Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51271F9407A911EFB4FCD156017001B1.roa
File: 51271F9407A911EFB4FCD156017001B1.roa (raw, json)
Hash identifier: 7uf8ShTY4Ojnvgp6AD45oV1tKVpMN+RhcUWD464R4WA=
Subject key identifier: 0B:EC:07:DD:A2:13:4E:8C:E6:00:70:72:A8:84:62:10:3F:85:DC:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B35C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51271F9407A911EFB4FCD156017001B1.roa
Signing time: Wed 01 May 2024 10:55:26 +0000
ROA not before: Wed 01 May 2024 10:55:23 +0000
ROA not after: Sat 11 May 2024 10:55:23 +0000
asID: 132325
IP address blocks: 154.213.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45916 (0xb35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 10:55:23 2024 GMT
Not After : May 11 10:55:23 2024 GMT
Subject: CN=66321f9e-b83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:68:21:ef:ff:02:97:e6:7e:04:1f:01:fa:
7b:bb:c0:f5:2e:20:db:69:f1:d9:53:c8:f2:62:92:
84:61:bf:52:bf:0b:9c:ce:70:8a:9e:5e:97:2e:73:
62:1d:86:31:7b:79:a4:47:b4:bc:8a:03:e9:ad:dd:
ce:1d:d8:66:dc:4c:84:7b:14:be:7f:2f:86:39:52:
f1:09:e1:ca:de:95:bf:96:9e:ee:5c:c0:48:ba:d2:
ed:51:6b:bc:2d:9e:c4:ca:c4:3a:9d:79:69:62:a6:
b4:39:7d:5b:d5:38:ba:e0:f4:9c:52:47:60:32:06:
32:a7:72:56:45:c6:25:03:a4:ea:5d:11:d3:88:11:
f0:8b:d5:38:a6:60:20:7e:34:22:bc:8e:77:08:c9:
e1:83:86:33:96:79:7b:de:83:06:03:8a:b4:13:0a:
4b:23:dd:06:a5:50:dc:69:6c:32:73:cb:99:00:90:
19:b1:c2:54:41:9e:0a:77:88:12:b6:11:79:a2:e8:
8b:3f:87:43:21:63:a9:fa:a0:9b:c7:a6:f6:32:64:
38:32:61:28:c0:a7:08:28:32:81:56:8e:de:50:7e:
fb:b2:6c:fe:77:93:4c:65:a9:ec:1f:26:b4:26:93:
e9:07:7c:4b:01:dd:82:e4:32:da:b7:7b:c7:cb:8a:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:07:DD:A2:13:4E:8C:E6:00:70:72:A8:84:62:10:3F:85:DC:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51271F9407A911EFB4FCD156017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:63:c0:68:b5:e2:8a:28:97:06:f8:60:ca:fb:90:17:94:8f:
9c:a1:99:9f:e5:e4:45:08:27:de:ae:9d:8a:c0:28:23:55:c8:
b0:75:c3:a6:9d:85:85:73:d5:69:3c:9a:e8:8b:af:21:87:29:
ab:ee:74:73:cf:da:ce:9a:28:2c:88:74:31:f6:5f:71:6d:e5:
c5:ed:8d:92:52:44:65:32:10:79:ca:93:8b:54:23:0c:89:2c:
8c:0e:e0:63:f0:d6:e3:85:66:25:43:df:f6:7e:fb:83:d0:41:
46:e3:cb:99:3b:5d:3d:5a:f6:e8:e0:bf:93:5e:9c:5c:72:3e:
9d:d2:a0:d8:98:8e:a0:8b:cb:f5:e9:8f:9b:f8:00:9f:89:90:
10:01:d1:bd:ad:64:ba:f6:54:f8:b1:81:f3:00:27:8e:dc:4f:
4e:46:fd:b4:7c:4e:6c:49:69:8f:1d:52:ec:f4:b6:0d:cc:dc:
7a:7f:dd:56:8c:9b:1e:ae:16:60:fb:4e:fd:53:fd:d9:96:a4:
e8:64:30:64:10:bf:e2:15:33:16:07:29:58:10:b4:0b:f9:ff:
e8:a4:7a:88:89:03:06:81:ac:cd:33:31:db:83:91:d9:fd:53:
d9:29:5a:8f:b1:72:99:fd:e3:c3:31:6d:43:d9:cb:9c:de:20:
4b:b1:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:20 2024 by rpki-client on console-ams.rpki-client.org