Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40C4C0EC07AA11EF95AA6B5D017001B1.roa
File: 40C4C0EC07AA11EF95AA6B5D017001B1.roa (raw, json)
Hash identifier: NnA2U+RLJgKEj47ptfNhrxRH3QGvoT1ZR+NyEl1nzJY=
Subject key identifier: F0:F9:36:FD:E9:DE:76:A5:37:AC:94:35:4A:26:8F:6A:4B:92:A6:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B366
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40C4C0EC07AA11EF95AA6B5D017001B1.roa
Signing time: Wed 01 May 2024 11:02:08 +0000
ROA not before: Wed 01 May 2024 11:02:05 +0000
ROA not after: Sat 11 May 2024 11:02:05 +0000
asID: 136950
IP address blocks: 154.213.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45926 (0xb366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:02:05 2024 GMT
Not After : May 11 11:02:05 2024 GMT
Subject: CN=66322130-6962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:de:4c:ad:58:51:14:8d:70:b4:ae:69:7d:
a8:1a:b6:85:f7:59:0e:25:74:34:3d:c6:9d:f0:84:
24:f4:0e:23:92:7f:07:6f:18:69:6c:ce:03:f4:c4:
ad:a2:8d:d9:5a:f3:8b:9e:83:7e:bc:4c:b1:1c:e9:
7a:c9:25:1b:c5:8c:d7:a9:15:27:8b:18:88:1e:0b:
81:04:b9:25:dd:77:bc:1e:71:9f:61:a4:cd:eb:c2:
0e:84:1f:43:a4:22:a9:ed:88:bf:05:bc:bd:65:51:
14:7b:cd:b7:02:3b:06:81:fb:75:51:f6:02:ce:29:
28:12:57:78:57:bb:26:83:a9:e3:e5:11:5b:1e:56:
47:4a:23:98:43:15:30:d6:99:87:b0:07:3c:a7:d4:
75:39:d9:20:24:79:5c:d1:85:d4:76:26:58:e4:37:
54:7d:b9:55:b3:e0:14:ba:4b:8d:1f:03:64:e6:02:
41:4d:6d:af:0d:35:7a:7f:e8:2d:0a:39:77:46:a9:
01:34:17:2a:73:62:9d:23:f5:f5:5f:de:1d:f5:90:
3c:65:04:73:bb:49:b9:af:15:57:a5:26:78:c0:f9:
fe:6f:bb:2c:32:81:8a:6b:c0:c5:02:d7:c7:c1:a0:
98:f3:db:ad:05:67:8b:71:c2:f7:3b:a7:b5:9c:f1:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F9:36:FD:E9:DE:76:A5:37:AC:94:35:4A:26:8F:6A:4B:92:A6:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40C4C0EC07AA11EF95AA6B5D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:1f:72:6f:ad:31:7a:6f:ca:f0:86:e2:ea:ea:e0:da:72:d7:
8c:c2:10:ce:c6:72:c8:9a:66:de:0b:8a:82:ea:bd:bc:95:88:
a7:26:63:9b:f1:c1:63:46:e9:ac:72:7b:00:ed:28:cb:f1:6a:
76:a6:c9:b3:76:15:ef:a2:80:55:01:3b:05:01:e4:4f:c3:c2:
63:fb:fb:1f:98:23:09:86:52:0b:9f:2f:e5:3a:f5:23:07:5f:
49:35:20:6e:2d:ee:65:06:17:f5:b8:af:f0:23:dd:99:78:58:
50:b4:2b:e9:45:11:54:c6:94:d5:5b:81:1b:04:2d:39:40:e1:
51:10:fe:41:08:a7:19:6e:13:3d:83:f2:4b:ce:e3:d8:87:57:
99:bd:3e:91:b7:b0:17:42:02:10:2a:c2:8a:22:41:5d:93:77:
cc:6c:64:bc:10:9a:82:50:0c:ec:b4:8a:f2:f1:12:4c:c7:bd:
d3:e9:63:5d:ea:a5:04:42:47:a7:a4:37:1c:9a:07:06:9d:bd:
e5:d4:c6:0d:b6:50:7b:6d:d4:57:30:dd:24:66:f2:c1:be:6b:
4b:e0:b2:47:8e:81:19:a5:40:91:ab:c9:b0:c1:43:53:77:67:
66:e6:fe:ec:c1:be:90:37:c3:48:11:74:77:9f:fe:a4:ec:35:
54:66:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:47 2024 by rpki-client on console-fra.rpki-client.org