Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/619A31DA0B6F11EF85FE3613017001B1.roa
File: 619A31DA0B6F11EF85FE3613017001B1.roa (raw, json)
Hash identifier: wAHOjEQarlwZ2nDbRFyBu5WXD3r5vkuXgZ62dXnVdec=
Subject key identifier: 0F:6E:36:17:55:D7:54:CA:24:68:D2:A4:87:76:FC:86:D0:5D:5D:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B516
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/619A31DA0B6F11EF85FE3613017001B1.roa
Signing time: Mon 06 May 2024 06:10:48 +0000
ROA not before: Mon 06 May 2024 06:10:44 +0000
ROA not after: Thu 16 May 2024 06:10:44 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46358 (0xb516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 06:10:44 2024 GMT
Not After : May 16 06:10:44 2024 GMT
Subject: CN=66387468-d626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:34:3a:03:57:c6:0c:2e:56:25:61:cf:be:
b8:7d:4f:66:23:a1:fb:b0:31:16:84:e0:6f:ea:bd:
43:92:93:ad:85:9b:9b:69:5d:79:58:81:87:39:71:
2e:3c:fa:af:f2:85:d8:0a:2b:57:7e:6f:fd:c3:1c:
36:43:dd:00:4e:f5:b6:af:08:ad:d4:d0:01:d8:ea:
5b:15:0e:8c:81:3a:57:0f:16:2d:c2:fd:28:17:f9:
9c:f2:07:e8:3b:4a:6c:d7:0e:51:f8:22:af:72:17:
70:d1:18:f0:01:26:a3:06:05:b5:43:cf:f0:27:ec:
79:f6:bd:95:e5:b6:f3:3b:58:9f:ce:80:b9:fd:1c:
50:55:40:33:2b:c5:02:ea:ee:ca:6f:06:17:5e:a6:
00:c9:29:26:63:11:92:33:14:02:2e:76:7b:29:b7:
12:38:44:f4:d6:5d:73:2e:ed:33:e2:4c:2a:68:6b:
e5:c9:11:29:bb:9e:c2:0c:28:4f:73:93:fd:33:af:
b8:73:dc:f6:49:0d:83:46:fc:aa:6b:fb:20:bb:06:
a0:42:a1:9a:70:95:e4:5f:66:69:dc:ba:ec:27:08:
0a:28:e8:1f:b6:e6:03:bf:56:08:fe:e4:ce:06:1f:
71:3d:97:0e:2e:ca:82:1a:03:ad:43:43:c4:09:f6:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:36:17:55:D7:54:CA:24:68:D2:A4:87:76:FC:86:D0:5D:5D:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/619A31DA0B6F11EF85FE3613017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f0:d0:c3:14:3b:8c:c6:c9:38:7c:a8:f9:f5:72:f9:83:81:
a2:5b:38:51:e0:da:8e:5c:a3:05:37:c0:d9:bb:ed:c2:67:83:
0f:8b:bc:48:0f:14:79:b0:77:ec:69:60:a9:ba:af:a5:4e:f0:
4a:af:25:a5:b1:b8:c5:a2:93:96:13:06:52:d9:75:08:80:b0:
60:38:ae:18:7b:33:45:0f:02:16:48:dd:07:0a:fd:f6:49:e9:
c5:50:33:f4:6b:2b:9e:5d:ce:a3:65:f4:0c:d9:91:d4:3e:b0:
27:39:3d:dc:95:d3:85:82:35:15:37:fa:15:47:85:fe:26:eb:
24:b7:ed:0f:92:02:e6:7b:b6:82:a0:2b:d3:0a:d6:be:d6:bb:
4a:0e:a3:ef:72:d8:cb:c6:26:dd:6d:22:d9:f0:2b:f9:a8:c3:
49:80:a4:fa:c4:16:59:af:a9:1e:28:c2:17:3c:68:65:c5:11:
8b:ac:a3:22:20:85:ad:f0:d3:71:45:a1:28:17:b4:f2:4a:bf:
63:b1:93:b9:6b:ee:db:7f:80:48:f4:35:5d:4b:2e:02:32:d8:
2f:81:40:a2:c0:c6:1d:b3:10:25:c7:43:a6:aa:18:77:54:63:
07:d7:67:47:35:45:05:5a:46:1a:e0:11:88:bf:e4:b7:b0:7f:
17:a4:b7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 07:46:20 2024 by rpki-client on console-ams.rpki-client.org