Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52DA6BFA27C211EF8138C3287DDC24C2.roa
File: 52DA6BFA27C211EF8138C3287DDC24C2.roa (raw, json)
Hash identifier: nlnjLE7Z8NZouqj5b/C2eRfKx8AC7P3WOSp7jmZDP+g=
Subject key identifier: EE:DE:E1:E8:54:A1:F7:A3:12:68:50:98:49:49:44:99:2B:3E:6D:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C17A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52DA6BFA27C211EF8138C3287DDC24C2.roa
Signing time: Tue 11 Jun 2024 07:15:04 +0000
ROA not before: Tue 11 Jun 2024 07:15:01 +0000
ROA not after: Thu 20 Jun 2024 07:15:01 +0000
asID: 139811
IP address blocks: 154.210.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49530 (0xc17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 07:15:01 2024 GMT
Not After : Jun 20 07:15:01 2024 GMT
Subject: CN=6667f978-7b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:b2:e9:58:13:ca:b1:c4:d7:dc:88:f7:15:
7c:89:bf:b6:62:d3:ef:ba:2a:be:54:98:94:d5:c9:
50:0d:1d:ae:c3:90:1f:bb:e8:be:fc:9c:5f:e2:30:
67:d6:0b:99:f8:ec:fc:7f:7f:a8:40:94:c4:da:73:
db:64:be:0d:2d:f2:a3:8e:ac:49:ba:22:75:10:f6:
1f:23:a6:bd:bb:70:eb:4d:ea:05:f4:1b:93:c2:a7:
a6:a9:db:91:09:8c:63:0e:58:65:ad:ae:7b:76:6b:
a2:0f:1f:66:94:54:92:13:2c:63:cd:45:e5:95:b8:
31:16:90:32:7a:32:8b:13:fb:79:27:ae:9b:88:a0:
ca:b8:df:d2:ad:d4:9a:e8:e5:04:96:58:e9:a1:d9:
51:04:90:ec:41:ef:41:a9:27:0c:97:dc:c7:3c:a6:
32:0c:ff:9d:bb:97:36:27:29:72:6d:35:2b:73:bb:
2f:88:69:fc:24:15:fa:a1:14:91:08:b0:77:10:77:
bc:a9:a4:37:41:f9:48:40:51:01:b9:fc:e7:df:fa:
8f:29:f4:4b:64:ad:f7:1a:de:3c:5a:1c:d5:88:78:
b4:15:0d:8d:c3:e8:72:ff:bd:bb:52:01:1b:5d:f4:
d9:cc:66:9f:68:6b:38:fc:bf:c4:54:05:de:d7:93:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DE:E1:E8:54:A1:F7:A3:12:68:50:98:49:49:44:99:2B:3E:6D:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52DA6BFA27C211EF8138C3287DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:83:b0:5d:70:d3:fa:5d:22:ea:cd:91:a9:dd:00:71:12:12:
1e:d2:d9:a4:ab:77:4c:17:1d:39:b3:1a:1c:be:ce:24:e7:d5:
2b:ee:da:90:d5:fe:2d:cd:57:d6:e4:98:cf:48:22:07:4a:ea:
a4:a4:f9:ef:b5:23:12:d7:79:b0:77:c3:c7:b0:f2:89:69:42:
95:c2:10:d4:ee:77:1c:ef:d8:e6:3d:b3:a1:7d:fe:da:6b:6a:
0e:a0:48:39:89:fe:6c:90:98:96:de:08:4f:1a:44:db:53:c7:
cd:f6:35:14:27:b3:63:5e:de:1f:ce:e1:47:d7:c9:65:c4:2a:
bc:08:d2:6f:6c:a5:2d:e0:3a:a9:e9:45:31:bb:1e:a5:5a:a8:
66:c1:a1:41:62:4b:cf:ec:62:ae:70:63:6f:29:8f:32:77:33:
bd:a6:6b:5d:7e:3b:7e:f6:7d:87:70:d7:d6:9d:f7:06:30:56:
6b:6a:17:9a:97:c2:d7:55:60:fc:29:c1:ad:73:1f:a9:36:51:
28:3a:e8:31:4d:39:8d:f1:55:af:d3:13:4e:78:4d:a6:4b:1b:
cd:2d:28:a5:15:a9:ea:0e:91:33:49:56:bc:71:f2:13:12:b3:
a3:8a:77:9a:91:55:df:36:4e:a9:8b:50:38:83:d5:0c:1f:2d:
2d:80:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 12:17:51 2024 by rpki-client on console-ams.rpki-client.org