Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4956CF04090111EFAE87224E017001B1.roa
File: 4956CF04090111EFAE87224E017001B1.roa (raw, json)
Hash identifier: 1wMTwXFcZGVTRHVBQuIpufezxqJkm/r+S97EH90ipLw=
Subject key identifier: 81:82:6C:FC:DA:07:F4:09:92:8E:E5:D8:C2:51:B9:F9:65:88:69:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B421
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4956CF04090111EFAE87224E017001B1.roa
Signing time: Fri 03 May 2024 03:57:40 +0000
ROA not before: Fri 03 May 2024 03:57:37 +0000
ROA not after: Sat 11 May 2024 03:57:37 +0000
asID: 39600
IP address blocks: 154.202.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46113 (0xb421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 3 03:57:37 2024 GMT
Not After : May 11 03:57:37 2024 GMT
Subject: CN=663460b4-ba45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5b:f6:7b:ad:b4:ee:1f:6a:3e:e6:6a:a1:42:
86:53:41:0a:0a:05:11:f8:22:7d:fa:31:fc:81:6a:
d5:36:c1:2f:ee:77:70:a9:59:44:ef:51:af:21:0c:
a8:06:fc:eb:b0:46:85:09:d8:e5:7b:33:d3:88:09:
e7:dd:5e:75:73:94:a4:18:22:13:ed:94:45:0a:a2:
a6:d0:65:f5:70:6e:04:a1:1a:90:ac:41:f9:6b:30:
e4:2c:65:ca:9f:e8:ff:be:c0:0e:1a:2b:9f:fb:db:
48:31:ed:0f:80:a0:b7:37:f2:0f:65:36:ef:37:ef:
fb:4e:f6:b5:55:82:2e:38:10:9f:2a:f7:bf:4f:78:
b8:6d:fe:8b:32:61:f4:f7:22:bf:5f:dc:cd:cd:5f:
af:7b:b5:b8:67:9a:af:26:b8:db:4d:5c:b1:8e:06:
ff:96:7d:fc:b8:d3:79:0e:42:51:35:0f:62:73:9b:
0c:83:fd:90:9e:1f:8d:e1:43:7c:b3:be:2b:c4:2f:
bb:e0:f9:b9:80:c2:40:ae:f4:52:62:7e:42:de:22:
c0:a8:91:01:31:ee:91:8b:51:64:5a:e1:4d:3b:e1:
ff:cc:ca:37:77:5d:70:b2:db:05:cc:95:de:d0:40:
00:57:76:9e:ba:0f:08:07:bd:3e:39:a6:32:f0:0e:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:6C:FC:DA:07:F4:09:92:8E:E5:D8:C2:51:B9:F9:65:88:69:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4956CF04090111EFAE87224E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.16.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:cb:cf:a0:9b:aa:25:90:f8:5c:46:12:26:db:dd:e3:69:28:
4b:b9:53:38:ed:de:31:74:d6:55:56:f8:b8:2c:1a:5e:7f:1f:
f7:f5:04:8f:b1:df:db:d3:9d:cf:d2:50:74:fd:16:c9:6c:bd:
a2:ac:a4:bd:88:0e:ea:b8:c8:21:b2:c0:dd:f5:22:bf:b9:86:
70:02:5b:1f:ba:e9:aa:af:1e:65:e9:46:9d:31:23:54:d7:d5:
ab:25:0a:df:f6:f9:af:31:26:68:9b:53:9c:0d:fc:d0:0d:cc:
b1:13:6a:f4:af:94:dc:89:c9:a1:e0:3f:4b:51:dd:1a:10:8e:
43:dc:8c:bf:be:f8:bb:a3:0b:72:e0:79:70:74:7d:38:0f:8d:
55:6a:3f:02:86:fe:b2:7f:68:eb:70:68:4d:9c:50:3e:c5:40:
4f:53:69:22:85:60:ca:27:61:a3:63:03:e6:1e:9c:8b:eb:d2:
a2:16:1a:a4:12:c0:8e:3b:c8:28:03:ed:b8:b6:11:75:9c:7f:
01:17:2d:8a:ed:e3:e8:01:47:82:e3:a0:4f:63:99:4f:97:a6:
63:66:3e:27:9b:c6:95:48:5c:7d:85:b8:69:9e:2c:f5:61:bc:
75:e4:0a:f4:2c:07:cb:80:b3:02:85:ef:8a:63:65:f3:00:bf:
d6:a0:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:20 2024 by rpki-client on console-ams.rpki-client.org