Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF59772AFB9B11EEAA8E8F1C017001B1.roa
File: FF59772AFB9B11EEAA8E8F1C017001B1.roa (raw, json)
Hash identifier: uRLzroX4oDF6/k8T332l0unCroK922I6AhIvTGx8BEc=
Subject key identifier: 40:77:97:7C:21:7D:68:4A:33:C5:72:08:11:F1:02:0E:54:E8:04:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF59772AFB9B11EEAA8E8F1C017001B1.roa
Signing time: Tue 16 Apr 2024 02:49:52 +0000
ROA not before: Tue 16 Apr 2024 02:49:48 +0000
ROA not after: Thu 25 Apr 2024 02:49:48 +0000
asID: 142062
IP address blocks: 154.212.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44323 (0xad23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 02:49:48 2024 GMT
Not After : Apr 25 02:49:48 2024 GMT
Subject: CN=661de750-4b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:db:30:be:b6:3a:4c:78:04:f1:9d:68:d5:
8b:8d:f6:9c:e4:50:31:d2:ef:28:fc:04:ad:b6:ba:
45:79:d8:04:0f:03:93:00:1e:ec:62:7b:7f:ac:47:
d8:61:8c:2b:fc:70:10:18:9c:1d:e7:39:55:d6:ac:
78:59:79:4b:49:ec:9c:34:8c:73:fe:b6:97:71:a8:
3b:c1:f6:a5:42:8e:2b:4b:ef:30:39:8b:4e:db:a5:
f0:e0:77:1f:e1:b8:51:1d:5c:4f:a3:af:86:af:f1:
fd:92:41:90:ab:a8:c1:54:dc:77:f3:4f:4a:57:0f:
3d:ad:7b:47:b6:43:ef:28:8c:fb:cd:c4:b3:a9:33:
b0:b8:07:67:94:10:b2:62:8b:2b:1b:14:db:cf:b9:
72:58:a3:46:c6:0b:ff:ed:fb:e2:e0:c1:10:9c:34:
dd:07:e0:94:0d:98:b8:31:42:63:01:e6:7f:b8:64:
81:6a:06:f1:f9:90:5e:05:d0:fe:91:c0:36:6f:02:
f6:95:43:6a:f6:e9:55:ba:a5:30:e6:3b:8a:37:07:
33:f6:e0:42:d6:1e:a3:0d:68:05:27:d0:55:7b:ac:
a1:04:1b:54:67:05:dd:05:48:a4:cc:54:cf:97:ae:
a0:79:7b:91:09:92:cc:03:ab:a5:dd:61:b5:80:da:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:97:7C:21:7D:68:4A:33:C5:72:08:11:F1:02:0E:54:E8:04:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF59772AFB9B11EEAA8E8F1C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.152.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:18:24:6e:ee:12:79:f2:8d:cd:6f:1a:f7:18:46:bf:e3:ae:
cb:0a:90:c5:ac:1f:9c:d7:bc:be:e5:be:b9:53:2d:8e:f1:bc:
cd:cf:4e:dc:ad:b0:4b:07:a2:df:9a:19:34:ae:4c:a7:99:be:
e2:d0:45:df:20:9c:f0:26:e8:02:11:2f:a0:a6:76:fb:56:61:
fe:37:a8:95:7f:81:e7:71:79:69:c9:11:a3:fe:0c:2b:21:ae:
0b:63:6b:4e:e1:31:68:6b:ba:8e:3c:3b:0b:a3:95:2d:29:e7:
50:48:49:12:10:a3:9b:3b:dc:9b:ad:a7:2d:1d:eb:5e:ad:78:
6c:68:3e:75:68:cd:4b:29:63:65:88:f9:d2:a7:fe:6a:b2:9a:
03:93:20:f0:35:81:45:83:ba:99:a3:44:20:f1:f0:07:6b:29:
03:8b:49:32:d4:0e:56:51:9b:6f:0a:c2:7b:ba:d2:a3:cd:74:
0e:11:3d:6d:33:c6:bc:2a:85:57:7c:c3:76:63:75:4f:61:52:
f8:6f:80:30:30:e6:0c:b3:84:4a:78:4a:70:45:ef:bb:4b:b8:
55:9e:ce:f5:7d:75:a3:e0:21:19:48:4a:eb:91:6a:57:91:1b:
e6:49:10:58:98:31:93:b7:f4:70:d1:27:3f:30:08:d6:75:34:
3d:51:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:11 2024 by rpki-client on console-ams.rpki-client.org