01:36:05 +0000
asID: 272854
IP address blocks: 154.194.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42490 (0xa5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 01:36:05 2024 GMT
Not After : Apr 24 01:36:05 2024 GMT
Subject: CN=65fce088-e1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:3a:97:38:36:4b:fc:6f:62:41:f2:73:96:
f0:ac:09:cb:24:89:49:7f:5c:05:bc:47:a8:ab:87:
3a:88:59:14:af:26:9c:22:df:73:af:2c:01:71:44:
49:9b:85:d0:b8:f8:b3:b2:06:41:1b:25:a7:a6:4e:
e8:47:75:b4:03:f3:de:7e:87:df:51:a2:54:d6:92:
56:cc:f4:94:10:19:40:38:d4:0b:6d:f8:0d:fd:2b:
96:52:8e:a3:a7:03:6e:7d:3e:92:1a:e6:0e:ce:21:
ea:12:7a:12:a4:3a:f6:cf:b6:b8:c6:97:5e:35:2c:
d2:7a:35:ac:65:95:1e:ea:8f:c3:3a:4b:5c:e2:d1:
89:c2:d4:ca:2b:ae:6d:c4:8a:eb:d3:7f:c1:c9:3f:
01:6c:74:ec:7e:83:e9:1a:c5:03:34:69:72:86:63:
b8:42:b1:6c:0f:05:db:38:a9:e2:6a:03:1e:cd:40:
80:52:ba:0b:3d:c2:3d:0d:e2:c4:df:fc:4a:29:f7:
19:9a:cd:ff:c0:bb:38:e8:a9:89:15:ed:16:87:67:
f8:f2:d8:1c:77:4f:01:25:5d:da:dc:72:7a:c9:56:
19:85:13:f0:99:42:4b:fb:f2:33:39:25:30:4f:bb:
45:5d:63:cd:c6:fa:db:0d:35:fa:12:3d:4b:bf:cb:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1F:F4:BF:87:3B:B6:A0:74:B4:57:2D:BB:5C:60:53:4F:69:72:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E99BA62E7EC11EEB2B96951775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:24:5b:63:7b:b6:ca:8b:5a:9c:e3:3d:96:e7:be:fe:6d:db:
34:ee:4d:eb:3b:7c:de:1e:1b:29:1f:89:d7:89:79:86:bc:eb:
85:1e:d8:6f:57:7f:21:42:42:15:43:c7:c4:7d:ea:e6:75:95:
31:02:d1:fc:31:d2:3a:98:f7:c6:59:e4:18:0c:56:e7:43:55:
91:09:6f:c1:74:53:c2:95:86:da:06:4e:8a:11:b0:b3:ae:8c:
28:ae:23:b4:c9:b4:f3:a8:b4:41:df:cc:f9:1f:db:2d:95:c9:
de:4a:a5:de:75:39:91:29:18:50:77:f3:48:f1:69:74:33:5d:
aa:c0:31:fb:8d:c3:9b:6a:50:f4:0c:18:b7:40:98:e2:e5:38:
25:da:71:82:62:11:09:53:ad:2a:34:e8:0d:a2:0a:89:bc:78:
7b:8f:60:b2:aa:b6:34:fe:52:eb:d0:30:32:ad:6f:d6:0c:5d:
bc:74:20:72:62:f9:1f:22:a5:87:a0:21:38:08:fc:e5:8a:7a:
cc:63:37:1f:ff:4f:dd:88:6c:d7:fa:3d:a8:fa:7c:03:4c:e9:
55:75:78:f5:a6:b4:02:a8:c7:0e:ef:b1:4a:cf:c3:23:ee:37:
a7:92:58:48:5f:e8:68:4a:db:10:6e:b0:a4:08:ad:ab:87:2f:
97:55:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:43:07 2024 by rpki-client on console-ams.rpki-client.org