Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816D739A037811EFA9F9A42C017001B1.roa
File: 816D739A037811EFA9F9A42C017001B1.roa (raw, json)
Hash identifier: 2et8lQPsSgi2AgQ5aOjtyMI400lgDGOn/godsDBl3+o=
Subject key identifier: 34:A6:47:69:AE:06:7B:F4:96:FD:F2:FD:30:6C:CE:BD:2C:C8:AD:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B104
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816D739A037811EFA9F9A42C017001B1.roa
Signing time: Fri 26 Apr 2024 02:55:57 +0000
ROA not before: Fri 26 Apr 2024 02:55:54 +0000
ROA not after: Tue 28 May 2024 02:55:54 +0000
asID: 23470
IP address blocks: 154.203.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45316 (0xb104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 02:55:54 2024 GMT
Not After : May 28 02:55:54 2024 GMT
Subject: CN=662b17bd-184a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:d4:f8:37:c7:15:c1:b8:18:5e:52:3a:ff:
71:72:18:9f:b7:95:34:8b:ec:25:2a:10:f6:39:42:
6c:3f:bd:8d:18:8d:2c:ed:3e:27:6a:c6:2b:00:21:
93:a4:4d:2b:03:29:d5:e5:0d:7e:5b:5f:2e:84:30:
97:9c:fb:81:bd:84:e3:39:6f:f9:f7:d4:4f:07:bc:
8b:14:fd:3c:b6:1f:1d:05:7c:2d:46:15:1e:08:98:
5d:31:5b:1e:76:1a:6b:d6:ac:6a:de:9f:ba:a0:0e:
d3:56:78:76:51:3f:91:e5:7c:a6:df:a4:6e:01:3f:
4a:86:8c:43:84:bc:99:3e:71:71:2d:89:b3:6d:60:
c9:1f:9b:7b:d9:6b:a3:aa:27:2a:01:50:4b:98:84:
1a:d2:f9:c3:e9:cd:c3:b3:9f:b5:7c:16:d9:8d:ce:
f8:d1:40:d5:e3:df:61:9f:b3:11:23:6f:b0:42:58:
fb:e0:1c:58:b5:b6:3b:c4:ec:30:47:57:e0:62:f9:
5a:7c:d1:b4:57:ae:11:96:72:85:b5:dc:04:b8:e6:
18:a6:3b:cf:ce:a3:c4:c3:8c:0a:82:7d:c4:f8:c5:
b1:f5:19:c5:6f:ee:0e:ab:e6:49:90:25:e2:2c:ef:
5d:0d:da:cd:9b:1e:e5:a7:3b:e1:bf:3c:65:73:f7:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A6:47:69:AE:06:7B:F4:96:FD:F2:FD:30:6C:CE:BD:2C:C8:AD:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816D739A037811EFA9F9A42C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:b1:59:e6:22:c8:f4:a7:e3:1f:d2:be:79:ae:0f:a4:56:48:
9b:33:7d:ea:76:73:3d:3a:b9:f2:96:0e:bc:67:79:b1:2c:86:
2a:42:ca:4f:e9:22:af:7d:4d:ad:8e:aa:06:12:38:2c:1f:a6:
c9:ca:b4:c8:99:62:c8:ba:cf:6e:9c:dd:0d:3d:fa:8e:a4:37:
14:bb:09:ac:9a:ca:3a:f1:07:35:b7:82:ae:b0:a9:c6:dd:97:
b6:3d:3c:fc:42:ab:6f:02:66:ab:36:96:b1:94:9d:20:9c:47:
df:58:d8:7a:3a:f3:4e:7f:f4:60:75:60:4d:2d:86:a0:2a:54:
9c:c6:8b:8d:89:a0:2e:e1:d3:c0:cd:95:ec:da:d7:20:df:1b:
23:26:0b:ea:13:40:7e:ab:73:5a:24:3c:22:2f:7c:eb:7e:e8:
2b:be:7c:ad:72:fa:29:e4:4d:b9:7c:93:30:dd:fe:de:0b:75:
6a:ff:15:5c:8a:0f:a3:4a:ae:4d:85:21:79:1a:16:34:ee:93:
24:f6:54:9d:73:31:4d:9c:7f:2b:1b:a9:a2:7f:8e:91:e8:60:
f3:11:51:c1:30:2e:2b:bd:f1:9a:33:ac:53:f7:f4:da:dc:09:
b2:09:73:3e:a1:ce:db:8c:11:4d:90:09:f3:ac:ce:c0:f9:4b:
1c:74:64:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:13:10 2024 by rpki-client on console-fra.rpki-client.org