Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115422AE0B4611EF8BA2FB33017001B1.roa
File: 115422AE0B4611EF8BA2FB33017001B1.roa (raw, json)
Hash identifier: DabRKIdnyi60QEC4ZwolwcBjDtSqOuXSrrfaMmSYY4w=
Subject key identifier: 2E:AD:44:DA:53:83:3D:20:46:FB:65:13:35:F4:2A:C6:FF:2E:FB:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B440
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115422AE0B4611EF8BA2FB33017001B1.roa
Signing time: Mon 06 May 2024 01:15:04 +0000
ROA not before: Mon 06 May 2024 01:15:00 +0000
ROA not after: Tue 14 May 2024 01:15:00 +0000
asID: 44559
IP address blocks: 154.210.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46144 (0xb440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:15:00 2024 GMT
Not After : May 14 01:15:00 2024 GMT
Subject: CN=66382f18-e7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:83:ce:f3:db:10:91:21:9a:16:92:4b:57:
8c:74:bb:fc:fc:94:70:ef:56:9e:69:eb:31:20:6c:
26:16:da:be:f7:fc:81:41:48:d6:f3:d0:81:01:19:
da:24:3a:e1:51:f5:0c:c9:05:20:d1:f7:9b:9a:5d:
37:46:63:ad:fb:ea:42:2b:cd:10:f7:e6:99:11:0d:
9c:9f:41:f6:3a:3b:6f:08:02:d0:9f:ef:b3:8b:60:
db:04:00:69:5c:ad:3a:bf:13:f3:e3:c3:ce:9e:6b:
58:30:f2:f5:24:3e:15:8c:66:3f:03:9e:fd:5e:1c:
d9:4c:b4:96:28:ae:6f:e1:81:6b:d4:af:fe:66:23:
4a:52:ff:f0:d8:eb:81:af:14:b6:87:fc:73:a3:68:
a0:87:ae:46:63:73:02:45:d7:94:5c:a1:9f:7d:f8:
97:32:b5:61:25:50:1b:16:4e:33:c6:4e:bb:f3:ea:
9e:56:3f:bc:24:25:68:0b:33:56:26:5e:50:eb:15:
0f:1a:7c:cb:7b:74:91:81:2a:af:5f:b0:ad:dc:ce:
d4:3e:e9:0f:e9:f6:05:c7:70:d8:c5:fe:b8:92:30:
3b:ec:a1:11:d5:db:36:e3:36:f4:f6:64:f8:08:54:
05:9c:cb:14:25:f1:04:7d:62:67:75:9f:26:79:34:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:44:DA:53:83:3D:20:46:FB:65:13:35:F4:2A:C6:FF:2E:FB:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115422AE0B4611EF8BA2FB33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.64.0/18
Signature Algorithm: sha256WithRSAEncryption
18:28:68:18:a9:7b:06:ca:32:0b:03:6e:08:f2:0d:e0:f1:0a:
d6:98:e4:aa:83:a1:62:0a:47:e2:44:f6:44:77:77:2f:8d:2d:
45:7a:41:0f:4a:e1:b3:13:20:c2:70:d4:0c:6d:1f:aa:1a:2c:
8f:b3:59:10:e5:70:95:76:d9:ef:3b:db:14:c3:d9:e0:78:ec:
f7:06:1f:e5:fd:c1:e1:17:bd:fa:e9:33:a5:7d:19:94:94:13:
a5:cf:a8:9d:aa:73:25:13:3d:67:b9:88:c9:f5:47:93:0e:bb:
db:f1:17:32:a3:dc:3b:ed:a4:88:2b:3f:ea:43:3b:ed:92:b6:
fa:97:df:0e:27:2e:d7:06:67:ba:0c:1d:c8:42:cc:db:29:c7:
bf:6c:92:7d:ae:8d:7f:87:20:88:56:d2:58:e0:56:d6:84:a2:
b6:6b:0e:27:a4:71:60:91:91:aa:e3:12:e4:8f:30:b4:d4:8e:
17:8f:fc:02:40:23:3e:55:3c:0c:a7:11:75:00:35:38:4b:ea:
3e:af:10:0c:1e:12:ff:71:d4:a8:2c:4a:3f:82:c2:67:1a:41:
f2:88:84:6a:ef:f7:be:f9:b2:da:fc:4c:63:6c:f5:80:73:d9:
1f:16:17:90:17:72:b9:f7:19:aa:1b:1f:ea:b0:95:9c:fe:5c:
37:24:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 03:09:41 2024 by rpki-client on console-fra.rpki-client.org