Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21F34D52294A11EFA85A13177DDC24C2.roa
File: 21F34D52294A11EFA85A13177DDC24C2.roa (raw, json)
Hash identifier: 4FmRBlNPM7Lxx6INNf8f+j5m5W/ZkXTsYejwnBomekY=
Subject key identifier: 73:43:B9:EE:B6:CB:D6:6D:F3:D7:51:98:76:FC:8E:1B:18:70:91:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C1FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21F34D52294A11EFA85A13177DDC24C2.roa
Signing time: Thu 13 Jun 2024 05:59:45 +0000
ROA not before: Thu 13 Jun 2024 05:59:41 +0000
ROA not after: Fri 21 Jun 2024 05:59:41 +0000
asID: 44559
IP address blocks: 154.207.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49660 (0xc1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 05:59:41 2024 GMT
Not After : Jun 21 05:59:41 2024 GMT
Subject: CN=666a8ad0-44f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:be:9a:67:ef:57:8c:b2:d0:cf:9b:44:00:21:
10:8d:b4:06:29:df:44:d8:27:4f:69:6a:15:f5:3d:
5f:91:d0:ba:c3:d7:22:d6:13:1b:be:5f:78:39:5b:
9f:81:56:2e:5b:50:55:c1:89:3a:a1:b3:7a:ae:fa:
34:a6:3d:70:00:ea:04:1a:63:ea:d0:01:a1:84:24:
74:03:98:97:ad:fc:33:95:a4:1a:c2:19:41:28:bf:
93:92:25:f1:e2:e3:af:5d:3e:2f:d4:c1:69:1a:e0:
f1:b4:67:4a:41:74:37:f0:c8:ff:a9:15:ff:46:1a:
04:dc:85:71:b2:ad:bd:9b:ab:21:60:91:9c:a3:6d:
18:7c:ce:86:4b:85:9f:03:91:e6:e4:e0:0e:60:89:
87:70:f6:91:29:ac:b0:3c:09:49:66:1b:83:a2:aa:
55:1b:f4:0f:32:41:d1:9b:6f:a5:38:3c:e6:59:1d:
46:0b:29:15:71:98:00:30:86:eb:2d:7b:15:4b:8c:
c7:7f:8c:28:7a:b2:62:a7:bc:9a:74:93:ed:6b:fc:
48:47:ab:20:76:e2:5a:15:5c:1f:c1:ff:52:f2:1a:
f9:4e:08:45:f0:37:f0:2a:f2:e5:22:03:4a:80:32:
32:83:c1:04:c5:5e:a1:48:ec:a9:6e:c2:c0:c4:c3:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:43:B9:EE:B6:CB:D6:6D:F3:D7:51:98:76:FC:8E:1B:18:70:91:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21F34D52294A11EFA85A13177DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:aa:e9:18:ea:c8:dd:32:65:76:5a:93:12:db:9b:c3:38:2c:
3b:51:f6:a9:a2:39:a2:9f:1e:7d:71:52:df:6d:ad:6c:35:49:
79:cb:69:1b:bf:9a:35:2f:2a:3d:9b:92:eb:b4:eb:8b:95:b8:
6d:e6:29:1b:8f:df:ba:76:d4:e6:5a:2c:20:4e:da:82:eb:6e:
02:2b:27:57:81:16:8e:5f:88:3f:7b:6c:b4:15:61:43:f2:7f:
63:c1:6a:7b:12:d6:ce:b4:5d:f3:2a:80:29:70:4d:7c:ad:18:
05:cb:5c:b1:9b:3f:f5:2d:6f:58:e3:ac:1f:91:31:28:3b:69:
97:90:3e:6f:9d:ca:df:b5:72:3f:61:be:19:e3:95:57:96:65:
56:39:49:bf:e8:81:71:39:f5:a7:12:7e:dd:b2:05:2b:b5:a2:
59:cc:59:5f:83:8c:b4:a8:12:a1:5f:59:b8:2b:7f:58:f6:f2:
6d:9d:f3:b7:d0:9c:ba:3d:63:29:08:c0:74:ee:0a:36:7c:ec:
d5:7b:80:de:b2:0f:83:80:fa:ee:bc:19:1b:3b:49:d9:1a:0c:
3e:99:81:1b:72:81:a4:ab:48:84:85:c0:8b:ab:e0:34:e2:33:
ec:2f:d5:33:ea:b4:25:e6:f8:c7:5c:e1:5d:b7:76:d6:6c:85:
03:d9:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:57:30 2024 by rpki-client on console-ams.rpki-client.org