Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6531131606DF11EFB381C06B017001B1.roa
File: 6531131606DF11EFB381C06B017001B1.roa (raw, json)
Hash identifier: rWqiKlWSjdgsQw2K7cwFarMDrvTKYzinhj6AKastGdA=
Subject key identifier: 9A:1C:17:CE:BF:27:D6:7B:91:3E:DF:52:61:93:87:A7:47:A4:6C:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6531131606DF11EFB381C06B017001B1.roa
Signing time: Tue 30 Apr 2024 10:50:02 +0000
ROA not before: Tue 30 Apr 2024 10:49:58 +0000
ROA not after: Sat 11 May 2024 10:49:58 +0000
asID: 63888
IP address blocks: 154.205.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45815 (0xb2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 10:49:58 2024 GMT
Not After : May 11 10:49:58 2024 GMT
Subject: CN=6630ccda-a569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:95:67:b4:2f:94:8e:07:b0:f5:9d:4c:1e:
08:50:c6:b7:77:87:fe:08:f7:e6:32:ca:ed:ca:30:
66:65:95:65:f6:93:12:17:31:2d:fe:da:2f:f7:5f:
8d:8d:d4:1b:fc:38:55:49:99:3f:78:00:4f:98:2b:
47:62:8d:36:6a:68:f8:9e:c5:32:98:11:8f:e1:39:
cc:e2:9d:3c:61:77:00:6e:10:b7:1b:8b:2e:0d:ae:
7e:aa:f1:e4:cb:9e:18:d1:e4:87:82:b9:26:dd:dc:
a8:22:8f:c2:23:7b:b6:32:af:e6:27:36:fa:e0:11:
a5:63:63:a8:4e:ff:e1:6c:a7:04:e8:f4:7d:39:64:
a3:1d:f0:d8:da:ec:31:71:cd:a1:f9:4e:32:d3:ab:
e7:e6:81:a4:d2:24:1c:1f:d3:4c:37:68:b0:5e:06:
be:fc:7b:cc:0d:74:bc:46:a9:11:e4:a6:29:1c:4b:
8b:4c:59:7a:9c:46:27:68:75:9f:44:54:21:63:fc:
fe:ad:83:78:54:f6:d5:17:31:8a:4b:fc:43:42:d8:
40:aa:6f:5f:d8:7e:46:70:6d:ed:6e:3f:b7:3d:39:
64:82:9b:88:b6:e1:5d:d0:82:92:a0:b2:ca:b5:48:
b4:0d:4a:f8:a8:6e:71:b1:d2:d2:9c:bd:95:08:3e:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1C:17:CE:BF:27:D6:7B:91:3E:DF:52:61:93:87:A7:47:A4:6C:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6531131606DF11EFB381C06B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.32.0/20
Signature Algorithm: sha256WithRSAEncryption
32:c2:b5:11:4a:08:ef:ef:73:a6:f3:70:77:f4:38:9c:b3:cd:
3c:9e:54:94:6d:f4:70:a2:9d:96:c7:d3:34:fc:94:d7:8d:39:
f0:cb:ef:cc:af:83:ea:e9:bc:3e:e9:d1:90:13:17:b4:e2:f4:
b4:54:db:b1:66:1d:b1:15:a6:4c:a9:46:94:4b:17:e5:d5:d4:
b2:a4:74:05:5c:c9:17:63:7c:48:00:d0:06:98:9a:05:7e:08:
84:14:18:30:42:a1:6c:f2:6c:43:4b:e5:56:46:fa:a8:9e:eb:
e8:62:03:5c:36:68:11:8c:1d:ab:e4:31:9c:ec:b1:80:68:46:
0d:6c:ae:a4:5b:45:53:30:7e:58:af:5b:e6:07:95:54:47:4e:
01:0d:16:83:77:85:ad:9d:4f:dc:dd:21:84:0d:2a:dc:8d:a2:
3a:96:50:45:a0:14:eb:ac:0e:15:26:b2:ec:32:cb:3b:90:ea:
3c:25:ea:b4:5a:1e:93:f5:b8:68:fd:d7:26:9f:08:dd:11:19:
5d:cb:22:4e:3d:58:67:8a:33:4c:8a:f7:57:d1:dd:e9:9f:1a:
8a:61:f3:7b:09:3c:43:67:5d:c8:6b:00:09:17:80:e9:57:ab:
2a:9d:39:b8:ee:45:ff:dd:20:67:8d:16:19:ed:eb:8a:e4:f0:
ca:23:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:20 2024 by rpki-client on console-ams.rpki-client.org