Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6DA7FE605F311EEBB52C8304AD9E6FC.roa
File: C6DA7FE605F311EEBB52C8304AD9E6FC.roa (raw, json)
Hash identifier: OgCg/OPnOd+GXlqQeTRiNP7hDpEgBLuZ1qHA4IuCDZg=
Subject key identifier: B8:46:9B:73:42:16:45:EF:50:39:EF:17:D2:B2:3B:75:05:AA:DE:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 29DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6DA7FE605F311EEBB52C8304AD9E6FC.roa
Signing time: Thu 08 Jun 2023 11:58:27 +0000
ROA not before: Thu 08 Jun 2023 11:58:23 +0000
ROA not after: Wed 01 May 2024 11:58:23 +0000
asID: 137443
IP address blocks: 154.218.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10714 (0x29da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 8 11:58:23 2023 GMT
Not After : May 1 11:58:23 2024 GMT
Subject: CN=6481c263-766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e5:60:77:c1:5d:cf:c9:b6:82:5e:7a:43:5a:
e2:e2:b3:22:d2:0e:cf:65:70:6e:50:a0:55:6c:db:
18:e3:93:2e:97:be:92:35:49:49:8b:ea:a2:4c:91:
68:d9:d9:9a:dd:b7:a1:4a:b6:e7:4e:2e:bf:af:f0:
1e:90:84:9a:31:96:0a:d2:20:fb:23:49:ac:fd:82:
95:17:32:e2:36:9f:06:2d:ac:c8:23:8b:41:5f:4a:
e2:1d:52:7f:f7:70:7e:6a:d1:fc:b9:50:17:ad:21:
c4:bb:a7:a1:66:cc:e9:f0:d8:ae:04:54:c7:2a:c3:
60:3f:b1:a9:3e:bc:ca:3a:55:39:81:2c:ce:64:7f:
23:10:1d:33:00:fa:a0:2f:94:d3:9c:ce:6f:52:2f:
f4:bc:4c:04:ab:a9:00:4c:a2:66:55:48:68:f4:14:
3a:7c:14:4d:ff:bc:1b:d2:24:db:4e:e3:d5:5f:12:
75:b9:af:c6:a4:2f:22:ed:07:ea:a8:b5:07:5e:50:
63:45:db:5d:d8:df:b9:da:ae:dc:20:24:ec:0d:17:
ae:ce:43:8e:14:b4:1c:23:b1:33:af:4b:88:26:4a:
c1:3a:b7:32:38:56:79:81:32:cf:23:87:13:a1:ec:
c9:2c:cd:c9:a3:b3:cb:c8:bb:88:70:24:f6:18:af:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:46:9B:73:42:16:45:EF:50:39:EF:17:D2:B2:3B:75:05:AA:DE:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6DA7FE605F311EEBB52C8304AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8a:a0:3b:10:0a:93:ed:22:97:d7:6b:60:34:dd:e3:94:0e:
07:d9:39:4b:0a:6d:da:54:a3:31:6c:38:f5:25:fb:02:02:db:
15:72:25:a2:ab:20:6a:fd:ee:10:62:a8:88:5c:8f:52:ca:06:
86:2e:86:18:c1:38:2f:1a:11:5b:74:d1:72:8f:3f:d3:60:e5:
41:bd:2f:15:86:73:f7:4d:1e:9f:fd:db:ad:9a:84:80:66:3b:
8e:92:f5:f2:16:05:45:d6:be:41:2f:bb:e0:49:d0:67:b0:9a:
dc:f6:39:d8:4d:35:58:8a:79:ac:57:9d:12:0b:8a:e0:c8:ce:
8a:81:24:cb:78:dd:2a:44:ef:bc:4c:ef:bf:4a:26:29:3f:00:
f7:b1:fd:cf:9b:9b:9f:46:e2:4a:54:37:0b:35:80:19:1f:e2:
50:f3:1c:60:b2:86:b1:58:c3:b1:c3:ec:dd:2a:65:83:1c:27:
5e:cc:bc:37:a1:e3:b8:bb:cd:7c:b1:34:f8:17:9c:87:85:19:
cb:f3:ae:3d:2a:f2:ed:02:99:02:8f:34:a8:a8:98:cd:f1:6f:
38:e4:d8:30:12:7a:80:65:01:a6:6b:99:4c:30:bb:4f:c6:72:
ae:2e:d2:36:53:b2:36:60:af:c3:d2:e9:a6:da:2c:dd:55:15:
02:15:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:47:49 2024 by rpki-client on console-fra.rpki-client.org