Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49EC090C0DCF11EF9B5DF06D017001B1.roa
File: 49EC090C0DCF11EF9B5DF06D017001B1.roa (raw, json)
Hash identifier: 6egoELskpeVPKSmleWo3ZwSpm7MpAkwTLKmkqqHtQdQ=
Subject key identifier: 3F:8F:A4:8F:35:83:11:9A:9A:0C:18:3C:3D:2A:2B:35:7E:A6:0A:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B623
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49EC090C0DCF11EF9B5DF06D017001B1.roa
Signing time: Thu 09 May 2024 06:42:22 +0000
ROA not before: Thu 09 May 2024 06:42:19 +0000
ROA not after: Wed 29 May 2024 06:42:19 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46627 (0xb623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 06:42:19 2024 GMT
Not After : May 29 06:42:19 2024 GMT
Subject: CN=663c704e-dc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ac:35:aa:3b:5c:54:e6:71:0d:f8:37:c1:e9:
29:04:72:f7:d1:8b:c5:39:26:15:58:19:66:da:e4:
9a:bd:1e:26:cb:35:41:af:dd:dd:f2:9b:57:1b:b8:
52:6a:4e:4a:83:cc:9b:d7:c9:3c:9c:e3:c5:5b:c8:
06:d4:b0:c2:c4:59:3a:be:0f:ce:cd:9a:5c:b6:84:
42:04:a8:6b:55:7c:91:3d:c1:c6:fb:37:7c:59:f2:
52:8b:ba:31:c2:58:af:52:68:da:74:51:0e:ca:83:
5b:f6:7f:47:76:79:43:3d:57:a0:9a:ec:87:fd:cf:
0f:47:a6:96:93:70:08:77:47:7e:56:19:9b:f2:5a:
dc:30:31:cc:d4:3b:2d:6b:ff:1a:0c:c5:c6:7b:8a:
6a:24:57:2c:c9:bd:82:cf:e5:2b:43:4c:c9:73:f2:
00:8d:ff:96:d4:04:71:44:e7:69:b5:50:8d:1f:70:
d1:76:2d:ab:46:28:60:ee:a4:61:db:dc:33:1b:45:
39:8a:1d:2e:ac:6e:9c:38:76:7d:fd:42:d8:fc:a3:
f8:c8:71:64:31:ee:b9:35:3f:8c:f9:ab:e2:e7:56:
6a:62:55:cc:0a:c6:7c:d3:15:69:df:aa:57:0a:d6:
8b:b7:a8:98:b1:5a:84:44:0b:94:96:43:fa:82:07:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:A4:8F:35:83:11:9A:9A:0C:18:3C:3D:2A:2B:35:7E:A6:0A:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49EC090C0DCF11EF9B5DF06D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d3:a6:f8:59:8f:74:0c:29:18:cb:90:a0:7a:e2:f3:c1:6f:
da:12:0c:1f:5e:20:2f:de:56:f7:35:4e:32:9d:e7:7a:53:f1:
b7:fe:0f:53:53:98:c0:b7:40:df:f3:e2:ad:94:fc:6d:1e:06:
5b:98:79:8c:a5:e0:9c:57:a3:77:8d:0b:0f:75:0f:4c:7b:c8:
1c:dd:56:b2:1f:f6:b2:c7:76:c2:19:08:86:f8:6a:d3:1a:ab:
d9:03:b6:32:9d:19:65:f5:7e:7e:25:21:d7:24:6e:94:a8:e3:
99:3d:88:4b:6d:8f:37:77:a7:66:47:2c:33:7b:72:77:4a:34:
f4:66:51:90:b4:a5:af:68:00:cb:cd:c1:d2:1d:c2:99:11:85:
e4:26:4b:6f:7d:de:8f:28:97:c9:33:f4:a4:79:0a:31:58:9b:
ae:58:05:27:a4:7b:85:9a:43:c1:7f:19:d4:10:52:9d:d8:1f:
8f:38:4b:72:b2:9d:b5:0e:27:da:91:38:92:b5:c6:5d:61:ad:
9c:c0:58:14:b1:ee:b5:64:e8:ef:ca:c8:91:5c:b0:24:99:60:
c3:f3:c2:22:fc:15:30:f6:14:25:01:f2:fc:f9:ee:df:8e:e2:
b2:3b:14:cd:de:38:eb:a9:58:2d:2c:8b:e5:1e:ab:39:0f:7a:
17:31:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 12:51:22 2024 by rpki-client on console-ams.rpki-client.org