Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C100DCF6128511EFB315EE60017001B1.roa
File: C100DCF6128511EFB315EE60017001B1.roa (raw, json)
Hash identifier: 4CXfMi4jopeum8wlwGiIEEgdTL6zALkyla2+ZCb0awY=
Subject key identifier: C9:F8:21:BF:D6:1A:86:0D:B5:BE:A5:AD:48:33:C4:36:DD:30:8C:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B7A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C100DCF6128511EFB315EE60017001B1.roa
Signing time: Wed 15 May 2024 06:38:35 +0000
ROA not before: Wed 15 May 2024 06:38:32 +0000
ROA not after: Sun 26 May 2024 06:38:32 +0000
asID: 142062
IP address blocks: 154.212.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47011 (0xb7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 06:38:32 2024 GMT
Not After : May 26 06:38:32 2024 GMT
Subject: CN=6644586b-fe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:e2:95:a5:38:91:16:49:01:25:49:79:98:
1a:31:bf:f6:ba:70:8d:13:67:0c:6f:84:5a:16:11:
b7:de:90:8a:75:9c:d6:92:72:c4:a8:7d:03:a8:03:
01:fa:44:1e:a1:98:bc:69:02:83:24:30:a9:14:01:
7c:61:f9:9d:c7:7d:8f:9c:49:ca:24:94:6c:f6:54:
b7:a7:87:7c:7b:1d:7a:97:c6:0c:d2:d7:7e:5f:1b:
0c:d7:5c:0c:58:68:3a:2e:d2:85:b3:a8:62:66:8a:
85:36:84:d1:ac:8e:78:05:16:b0:cf:26:92:0b:04:
42:04:54:00:d5:f3:55:1b:5b:51:30:11:10:bf:52:
31:a0:0c:bb:ec:08:ea:38:2f:69:c6:00:3c:95:f2:
c9:16:48:c5:ee:ef:c0:db:20:3a:e4:d9:0c:15:3e:
d4:c9:58:00:35:a1:c5:79:5a:8c:95:aa:5b:8d:c6:
04:c5:56:00:c2:be:67:d8:86:e3:88:e3:b3:15:fa:
86:4c:69:9f:da:f2:63:b6:53:70:6e:4d:1b:95:71:
28:98:f2:c2:98:1d:f9:73:da:01:7e:8b:eb:ff:c9:
8f:ea:23:a2:e5:a9:94:28:a5:c3:ee:cc:6d:c6:f2:
13:2e:3c:ee:4e:4e:10:21:7c:f4:3f:1c:75:53:df:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:21:BF:D6:1A:86:0D:B5:BE:A5:AD:48:33:C4:36:DD:30:8C:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C100DCF6128511EFB315EE60017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.152.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c0:94:bd:a2:7c:ec:2f:f9:f7:b9:03:19:12:95:3e:eb:b6:
ac:4b:07:ae:63:b7:86:f2:71:1a:b5:b2:1f:12:29:34:ad:69:
75:32:fb:d2:d4:dd:f9:91:9d:54:df:65:df:03:22:d4:0d:c2:
93:01:52:98:e6:ab:ee:7a:7c:3f:45:3a:53:f0:21:54:81:3a:
d7:94:db:60:8d:e2:2f:55:ee:a9:3f:2b:67:43:45:ae:93:01:
be:17:39:61:a0:f6:dd:f8:56:3b:9f:8b:af:dd:41:b5:9f:21:
e2:06:12:34:4e:77:45:cc:78:60:4b:bb:c8:53:8f:88:e5:c3:
22:0b:39:e6:96:10:94:e2:a3:fe:fb:c7:f1:eb:67:59:0d:a8:
83:05:51:50:1d:cc:a3:ec:7b:a9:18:a8:9e:3e:05:4b:e1:ea:
5a:15:d4:42:e4:f8:61:0a:d5:75:86:e5:ef:e1:0b:59:ed:e6:
8a:43:65:ed:fa:34:e2:dd:33:c4:db:a8:b8:b2:dd:08:a6:dd:
41:75:8c:1b:7f:3e:f1:4c:27:04:92:f3:dc:af:38:9d:fb:5d:
27:56:06:4a:8e:a9:e2:3f:aa:24:45:ed:a2:c6:b3:71:8c:fc:
df:60:c9:65:8a:b4:64:08:31:a1:70:00:fd:99:25:74:12:50:
4d:5d:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:48:59 2024 by rpki-client on console-fra.rpki-client.org