Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3515171E128711EFBBDA406C017001B1.roa
File: 3515171E128711EFBBDA406C017001B1.roa (raw, json)
Hash identifier: NVl5zfgQ2cdD48iI6QeIC5WF0VLso1iNEhUBLGnJW5M=
Subject key identifier: 2C:85:3D:2E:E9:6F:07:71:B1:BC:0C:27:0E:E5:23:CA:D6:6A:69:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B7A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3515171E128711EFBBDA406C017001B1.roa
Signing time: Wed 15 May 2024 06:48:59 +0000
ROA not before: Wed 15 May 2024 06:48:56 +0000
ROA not after: Sun 26 May 2024 06:48:56 +0000
asID: 7018
IP address blocks: 154.81.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47017 (0xb7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 06:48:56 2024 GMT
Not After : May 26 06:48:56 2024 GMT
Subject: CN=66445adb-5778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:ef:47:3a:ef:0a:43:83:99:a7:20:cc:c0:
e3:1f:ba:40:21:54:91:e6:c0:b4:ec:bd:30:22:74:
7d:9c:dd:4e:e8:e7:a9:e8:b0:9c:ce:a2:40:fe:f4:
a6:76:53:4c:27:d9:65:7c:fd:e8:f3:6a:41:96:fb:
89:fd:9d:da:95:4a:ce:19:20:5c:db:d0:c7:39:a1:
30:dd:dc:f4:ca:ab:91:7a:6e:74:8e:9c:e7:c4:ec:
85:3f:9c:15:22:09:16:4a:8a:9d:61:2a:15:53:c7:
62:a3:0e:5a:b3:c1:bb:95:fe:f1:6e:ac:a4:ed:0f:
44:6b:ac:68:bb:14:82:8a:2c:73:c6:d7:ac:33:81:
25:dc:45:fc:c6:a6:83:dd:9a:1e:88:27:d2:0b:0b:
0a:e9:e2:e7:95:ce:5f:4e:79:4c:fa:d6:c1:00:a7:
46:14:c9:00:bb:1e:9a:59:bc:ce:a2:c8:e8:e4:59:
37:c4:31:9c:a3:24:b5:67:a4:e0:18:7b:ff:76:c5:
1e:a6:5a:dc:9f:09:0b:21:3e:1a:fa:5d:20:28:c7:
f2:c1:13:01:97:24:36:1e:27:92:3f:d2:3c:ed:d4:
b4:c5:20:f4:2b:8a:fc:b6:6f:61:24:b5:5e:6a:14:
69:ee:27:31:89:cf:91:c4:cd:46:62:53:61:57:ce:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:3D:2E:E9:6F:07:71:B1:BC:0C:27:0E:E5:23:CA:D6:6A:69:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3515171E128711EFBBDA406C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.0.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:e7:ee:ab:fd:de:9c:93:36:4d:bf:10:f1:9a:4a:ac:bd:13:
06:c0:dc:b0:55:14:ce:04:b1:58:b8:53:13:d7:a9:1a:4d:7f:
99:d5:ec:6e:40:a4:1c:ee:35:e4:d1:b9:dc:78:79:8f:ff:a8:
ff:9e:06:30:34:51:52:15:6a:53:3c:d3:7e:b9:9a:fc:e1:45:
ef:d2:e9:0f:b9:db:91:13:82:fa:ee:11:75:66:de:e1:78:ac:
d8:55:30:75:a0:81:7f:b5:67:ae:14:9f:02:d3:75:a6:7f:76:
36:5d:b1:4e:27:03:44:b2:1d:79:22:a9:a1:04:a0:3d:a5:a2:
23:e6:4a:5f:98:20:83:5d:ac:54:c4:33:fa:b3:b7:70:02:87:
93:b2:09:e4:12:c3:5d:fc:e7:af:7a:22:40:80:3b:37:44:aa:
af:5c:af:b7:22:0d:61:11:b6:24:4f:b3:11:fc:78:bd:d6:7e:
0a:26:a3:8e:ae:c7:71:b6:0c:ba:41:3d:96:27:a1:d2:11:17:
d5:85:83:8e:79:73:ed:8a:11:be:ea:11:b2:bb:73:90:6b:88:
4d:7c:06:4e:e6:7a:3a:56:f7:e3:63:9b:3e:97:7a:42:d3:9e:
02:a2:27:5c:07:45:ca:36:89:54:fb:f5:34:09:3d:2b:f5:e9:
1f:c9:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:18:59 2024 by rpki-client on console-fra.rpki-client.org