Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D455C184886B11EF8028814A762E951A.roa
File: D455C184886B11EF8028814A762E951A.roa (raw, json)
Hash identifier: dYFXcv/VEg1LHkMWUQjOBRhmflGaA2FzbfjyZS1mK/0=
Subject key identifier: 24:C7:FD:6C:D6:64:51:EB:E1:70:C8:6D:50:19:80:F3:6A:AE:94:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FDC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D455C184886B11EF8028814A762E951A.roa
Signing time: Sat 12 Oct 2024 07:30:18 +0000
ROA not before: Sat 12 Oct 2024 07:30:14 +0000
ROA not after: Thu 14 Nov 2024 07:30:14 +0000
asID: 209242
IP address blocks: 154.197.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64969 (0xfdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 12 07:30:14 2024 GMT
Not After : Nov 14 07:30:14 2024 GMT
Subject: CN=670a258a-be35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:60:59:ca:2f:a8:04:3c:0f:2d:80:1c:44:
65:6b:aa:e9:1f:e4:fb:d7:8c:3b:51:32:49:c1:38:
77:8d:c4:21:38:83:7c:b1:88:9a:4b:32:dc:33:b8:
bf:fc:ff:fc:10:89:29:68:be:c2:5c:43:08:26:d9:
ab:9c:a2:28:d5:60:49:99:ff:e7:4b:3b:d4:d0:c2:
f3:e4:f5:8d:d3:8b:b3:dc:f1:f0:f0:5a:10:d5:33:
2a:05:20:0f:3e:4a:67:37:0a:70:d3:95:cb:6b:ca:
cb:bf:a7:13:ed:b1:ae:52:67:0b:1f:e4:57:2f:d6:
6a:b0:f7:5d:e7:66:4d:90:a0:b6:6e:9d:0b:20:d0:
16:92:56:a3:be:47:2d:94:2f:05:52:24:cf:b3:d2:
e4:ea:c2:05:05:08:f4:c8:52:e5:ed:e7:ea:af:22:
2d:4d:c8:ea:16:eb:48:86:ef:b1:0d:f5:e9:08:23:
84:58:0f:17:43:32:85:97:62:ea:cb:61:4e:11:9a:
67:25:a8:7e:ac:ab:55:1f:d1:dc:49:bd:73:57:be:
56:85:76:72:a5:54:fc:02:f2:2b:35:6a:d7:32:37:
bb:cd:66:8b:69:88:22:ce:10:2e:62:b5:56:0a:a6:
e6:f4:e9:a2:77:6c:ad:18:b8:14:16:ef:2b:fa:c4:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C7:FD:6C:D6:64:51:EB:E1:70:C8:6D:50:19:80:F3:6A:AE:94:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D455C184886B11EF8028814A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:e1:87:42:0a:70:ae:5b:88:e4:3e:7b:29:02:bf:5b:36:c0:
f6:7d:77:42:e2:95:64:60:ee:bc:fd:4b:ef:28:2e:e8:b9:00:
e3:77:2d:9b:35:f3:7b:9f:71:51:aa:be:99:5d:73:2b:5e:33:
d4:60:10:5e:b1:30:a2:14:2d:6f:54:2e:67:8a:bd:ad:36:fd:
cf:7f:66:c1:51:3e:94:99:7f:28:7d:62:72:1e:dc:1a:4b:3a:
4f:92:6c:4f:61:71:1a:f8:34:e2:74:22:45:31:9e:29:5f:7a:
9c:73:74:e0:ef:6b:b8:e8:ae:1c:f7:d0:8f:e6:6b:44:c0:88:
9d:e1:59:87:87:23:6a:10:89:ce:5c:00:b7:e5:41:be:39:41:
91:24:37:a3:5d:0e:cb:ff:7b:ef:09:ff:9b:d3:4e:22:13:d2:
f5:40:06:16:2a:2a:60:82:eb:72:f3:16:31:92:f5:9d:96:05:
92:6f:c5:3d:6e:9c:10:0f:f3:ac:4d:09:8f:15:da:fd:88:57:
cd:29:ec:6a:5a:d4:f0:67:b4:24:b8:22:db:49:0e:98:47:a1:
7a:43:c1:5a:39:1c:34:7a:61:46:27:79:cb:a2:76:ff:26:07:
95:45:05:2f:8f:93:ad:dc:3e:ab:9a:79:02:52:44:60:73:7f:
e8:9a:88:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 10:09:08 2024 by rpki-client on console-fra.rpki-client.org