Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AE958860C1111EF8DB8D931017001B1.roa
File: 6AE958860C1111EF8DB8D931017001B1.roa (raw, json)
Hash identifier: 5sYqdumw/hUTlxRU3mlWanX/s1Pwp4digGYiLAZ/DnA=
Subject key identifier: 5A:D4:DE:0B:01:D5:97:58:A2:80:6E:62:25:4F:C0:AC:5D:9D:07:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B55D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AE958860C1111EF8DB8D931017001B1.roa
Signing time: Tue 07 May 2024 01:30:42 +0000
ROA not before: Tue 07 May 2024 01:30:39 +0000
ROA not after: Thu 16 May 2024 01:30:39 +0000
asID: 133180
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46429 (0xb55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 01:30:39 2024 GMT
Not After : May 16 01:30:39 2024 GMT
Subject: CN=66398442-63aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:24:4b:1e:1c:ec:26:19:c9:7b:ac:f3:96:
a7:4d:a8:e0:50:0e:da:95:2e:f7:c0:b6:75:26:a9:
4a:1f:16:66:77:c2:4b:fa:13:55:86:e9:55:88:d8:
1c:7d:fb:6d:65:42:f3:2b:a3:a1:2f:e4:16:93:7a:
91:e3:c9:c5:ac:82:dc:60:90:f0:43:a9:62:a8:42:
73:98:8e:05:4c:6d:54:1f:7d:8e:9f:03:1f:34:fc:
1a:c6:83:b6:c4:5e:51:35:02:86:6f:76:28:d5:e6:
bc:2f:8a:e1:a3:66:43:3c:31:14:c1:8d:e7:81:63:
79:9d:7b:12:19:a6:35:d8:25:98:4a:d7:f7:5a:c3:
1c:7c:0b:e4:9f:06:50:fd:80:cd:f6:87:80:38:35:
d6:13:53:04:7f:13:05:44:9d:92:86:04:98:13:04:
d9:e3:9f:e7:68:f2:c1:72:25:e2:05:d4:e9:7c:97:
91:71:c5:8d:7c:72:e8:d3:54:44:85:0e:72:3f:1b:
45:73:6c:a1:c7:9b:4c:57:78:b7:9c:2c:b3:80:24:
ce:be:01:c2:ab:29:02:02:a4:2b:15:bb:03:56:97:
96:ad:83:ce:92:e9:35:8d:32:f5:f8:10:89:04:d8:
d8:d2:eb:37:ea:f3:38:cd:54:c4:09:05:c3:f0:94:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D4:DE:0B:01:D5:97:58:A2:80:6E:62:25:4F:C0:AC:5D:9D:07:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AE958860C1111EF8DB8D931017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
cc:de:c1:ad:e2:f8:6a:37:21:60:01:4b:1f:32:6d:b7:79:0c:
70:9a:15:28:0a:26:48:b3:56:62:7d:f2:38:05:8a:3e:4f:f7:
ac:7f:0e:1f:4d:a4:bb:1e:be:11:fa:5b:ca:a4:de:5f:0b:70:
6f:95:d9:e8:43:01:8f:32:e0:85:1d:07:a9:01:93:ce:a9:33:
17:75:03:2a:bc:9d:16:9b:98:eb:45:1c:ae:85:4d:cb:3c:a1:
e2:6a:9c:1f:51:d7:cd:d4:44:ba:d7:ef:70:99:0f:7e:48:bf:
bc:04:6d:d8:69:42:9b:4e:e2:64:3c:1c:ff:12:bd:f0:57:35:
a8:3d:e9:dd:3e:6c:e4:e9:b0:a9:1d:b6:f5:7f:1d:07:d7:c8:
fc:26:cc:06:28:83:27:1b:02:26:57:39:62:2e:d5:a7:0c:89:
6f:06:3a:16:9f:67:32:2b:fc:89:49:2e:75:d1:c8:b6:c0:09:
b4:93:39:0c:a1:33:40:37:24:f2:9b:27:19:2a:c6:d0:2f:84:
b4:fa:cf:5b:69:0a:69:83:21:7a:95:76:0e:32:3f:27:66:bf:
4f:4a:69:e1:04:98:70:19:6d:e1:57:bb:ad:9f:fe:dd:12:8c:
9d:4a:1e:73:a2:4d:03:e7:25:09:0f:11:c7:22:55:a0:e6:6d:
d8:1e:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 07:46:20 2024 by rpki-client on console-ams.rpki-client.org