Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75871BF60B7211EF9AF0022E017001B1.roa
File: 75871BF60B7211EF9AF0022E017001B1.roa (raw, json)
Hash identifier: LXVluoQhDNOr/hwkjBF7ad4p986wdIPBIyGrJXN7H0c=
Subject key identifier: 68:31:22:90:E3:1C:78:4A:D9:40:18:6E:E0:2D:6D:23:5A:58:25:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B526
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75871BF60B7211EF9AF0022E017001B1.roa
Signing time: Mon 06 May 2024 06:32:50 +0000
ROA not before: Mon 06 May 2024 06:32:46 +0000
ROA not after: Thu 16 May 2024 06:32:46 +0000
asID: 139646
IP address blocks: 154.212.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46374 (0xb526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 06:32:46 2024 GMT
Not After : May 16 06:32:46 2024 GMT
Subject: CN=66387992-4ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:d3:1a:c9:bf:b1:22:ba:39:99:c2:fc:00:
2a:b9:45:d8:08:78:9b:b6:5b:ee:77:bf:85:1e:df:
a6:1e:6c:a6:46:b8:4b:e7:48:45:00:ba:82:c4:cb:
21:09:cc:93:6e:0f:d4:96:f1:72:41:3b:50:27:65:
82:82:c0:06:1b:3e:d9:60:b0:20:c4:a9:4d:f4:a2:
8a:8b:3f:9d:93:c1:5b:ce:e6:35:10:e2:a0:6c:54:
f0:e0:c6:0a:be:da:cd:5a:dc:06:9c:5e:65:57:56:
a5:d8:41:5b:a0:b2:e9:ec:33:e1:84:46:b8:3c:16:
f7:a6:ab:df:48:79:f1:60:6a:79:a4:9a:fe:84:3c:
47:92:54:bc:2b:6d:0d:94:95:87:ed:4b:e1:dc:ee:
60:2a:f1:02:56:b1:9c:67:d3:3a:f0:0f:67:d3:e3:
17:0a:33:b9:10:b7:22:6a:bf:03:49:6b:88:ca:3b:
ef:96:97:45:13:d5:8c:af:e9:1d:90:5e:7e:6c:fb:
9d:82:49:be:ab:04:9e:41:52:24:2c:a4:e6:bd:e3:
b8:a6:1b:dc:5d:dc:c3:32:cf:e7:8f:4c:0e:df:f3:
f7:72:24:3b:84:d1:1e:d6:d4:66:89:71:ff:43:7a:
e4:d6:06:d2:45:ab:4c:57:0c:07:ce:94:d9:e8:c2:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:31:22:90:E3:1C:78:4A:D9:40:18:6E:E0:2D:6D:23:5A:58:25:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75871BF60B7211EF9AF0022E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c8:21:a6:ae:df:f2:c8:47:f3:6c:27:05:48:1c:6b:b7:0a:
c0:92:0e:9a:1a:71:1e:15:dc:5f:29:09:5c:90:43:de:e5:b5:
ed:8a:eb:ce:97:4b:60:b2:7e:fb:53:0c:55:ea:1e:33:66:31:
a8:11:61:9a:d0:c8:a7:c8:de:16:9e:77:da:66:41:3c:91:6a:
25:26:73:db:1a:68:27:81:ef:03:6e:ab:75:b0:28:9d:48:10:
74:3d:2c:ad:08:60:b6:55:16:99:6e:5e:09:4f:50:91:81:a5:
b8:3b:a6:9f:29:d3:e5:42:bd:b4:03:2e:ba:dd:be:df:0d:1c:
2f:18:06:b2:70:f6:b7:69:59:36:79:17:6d:1d:5c:89:28:c4:
81:fb:4b:de:3e:3d:fb:63:ac:6c:cb:81:ce:c0:d7:ac:16:69:
93:fd:44:0f:04:ca:14:d2:ae:0e:b6:4f:df:08:fe:44:3e:b8:
98:c7:f2:55:67:d0:01:b2:e0:70:86:d7:ae:37:b6:9f:fa:c5:
b1:aa:5e:f8:32:2e:cb:18:e4:76:de:39:fd:2e:7e:f2:06:bf:
e4:83:b7:21:0c:d5:aa:40:cf:82:4b:8f:7c:82:df:8b:f7:df:
5b:6d:7f:1e:e7:0c:30:a5:ce:c1:02:46:6c:a6:6f:0d:4a:58:
1d:ad:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 08:57:54 2024 by rpki-client on console-fra.rpki-client.org