Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66FEAB7A0DB711EFA212972C017001B1.roa
File: 66FEAB7A0DB711EFA212972C017001B1.roa (raw, json)
Hash identifier: 53L1g8sLxgCWjWQSfEOr0i17HHZfQCEWQyibFv1OVrw=
Subject key identifier: 41:0C:C4:6F:BD:57:42:CB:45:64:BD:C4:F9:F3:A2:0D:4D:60:57:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66FEAB7A0DB711EFA212972C017001B1.roa
Signing time: Thu 09 May 2024 03:51:23 +0000
ROA not before: Thu 09 May 2024 03:51:20 +0000
ROA not after: Sat 18 May 2024 03:51:20 +0000
asID: 137443
IP address blocks: 154.218.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46517 (0xb5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 03:51:20 2024 GMT
Not After : May 18 03:51:20 2024 GMT
Subject: CN=663c483b-d869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:24:d4:42:35:33:15:6e:c7:4a:29:22:30:
e8:95:b9:1a:25:c9:41:cc:20:69:71:50:73:a0:3e:
bd:a3:1f:58:af:bd:35:77:5d:07:90:93:a1:ef:38:
51:2f:fd:16:9c:95:7b:81:48:f1:22:d2:58:5a:8b:
58:a4:12:ce:71:a6:f7:be:98:d6:77:c4:c0:0f:12:
97:c1:7d:03:0c:96:f4:62:d2:9c:43:4b:db:69:a9:
43:20:82:c8:c6:b5:15:59:45:8f:6a:e6:91:24:ad:
4f:a4:62:ce:95:14:02:92:c2:63:87:e0:e6:43:99:
98:65:e1:b1:1c:60:cb:9f:6f:3b:7b:77:45:ab:a6:
25:17:8b:70:4a:fe:02:60:e0:6e:f2:49:46:57:2b:
19:35:57:95:3f:32:2f:de:d0:fb:af:25:b2:3a:6b:
13:f4:fa:34:0c:28:71:de:ff:ae:fb:1e:43:85:3d:
9b:f9:d7:6c:eb:9c:83:e7:5a:b3:0a:98:15:7a:6c:
69:d3:79:1d:4e:7a:42:fe:ba:31:a8:52:82:61:68:
35:48:c6:a5:4b:24:dc:b6:55:bb:33:e9:22:f8:e4:
23:70:db:2f:be:49:43:36:1a:70:b8:0c:bb:6b:79:
25:80:df:af:d0:99:12:ef:05:d1:15:56:36:9e:d7:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0C:C4:6F:BD:57:42:CB:45:64:BD:C4:F9:F3:A2:0D:4D:60:57:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66FEAB7A0DB711EFA212972C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:aa:b0:2f:50:98:73:ea:07:26:1a:2c:3f:19:b5:f4:34:23:
e4:fd:1e:0a:87:a2:5a:b5:b7:b1:3c:bc:ad:e4:24:5d:93:42:
62:12:8a:fb:e1:70:cf:55:01:80:b0:93:98:ba:d5:80:8f:06:
4a:63:47:04:be:42:c1:27:29:1a:32:1e:45:b5:2f:8b:dc:46:
1d:67:cf:dc:02:6e:6b:78:05:bf:6f:b9:2a:30:13:d5:e6:da:
ca:bf:7c:52:4c:cc:de:2a:02:be:f3:38:4f:f7:f7:09:5e:aa:
e9:1d:79:c1:fa:3f:31:b7:cc:29:aa:bd:02:3e:55:1c:ca:f5:
97:c7:05:cc:a7:4f:9f:fc:4b:46:93:55:99:23:fb:84:92:3b:
3a:a8:50:da:9d:f1:eb:63:70:e6:43:d5:79:93:cf:b3:84:f0:
01:86:e6:ef:cf:2d:9a:89:76:84:60:d9:d5:4b:ac:ef:64:96:
d2:53:e8:b6:1e:f7:9f:02:54:e2:b8:17:c0:fc:d8:f5:7e:f9:
81:1b:fe:a5:d7:89:f4:dd:d9:46:bf:ca:e7:54:bf:ba:e6:b0:
b2:11:19:82:8e:9c:30:11:ca:6d:8e:52:47:96:2f:11:89:7a:
aa:be:20:bc:62:1e:2a:5a:0b:ba:be:4c:b3:23:7b:0f:e6:ef:
0c:7b:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:08:29 2024 by rpki-client on console-ams.rpki-client.org