Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACF709A0F0C611EE849DC1A0775412E6.roa
File: ACF709A0F0C611EE849DC1A0775412E6.roa (raw, json)
Hash identifier: xDYoujeCwfqEvZbl/5bVVzc6xgHAWGbUy+wkYHlZSvo=
Subject key identifier: A7:27:C0:F5:99:AB:15:7A:49:42:C9:69:86:1D:E2:C7:2A:72:A0:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A8D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACF709A0F0C611EE849DC1A0775412E6.roa
Signing time: Tue 02 Apr 2024 07:57:39 +0000
ROA not before: Tue 02 Apr 2024 07:57:36 +0000
ROA not after: Mon 29 Apr 2024 07:57:36 +0000
asID: 139646
IP address blocks: 154.215.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43217 (0xa8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 07:57:36 2024 GMT
Not After : Apr 29 07:57:36 2024 GMT
Subject: CN=660bba73-688e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:80:93:0f:57:81:5e:6d:11:90:0c:6b:2c:
b6:ce:32:84:cb:ed:ac:11:33:6d:9e:fb:25:6a:83:
55:8a:44:a0:45:df:ad:ea:6d:ee:25:68:41:86:b8:
25:eb:ee:aa:67:db:4b:28:a0:66:d5:70:c4:ff:dc:
88:ca:a1:81:c5:57:03:45:be:1e:b7:56:62:81:87:
62:85:c2:21:f8:97:05:7e:f2:17:4a:98:b0:37:67:
df:71:9c:6b:f2:c0:e0:e3:e4:f6:f6:76:1b:7a:c7:
f8:51:75:d5:87:5e:46:42:fb:62:16:9e:1f:e0:1a:
81:42:b3:2d:59:60:bd:92:90:0d:4f:d1:7c:f7:88:
6a:b1:18:bf:99:8c:db:98:39:3d:1f:b6:9d:c6:7e:
c8:a1:80:78:6e:da:8a:ac:1c:35:ff:04:ae:fb:fc:
a2:e5:1a:08:25:7a:c3:3f:07:3e:ad:2e:59:fc:5a:
46:4a:16:58:85:76:33:8b:5e:5d:e2:17:03:68:43:
60:de:98:f6:f8:72:d5:4b:ec:d3:49:56:ea:64:ef:
da:ba:b0:fd:f0:38:31:97:8b:01:12:49:90:f3:6d:
94:59:78:06:6e:c7:2e:01:a3:74:37:20:cf:cc:f8:
20:4c:30:44:28:76:fc:0d:65:af:f1:49:bc:aa:61:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:27:C0:F5:99:AB:15:7A:49:42:C9:69:86:1D:E2:C7:2A:72:A0:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACF709A0F0C611EE849DC1A0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:bb:52:32:c3:56:42:7d:f3:ae:f0:04:82:31:67:48:c7:46:
8e:c9:78:c7:66:d4:72:fc:b1:04:48:73:4f:9e:ba:4e:67:50:
40:37:ec:bb:b1:a9:34:cd:26:89:bb:4a:4d:67:8d:98:33:89:
27:e7:6c:0d:ea:1c:3f:af:ec:3f:65:81:f9:d2:35:32:5b:a5:
29:bb:42:97:9b:73:0f:23:52:48:cd:cc:c4:c5:06:39:5d:ad:
56:36:52:f0:0e:09:8b:17:a0:dd:9a:48:c6:7e:a1:f4:ae:53:
26:c0:f1:8c:98:d3:49:be:f4:d6:34:df:2d:ae:e3:d2:a1:46:
22:c5:f2:6a:09:02:57:27:dd:1e:05:73:7d:02:f5:ae:46:79:
aa:db:73:df:ef:fe:06:96:4a:5a:7f:45:21:a6:ef:74:4b:2d:
38:8d:fb:6a:8b:00:e8:af:15:31:2b:53:c4:a1:b9:a7:d5:05:
a8:20:f6:fe:ff:f9:11:75:16:ba:ec:7e:8f:7e:58:18:77:ce:
b7:34:7e:00:df:fe:9d:e6:d7:be:d6:4c:7d:53:1f:e0:47:b1:
ec:64:65:94:26:35:1a:fe:5f:98:04:5e:4f:1c:83:9c:26:d9:
75:ed:24:62:0f:f2:f9:8a:a8:4d:78:39:1a:93:85:8f:9a:6c:
74:67:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org