Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B33BEF96E33011ED81B21EC42F6D8C1D.roa
File: B33BEF96E33011ED81B21EC42F6D8C1D.roa (raw, json)
Hash identifier: kQ98gQgUrLydg7Wd3f/ySrvkIx1F+04G1rQsRGQji3E=
Subject key identifier: 2F:7B:03:6F:6A:B1:94:E8:C6:C8:26:64:DC:2E:4D:F9:22:99:F0:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1FC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B33BEF96E33011ED81B21EC42F6D8C1D.roa
Signing time: Tue 25 Apr 2023 06:16:22 +0000
ROA not before: Tue 25 Apr 2023 06:16:19 +0000
ROA not after: Thu 25 Apr 2024 06:16:19 +0000
asID: 28458
IP address blocks: 154.212.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8131 (0x1fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 06:16:19 2023 GMT
Not After : Apr 25 06:16:19 2024 GMT
Subject: CN=64477036-7eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:05:4f:88:3b:c3:bb:5c:d4:a4:0b:62:60:
5c:a8:0c:6d:06:70:a4:8b:1f:8f:76:fd:50:d7:b0:
60:75:14:0d:5a:b1:f1:67:eb:d0:41:70:48:64:e8:
08:9f:79:5b:be:bc:06:8c:19:e2:57:66:f8:d1:38:
ee:1e:90:99:07:bd:4c:66:52:fe:66:9f:47:3a:01:
70:97:54:6c:1c:19:1f:e4:1e:08:82:15:e8:55:02:
aa:3c:9f:91:cf:09:fe:2f:6d:9f:f5:89:43:32:99:
72:9d:b6:8e:4f:35:52:90:58:67:2c:a2:6f:23:eb:
9e:a1:a8:74:8b:14:65:bb:00:3d:de:e0:a3:df:6a:
ab:97:91:a6:5a:a5:9a:89:4c:36:a3:55:d0:76:c4:
d3:b5:33:cb:c7:42:10:3f:1b:63:a0:88:39:d7:b2:
fa:2f:71:d4:cc:99:8d:20:89:49:2b:c2:33:2b:a8:
ce:3e:9a:c9:cb:92:db:6c:98:10:ce:f9:38:1d:1b:
99:7f:2d:19:b9:69:18:00:6d:35:e0:a3:6e:8a:49:
0a:36:7e:fd:3a:a9:4b:cc:c5:95:d2:f5:e0:06:87:
ec:fc:99:0b:f7:c1:fe:f5:9b:47:27:b3:52:37:7b:
3b:7f:80:63:6a:78:68:a5:79:c1:d9:52:bd:27:ae:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7B:03:6F:6A:B1:94:E8:C6:C8:26:64:DC:2E:4D:F9:22:99:F0:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B33BEF96E33011ED81B21EC42F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7e:4e:27:b8:57:e5:36:76:ed:9a:f4:75:ae:03:4d:a7:69:
d7:2b:34:8c:f3:4c:6b:fe:66:60:72:88:7f:97:8f:3f:da:8a:
d3:2d:05:df:d0:85:7d:bd:e8:23:56:b4:c0:6d:42:cf:f4:42:
49:47:8b:cc:c8:28:98:89:81:00:b3:ea:88:87:d8:f1:13:34:
99:5f:37:9b:56:8b:6b:a5:5d:d7:19:c4:9c:e1:61:03:58:c0:
44:a8:a7:6b:dc:d0:0a:f8:f1:46:2f:f6:d4:9c:15:43:da:26:
f3:1e:3c:c0:5b:01:02:bb:03:fc:32:ba:15:45:1f:f8:01:ff:
db:63:24:35:4e:57:09:09:53:4f:20:a0:4e:6c:e1:73:9a:f9:
1d:bb:1a:2f:f7:d7:3f:0e:a4:ae:82:ee:1a:ab:a5:a5:e7:73:
d4:20:fb:9d:36:2b:6f:4e:dd:7a:09:31:80:73:d4:6e:fb:6d:
e6:db:37:3e:33:37:12:3c:63:77:a2:12:df:4c:f3:28:02:bc:
78:a0:c9:cc:17:5c:4d:c1:06:a2:9b:0f:62:ca:47:c0:07:d3:
08:77:53:b0:06:91:a7:53:f7:9f:70:81:e6:3d:44:8c:97:1b:
a4:49:30:46:28:c8:f9:74:1d:1e:e2:89:6b:36:ca:fa:72:ec:
2a:9e:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org