Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D22A4CF2FB9B11EEB667201C017001B1.roa
File: D22A4CF2FB9B11EEB667201C017001B1.roa (raw, json)
Hash identifier: cROxwtgtkmK6Dmir96CUuBGi/g8bAps2getfzSNymvk=
Subject key identifier: ED:6B:1A:87:FE:1C:03:FC:26:12:97:88:8E:3C:CD:B7:69:C1:9B:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D22A4CF2FB9B11EEB667201C017001B1.roa
Signing time: Tue 16 Apr 2024 02:48:36 +0000
ROA not before: Tue 16 Apr 2024 02:48:33 +0000
ROA not after: Thu 25 Apr 2024 02:48:33 +0000
asID: 142062
IP address blocks: 154.212.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44321 (0xad21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 02:48:33 2024 GMT
Not After : Apr 25 02:48:33 2024 GMT
Subject: CN=661de704-8c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:a7:65:3a:ba:52:74:c1:e9:0e:55:22:50:
85:11:2a:6c:80:d9:89:4f:8c:2a:89:13:1c:79:40:
8e:1b:e1:df:f4:9f:cc:bb:56:30:74:5f:71:4f:d9:
80:30:5f:b5:a2:a6:ab:d3:99:a6:68:46:4e:45:af:
bf:19:c8:67:5a:b8:11:90:fc:10:52:e5:e1:e8:a4:
f0:85:b0:d3:2f:ee:a3:65:41:89:59:0b:ef:91:25:
ee:63:69:90:72:ff:fe:ee:48:0f:d3:62:fc:c5:19:
b0:68:43:98:69:30:70:57:18:7c:4f:7a:21:9f:1f:
4a:91:0b:a2:f9:7b:1f:05:db:cd:25:04:22:68:b3:
43:6a:cf:a9:c2:0c:a6:2e:35:47:19:a7:c9:c0:24:
2b:85:85:ee:28:eb:bd:14:ef:2e:9c:ea:18:8a:c1:
e1:76:b5:f5:cb:47:18:ed:43:28:f5:f2:88:b6:40:
58:6d:58:21:85:0e:6c:3e:f7:e6:a8:72:e4:69:37:
90:8e:97:1a:f1:84:cc:20:77:2c:60:fd:a5:23:78:
99:1c:6a:b0:c2:63:4e:71:b4:72:fe:1a:ae:3b:16:
27:b8:77:a7:e9:22:53:59:2c:64:8d:20:bc:da:8c:
84:43:22:98:75:08:c3:b6:f8:f4:b6:ed:79:32:12:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6B:1A:87:FE:1C:03:FC:26:12:97:88:8E:3C:CD:B7:69:C1:9B:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D22A4CF2FB9B11EEB667201C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.153.0/24
Signature Algorithm: sha256WithRSAEncryption
66:56:df:6e:54:ac:4d:ba:fd:8e:2e:75:af:e2:b5:3d:53:06:
ea:b1:47:55:0c:51:74:ee:31:98:5b:68:8f:61:3a:78:44:f7:
17:6e:d1:33:58:c6:0b:a7:14:e7:50:18:9a:90:87:07:22:a0:
15:0d:07:6c:ea:a4:b4:31:3f:0f:bf:da:d6:f8:3f:70:1a:f3:
31:cd:56:34:05:54:5e:ed:16:27:8c:00:e8:58:7a:32:c1:4f:
f2:4f:e7:72:11:82:d4:42:90:1f:ad:03:d2:d0:db:85:5e:c7:
a7:46:b5:60:00:0a:c0:6b:54:14:53:c9:2e:24:43:d9:f4:af:
3c:e7:6b:d0:4a:fc:0d:c1:40:0d:e3:d6:85:65:2a:90:95:5f:
ab:2a:c5:59:de:2e:81:2d:3e:87:28:35:8b:9b:e6:08:60:b1:
27:01:e3:a1:fb:3c:c7:30:16:77:d2:d3:35:fe:8e:de:ec:5a:
6a:da:84:6b:eb:78:3f:d4:95:af:7f:92:8a:8f:80:f1:cd:30:
05:30:48:ff:a0:ee:49:0d:f0:39:da:23:0c:a0:af:35:fc:fd:
d6:6f:11:ae:62:23:3c:22:e6:e5:84:ca:06:ed:42:44:14:0e:
8c:0a:c5:46:e3:8c:2e:d3:10:f7:ff:a2:43:84:b5:56:45:c7:
90:af:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:11 2024 by rpki-client on console-ams.rpki-client.org