Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/422E3CC20C1111EFB2693E31017001B1.roa
File: 422E3CC20C1111EFB2693E31017001B1.roa (raw, json)
Hash identifier: vDsIjnjnLWoJGHFpnroI2N0QDkNH6anlfbsgnRTr+yM=
Subject key identifier: 91:84:E7:13:6C:A0:C2:C7:38:FF:96:97:31:E3:93:DB:23:51:CB:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B55B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/422E3CC20C1111EFB2693E31017001B1.roa
Signing time: Tue 07 May 2024 01:29:34 +0000
ROA not before: Tue 07 May 2024 01:29:30 +0000
ROA not after: Thu 16 May 2024 01:29:30 +0000
asID: 133180
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46427 (0xb55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 01:29:30 2024 GMT
Not After : May 16 01:29:30 2024 GMT
Subject: CN=663983fd-a9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:e7:e0:4d:4f:83:c2:b8:c1:a7:09:17:2f:
de:bd:72:7e:76:52:0d:ce:bd:77:67:e6:01:99:06:
8a:8b:be:db:1b:22:ae:f8:e1:b6:53:1d:70:8e:50:
30:6d:c6:32:ea:a7:77:33:77:e4:6e:75:5f:71:39:
12:f8:09:aa:59:96:c4:82:3f:f7:1a:41:af:a4:28:
a7:8d:44:2e:a7:68:d7:10:32:ac:72:45:21:b3:45:
3e:3b:b2:bf:87:ea:0a:5e:82:b5:38:a5:9c:cd:9a:
27:42:c5:ff:fa:24:b9:14:09:22:50:79:30:5a:44:
95:29:fb:13:c3:a2:2d:40:56:f7:f8:40:00:bf:37:
08:0c:06:6c:d7:ca:7d:94:ea:32:44:00:ff:dd:b9:
fc:ec:a5:1a:68:c3:78:4e:8c:b3:3a:7b:cd:5d:33:
90:04:aa:5b:64:85:d3:57:e5:53:9f:6d:4b:80:f0:
ef:d4:87:28:dd:5b:5a:0d:c6:81:fb:da:d0:3e:dd:
42:d7:cf:2d:ea:6e:e0:34:7c:76:da:e6:13:53:e1:
9c:48:90:ee:13:11:ef:30:df:03:4e:5e:06:e3:5a:
59:4f:25:4c:8e:af:95:df:81:02:14:c5:5d:28:95:
18:aa:33:d7:f3:cf:a1:05:fa:ae:61:fe:51:6d:f7:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:84:E7:13:6C:A0:C2:C7:38:FF:96:97:31:E3:93:DB:23:51:CB:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/422E3CC20C1111EFB2693E31017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
d4:5d:1a:51:aa:fe:21:32:82:62:73:b3:af:54:c2:d6:c4:26:
90:07:d0:94:17:98:ce:58:84:4e:69:ee:86:6c:2d:32:8c:24:
76:0c:06:03:90:d4:78:e9:56:b1:d3:26:ae:37:f1:38:1b:7a:
10:49:16:d4:a7:30:fd:41:41:28:b1:2c:04:60:d4:c2:77:5a:
f8:12:4f:85:b7:49:95:33:2b:2e:c7:3f:a4:8d:4a:97:7d:5e:
a3:68:4d:68:8e:b1:1e:8a:de:b8:3c:a2:ef:7d:25:fe:44:d1:
96:d3:e8:c2:1a:28:e7:6f:0e:32:d5:5d:a5:78:07:80:5b:5b:
15:85:3c:9d:ce:27:c4:6b:8d:b2:60:97:3c:b3:f4:24:d5:8c:
61:0b:fe:34:0e:08:22:79:47:2c:ef:58:76:27:15:ae:9e:cc:
34:8a:54:05:2b:d3:65:8c:80:f5:74:09:3d:8f:1e:21:b3:7e:
c0:39:2f:ce:6f:c9:b7:99:98:b1:28:e1:9b:ef:ef:5c:f1:42:
98:d7:00:10:f7:0d:1a:6e:b8:24:df:91:7c:7e:dc:60:f2:40:
9d:4f:94:f6:6e:ee:a2:8e:1a:a9:9f:70:b4:8c:42:93:27:24:
5c:38:6a:93:08:a0:3f:99:ad:39:71:f9:95:f2:d1:24:8d:54:
a5:b3:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 08:57:53 2024 by rpki-client on console-fra.rpki-client.org