Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B66C56607AB11EF89D98C67017001B1.roa
File: 5B66C56607AB11EF89D98C67017001B1.roa (raw, json)
Hash identifier: 2fkUYmy6K/HtFDpkvCWfBcwIIjEik/yiYHYjL0FPjVY=
Subject key identifier: 9A:0D:13:F7:05:2E:A5:13:48:C6:FC:F6:F7:5D:A3:3C:A0:E5:85:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B372
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B66C56607AB11EF89D98C67017001B1.roa
Signing time: Wed 01 May 2024 11:10:03 +0000
ROA not before: Wed 01 May 2024 11:09:59 +0000
ROA not after: Thu 16 May 2024 11:09:59 +0000
asID: 139471
IP address blocks: 154.220.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45938 (0xb372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:09:59 2024 GMT
Not After : May 16 11:09:59 2024 GMT
Subject: CN=6632230a-af10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:27:05:c3:b3:81:9a:e0:3b:7e:7c:9a:bb:
ac:80:29:d7:7d:22:04:93:f4:e1:fe:1f:a5:fd:82:
eb:5e:6e:23:a4:4b:41:e4:3b:49:33:ad:87:c3:d3:
b5:d6:a6:16:d8:c3:22:db:21:db:41:e0:7f:06:71:
23:26:4d:fe:73:71:a6:6a:af:84:d2:59:74:3c:08:
dd:98:47:e0:1e:e8:19:b2:ba:fe:3d:da:6c:8a:05:
d5:8c:a2:25:c4:7e:6a:af:fc:f2:48:16:11:e1:10:
9a:01:01:2e:8d:9c:7c:34:8a:04:00:1d:21:7b:e3:
16:b8:72:4b:39:5e:51:37:51:11:b9:b2:47:fa:21:
0b:13:ef:30:ca:e9:86:5e:37:32:76:91:e1:b1:c6:
59:92:ce:2f:ca:be:64:bc:72:4f:61:2e:4d:42:5b:
6b:09:6d:e4:c4:3a:41:a2:14:ef:ea:26:d0:4e:66:
98:9f:67:d3:43:ef:79:db:84:c2:40:2e:77:15:e8:
8b:ff:4a:5e:75:44:76:d3:e5:58:f3:b1:3d:3d:0a:
b2:7b:38:8b:35:3b:00:75:d0:4d:6f:23:17:5d:fd:
63:83:29:f4:06:ad:f4:b2:b8:91:c6:f3:d1:3b:92:
19:9e:20:c2:99:55:5f:83:eb:15:0c:c7:47:2b:30:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0D:13:F7:05:2E:A5:13:48:C6:FC:F6:F7:5D:A3:3C:A0:E5:85:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B66C56607AB11EF89D98C67017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.224.0/19
Signature Algorithm: sha256WithRSAEncryption
75:9b:f5:ad:09:65:72:a5:65:d7:19:41:51:d7:9e:08:ac:e8:
a1:fc:34:21:0c:04:4c:f6:cf:af:5c:3d:74:11:ea:98:3a:64:
f1:f6:79:46:f1:8d:0b:cc:a6:6c:01:25:dc:81:06:e3:d6:36:
8d:cd:30:f0:5c:bc:61:ca:a6:83:55:3c:6f:15:7f:eb:c2:f2:
1c:68:13:82:30:ed:ae:b0:4d:3f:f6:f9:76:87:77:8d:e5:8f:
95:bd:3b:51:e5:df:1a:bf:dc:60:87:f8:4e:12:40:26:88:26:
a9:3a:67:ca:80:56:19:fb:67:60:94:51:27:9d:75:7b:dc:05:
f2:e8:35:36:00:ba:d9:2c:f9:43:0e:e2:6a:fc:bc:26:75:f6:
29:e3:05:2e:97:d7:34:2f:c6:94:6e:f5:ab:e6:b5:f5:94:34:
d0:41:43:35:b5:22:1a:da:43:9c:de:08:0f:e8:de:8e:c5:9f:
cb:cb:74:9f:b0:6f:26:a5:c2:9a:7d:d5:ec:cb:f0:ad:e2:02:
0a:ea:b8:72:c2:c9:54:ec:08:ae:ef:d3:a2:29:90:d6:60:41:
fb:f0:75:92:ab:ec:56:c6:23:48:e5:cc:cd:26:c3:bf:c7:bc:
c9:d2:30:e1:4f:c6:fb:b8:ff:e9:4d:77:bd:b0:d2:c7:7d:54:
c7:00:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:22:08 2024 by rpki-client on console-ams.rpki-client.org