Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F75CAA20B6B11EFA83CAF6F017001B1.roa
File: 1F75CAA20B6B11EFA83CAF6F017001B1.roa (raw, json)
Hash identifier: OGXKM97dgMA2jEI9TPVj+0LIh+ccJwnt/7rZmllbO3E=
Subject key identifier: 34:80:E5:5E:F4:FC:BC:26:AF:D0:F9:CE:7A:9A:66:52:A6:89:41:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B50E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F75CAA20B6B11EFA83CAF6F017001B1.roa
Signing time: Mon 06 May 2024 05:40:19 +0000
ROA not before: Mon 06 May 2024 05:40:15 +0000
ROA not after: Thu 16 May 2024 05:40:15 +0000
asID: 141883
IP address blocks: 154.218.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46350 (0xb50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 05:40:15 2024 GMT
Not After : May 16 05:40:15 2024 GMT
Subject: CN=66386d43-2e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:9d:d9:a3:f2:14:fe:33:3d:eb:9c:19:aa:
fb:ac:f4:c7:64:54:40:6a:2d:f5:94:7f:2e:ec:2f:
b0:57:35:04:8a:7b:7d:73:9d:6b:2b:de:39:24:b0:
ce:fe:89:9f:89:01:71:70:c0:b0:c1:df:ce:5c:5c:
3c:c7:7a:93:f2:f6:0b:48:5c:ab:e7:aa:2b:16:28:
91:93:70:31:c9:bd:7e:43:7e:17:a5:4e:b4:11:58:
f3:0d:76:32:70:b3:23:a4:bb:b4:f9:73:9d:d3:27:
0b:d3:7d:1c:0f:62:45:b3:c1:52:9a:e4:0f:57:ba:
b5:fb:b7:97:1e:af:0d:8b:99:64:3b:b8:f4:0e:9c:
d8:e2:3f:03:db:2e:3e:df:5b:be:1a:74:ff:eb:b1:
7d:57:1d:f2:95:ac:6b:4c:9b:91:21:54:6b:f7:e9:
b8:72:d2:8b:06:21:25:c3:e0:8f:b6:32:33:dc:8d:
3c:c1:37:88:7f:ac:c0:b7:93:7a:48:6d:ec:41:00:
52:10:1b:c5:a6:c2:77:73:c9:d5:c7:68:04:f3:4b:
de:2d:b8:ed:31:0e:1a:bf:01:8c:ab:3e:04:bb:a1:
8d:4f:91:be:5d:6b:69:c2:89:4f:a3:bf:8c:70:69:
6b:2f:f1:c2:64:1c:a6:57:8f:e1:3e:ad:a0:bb:9b:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:80:E5:5E:F4:FC:BC:26:AF:D0:F9:CE:7A:9A:66:52:A6:89:41:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F75CAA20B6B11EFA83CAF6F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:01:1c:d9:99:3f:b9:aa:cc:16:b2:7e:90:4e:71:99:c9:2d:
6a:42:41:50:25:8c:3d:2b:fe:84:34:3e:11:71:d7:4e:d6:a6:
66:8a:49:62:da:9f:19:22:44:d8:a1:7f:75:88:59:27:28:36:
61:4d:0e:12:64:01:25:28:58:81:01:c4:9c:e7:2b:25:27:5a:
c4:1a:ec:e2:28:a7:69:6f:25:5a:45:00:3d:10:24:0b:48:77:
0d:f6:69:8a:c6:77:f9:e4:7d:c7:61:c9:56:49:95:88:ad:cf:
63:ad:8f:3f:fb:6a:1f:b6:6f:da:a1:7e:1a:47:5f:f4:2c:2a:
ec:0e:05:15:2b:43:95:49:86:34:b3:70:49:ee:6d:5c:19:e7:
b4:b9:33:da:a6:b5:e3:46:b4:7f:d9:05:30:51:6e:06:64:57:
76:cd:06:39:d0:f3:4e:6c:08:e1:14:25:94:f7:89:04:bc:3b:
00:f7:a2:03:46:08:e4:e1:3e:ef:c5:2a:79:59:cb:6a:79:81:
9c:5e:e6:3a:b1:89:e7:0a:bf:18:af:7b:ca:44:1b:64:bb:f7:
6c:5f:f7:8d:97:9c:81:1e:79:89:61:d8:8f:4e:f1:aa:6f:cf:
ba:59:9a:95:12:a1:ff:4d:f5:ea:5c:4c:2a:f9:99:7a:a5:a7:
2f:47:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 07:46:20 2024 by rpki-client on console-ams.rpki-client.org