Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACF811B09F8F11EFBE5DDCAE762E951A.roa
File: ACF811B09F8F11EFBE5DDCAE762E951A.roa (raw, json)
Hash identifier: Yugve8A4BYQwONtRvtI1bPh1hW72IxQt+va9icZQccQ=
Subject key identifier: 85:A0:95:59:FB:C4:C6:A2:10:16:94:83:40:C9:60:01:8B:E3:59:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACF811B09F8F11EFBE5DDCAE762E951A.roa
Signing time: Sun 10 Nov 2024 18:14:50 +0000
ROA not before: Sun 10 Nov 2024 18:14:46 +0000
ROA not after: Thu 21 Nov 2024 18:14:46 +0000
asID: 44559
IP address blocks: 154.223.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68460 (0x10b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 18:14:46 2024 GMT
Not After : Nov 21 18:14:46 2024 GMT
Subject: CN=6730f81a-7061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:53:20:eb:a1:1e:e5:ad:ab:6e:b8:bb:f8:
79:97:48:e7:12:99:a8:87:5c:78:54:02:b8:67:a0:
01:d4:0e:8d:6c:98:40:2a:f3:1c:32:d1:90:d5:ca:
05:ec:66:ea:cd:70:84:29:39:80:b2:e1:2d:90:18:
52:a4:9c:0c:fa:4f:67:04:f7:fe:12:f4:62:2b:e6:
b2:bd:34:2b:6a:a5:f7:df:0e:5b:27:f9:b3:66:70:
d9:ec:4a:52:30:92:6a:08:54:b5:d8:26:52:d9:5d:
9a:ab:b2:d9:3d:0a:b3:95:aa:5c:c4:2d:1a:d3:bc:
f4:85:3c:dc:cc:4d:f4:76:53:80:cd:8a:33:7e:4f:
0c:63:a9:0c:8f:e5:c6:de:59:0d:86:c8:9d:de:1e:
6c:03:36:5f:50:fc:6c:8e:61:5f:db:03:62:65:3b:
f7:48:b4:e8:e2:5a:4f:98:4c:1a:91:5e:e9:2b:a5:
fb:68:b7:2e:2b:8f:a9:55:b2:b4:20:dd:4a:08:23:
16:50:ba:c2:30:9b:53:1e:0d:23:33:17:a2:8d:49:
66:8e:20:4b:c9:94:62:82:d2:df:93:78:d2:4c:36:
97:0d:53:f8:56:cd:bf:b5:32:d0:f9:24:7c:53:ee:
2e:7b:ef:19:34:27:6b:c3:1c:4d:60:0b:33:4f:0a:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:95:59:FB:C4:C6:A2:10:16:94:83:40:C9:60:01:8B:E3:59:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACF811B09F8F11EFBE5DDCAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:84:e7:6e:88:bd:0f:2f:50:ef:48:d3:15:9d:d5:26:8a:97:
c8:ea:65:ef:9b:77:99:cb:3b:1d:0e:cc:a0:e7:fe:27:67:f8:
09:d2:34:fc:13:52:77:ce:ac:72:c1:ae:c3:dd:4f:33:8b:44:
06:e3:3e:50:b2:42:80:ce:4e:25:79:47:6e:c0:a1:76:95:d7:
58:1e:cc:41:f8:73:02:55:d2:ac:b5:a0:75:cd:e2:31:91:73:
ec:5c:08:86:ba:d3:cc:0f:23:28:1a:d7:f0:e5:2a:8e:e2:df:
5f:6e:45:0c:6d:d2:57:ea:5a:05:7e:6e:ee:2e:99:44:3a:00:
90:13:e2:27:c9:ae:cb:f7:c3:cd:e4:d9:2e:76:6a:5c:00:df:
7d:8b:e5:f2:43:92:50:88:4c:0c:1c:37:ae:b2:a0:52:7a:ac:
f1:b9:81:3a:a8:f7:86:71:c7:d5:1a:b4:19:a7:66:7e:dd:e7:
12:20:3a:15:05:4f:61:b9:89:10:91:a8:6f:df:9a:f8:e8:24:
7b:70:b1:f5:e8:ac:99:fb:a4:5e:77:6a:25:ec:46:54:bb:c8:
9d:18:a9:be:19:ed:a0:35:2a:8b:7a:5b:50:53:9b:8e:48:66:
4a:0a:17:67:88:d8:42:28:e9:d9:b0:97:94:b6:64:a0:63:4b:
45:d5:c4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:47:23 2024 by rpki-client on console-fra.rpki-client.org