Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/809EDB320C0D11EFB752460D017001B1.roa
File: 809EDB320C0D11EFB752460D017001B1.roa (raw, json)
Hash identifier: FcNP7K4OhFnw2+gSjgFqe3Ga0kYJRWzbqFZPPBzDfxI=
Subject key identifier: C4:CE:7D:77:E7:C3:0E:C9:8C:5F:5E:2B:86:7E:82:6B:D2:E2:7B:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B54D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/809EDB320C0D11EFB752460D017001B1.roa
Signing time: Tue 07 May 2024 01:02:40 +0000
ROA not before: Tue 07 May 2024 01:02:37 +0000
ROA not after: Thu 16 May 2024 01:02:37 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46413 (0xb54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 01:02:37 2024 GMT
Not After : May 16 01:02:37 2024 GMT
Subject: CN=66397db0-2601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:a4:27:87:ca:c6:65:26:f4:29:d2:65:d1:
3f:30:c7:f7:33:55:de:28:5c:0c:4c:ff:6e:9a:ba:
39:12:48:07:2f:f2:82:83:21:ba:6b:4a:61:da:5b:
6b:94:b4:30:ea:c6:7b:82:a2:7c:d4:ee:b9:01:bf:
3f:ac:f4:a6:c1:57:f0:3b:55:69:4a:c0:c9:d9:27:
40:16:03:9c:e8:9c:d1:15:47:0b:18:62:f1:ae:cb:
07:78:91:36:9e:e2:b5:ab:0f:d7:44:61:1c:df:e0:
03:5f:32:65:10:43:49:4b:dc:95:99:67:43:e9:e3:
60:a6:52:33:78:c8:74:18:07:12:48:2b:20:51:0f:
7a:ff:e4:37:c4:8b:ad:e4:f3:04:4c:ae:5b:97:18:
9f:be:57:78:9a:7e:ca:c3:fb:04:b5:64:f8:cd:b1:
93:7d:88:41:6a:c1:b6:f0:f8:3d:5e:f8:dc:ae:2f:
bd:ee:6d:c6:ed:ff:12:58:df:13:17:b4:d3:aa:84:
ee:2a:a1:1c:17:26:e4:f8:63:10:49:a8:17:82:c7:
b1:d5:bf:3e:03:84:f4:94:94:8d:ce:a1:3c:38:f3:
16:d0:4e:1a:e1:2a:84:c0:12:8b:65:46:97:d5:67:
83:9f:7b:5e:2c:ef:0a:82:94:7b:dc:13:0e:c5:2d:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CE:7D:77:E7:C3:0E:C9:8C:5F:5E:2B:86:7E:82:6B:D2:E2:7B:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/809EDB320C0D11EFB752460D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:bd:b5:14:81:b6:1e:16:b6:d1:cc:18:57:13:cf:75:67:32:
78:de:99:6b:ca:ac:ff:af:29:76:ce:e8:54:49:aa:11:13:5d:
50:4b:80:a1:de:75:1b:88:59:ae:b2:d5:31:65:0e:ec:3f:a9:
c9:bb:66:76:b1:02:3c:24:a2:de:53:22:30:c8:c6:0d:75:43:
60:70:33:b2:4e:81:bc:b6:a6:dd:c0:40:d5:31:41:a3:bf:f4:
9b:c4:88:c1:47:64:58:0c:75:e1:bf:eb:0c:f8:79:c9:32:c2:
a1:b8:44:b4:35:6f:16:e8:7f:c4:59:da:8a:07:2f:90:a8:b3:
39:91:87:b7:cd:33:54:8e:70:91:e3:76:19:86:1d:c8:f8:00:
a7:8e:36:b4:67:00:e0:2d:e6:d6:c5:bb:d5:e8:bc:76:64:7e:
42:72:d8:fd:69:a6:bd:49:b7:2a:d2:48:ad:3c:9b:e5:e8:b2:
01:43:99:4f:4e:ca:f2:81:3a:f7:a6:68:48:f6:90:83:5d:7e:
8f:a2:bb:fb:7d:18:1f:c0:52:03:1c:81:22:d6:7f:77:c1:0c:
3d:ce:2c:6d:90:11:ae:13:c5:a4:c3:5a:68:f0:48:c2:79:c8:
29:a9:d7:e0:9c:d4:ae:7a:da:b1:10:60:7f:fb:72:bb:cd:d6:
a6:86:cc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 07:46:20 2024 by rpki-client on console-ams.rpki-client.org