Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86AAC7C632BD11EFA6ECDABB762E951A.roa
File: 86AAC7C632BD11EFA6ECDABB762E951A.roa (raw, json)
Hash identifier: MFN+GFGGbIO9mxboH0/6oJSiePEQCnOxnhkxQN+v6qQ=
Subject key identifier: 97:3D:85:F3:62:3B:02:AB:CD:CE:2D:26:A1:0F:D2:DC:DE:22:AC:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C65F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86AAC7C632BD11EFA6ECDABB762E951A.roa
Signing time: Tue 25 Jun 2024 06:38:26 +0000
ROA not before: Tue 25 Jun 2024 06:38:23 +0000
ROA not after: Fri 26 Jul 2024 06:38:23 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50783 (0xc65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:38:23 2024 GMT
Not After : Jul 26 06:38:23 2024 GMT
Subject: CN=667a65e2-3a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:8d:88:78:79:df:de:51:8a:a4:eb:75:8e:
c4:d3:c0:da:f4:66:ff:a4:e2:6f:82:8f:fc:53:91:
1a:ee:e8:00:94:8f:48:f4:b0:59:5e:d5:ed:c5:e1:
1b:0b:3d:aa:19:83:d3:c3:f2:3c:01:62:6c:ea:e8:
d2:70:27:b0:f4:27:fb:35:26:cb:16:70:a8:16:88:
91:a5:e1:41:69:2d:19:94:9d:5c:4f:fa:b9:be:f4:
13:79:56:b4:55:ac:b4:0b:bc:93:4f:0a:47:d4:36:
bd:7e:41:a0:3c:52:26:28:e8:f4:b8:90:35:c9:47:
ba:70:5d:68:11:00:a4:98:26:b0:cb:ff:91:62:88:
97:46:13:ca:49:a2:c3:54:9e:a8:95:d9:1b:4d:0f:
af:9b:dc:1d:b8:85:73:ef:7d:df:93:a3:98:ed:f8:
ec:64:33:04:79:06:0c:c8:a6:ad:32:43:a4:81:4e:
b4:39:56:03:71:53:11:04:01:2e:91:ed:f0:54:78:
15:2a:4c:eb:fa:d3:65:cb:c8:bf:07:2c:c1:ee:3f:
0c:9c:f7:cf:2f:34:94:6d:b7:a7:f3:6c:6e:67:f5:
c1:e4:d9:a1:13:00:50:4d:b8:d7:41:94:d0:5c:53:
b9:e1:c1:aa:55:19:55:b9:ca:ca:08:18:5c:61:f5:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:85:F3:62:3B:02:AB:CD:CE:2D:26:A1:0F:D2:DC:DE:22:AC:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86AAC7C632BD11EFA6ECDABB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
be:a3:4e:e4:9b:c4:9d:41:3a:75:80:e9:2e:77:fb:48:03:5b:
a6:84:93:07:e0:39:62:1b:9e:4c:5f:0c:56:69:6f:98:9f:3d:
e3:8d:d9:b1:db:9a:42:a9:52:d3:f2:22:46:15:25:47:9e:02:
9c:1e:3c:d8:bd:c4:28:1d:1b:96:00:03:c2:07:a5:58:b8:54:
1d:85:13:5d:05:23:4f:27:ae:e3:35:3e:40:c7:9d:30:42:60:
90:db:4f:b2:eb:ba:02:8a:a1:3e:5c:db:44:3e:ac:30:ef:7f:
60:57:5d:a7:f2:39:11:16:45:46:f3:78:27:2d:42:1c:97:be:
31:b7:94:6a:f5:be:fd:9a:5d:b5:f0:e1:8d:e4:1d:f5:8c:14:
c5:c7:c8:a5:c4:1d:33:56:a5:0d:71:e7:1c:42:55:c4:fb:a4:
72:df:9e:a5:8b:d7:d2:12:b1:58:ab:a9:00:fc:79:d4:8d:12:
17:00:a6:95:bc:f5:d2:e9:19:85:69:be:5f:c3:57:83:8e:b4:
51:39:19:41:f7:ad:bf:9d:42:0a:bb:85:cb:4c:c0:5f:77:8e:
3b:10:ae:6e:f9:3d:fe:3e:48:25:3b:d9:83:39:b3:11:a5:d7:
ee:15:4e:5a:c3:08:3c:e6:f4:71:97:9f:bf:75:49:31:0c:52:
41:15:8f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 10:21:38 2024 by rpki-client on console-fra.rpki-client.org