Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A8CDFFC0B6A11EFA65A7469017001B1.roa
File: 8A8CDFFC0B6A11EFA65A7469017001B1.roa (raw, json)
Hash identifier: P+4avLGxqgO8xTcqOJrzRU+bJ5e/9MnU1onWyrxZoqY=
Subject key identifier: 1A:58:C1:B8:40:4E:3A:D7:C1:AF:69:09:C9:9E:77:80:F3:9F:03:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B506
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A8CDFFC0B6A11EFA65A7469017001B1.roa
Signing time: Mon 06 May 2024 05:36:09 +0000
ROA not before: Mon 06 May 2024 05:36:06 +0000
ROA not after: Thu 16 May 2024 05:36:06 +0000
asID: 141883
IP address blocks: 154.208.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46342 (0xb506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 05:36:06 2024 GMT
Not After : May 16 05:36:06 2024 GMT
Subject: CN=66386c49-7a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:b6:cb:1a:93:11:ac:df:13:48:da:2f:1d:
71:8a:95:cd:6c:a0:4e:52:be:6c:dc:69:63:f2:57:
7e:ac:78:69:ca:e9:d0:0c:42:c9:2f:b2:33:0b:da:
60:bc:56:8a:ac:3e:1d:b0:35:9c:ba:95:fe:69:6b:
f9:53:a0:3e:af:b2:a7:38:1b:10:a3:fd:8e:8b:f2:
71:8a:e5:2c:44:48:7d:7a:f3:02:d1:51:46:83:7d:
30:cb:79:ff:59:de:7f:e1:7b:72:05:8c:9a:eb:0f:
ff:30:eb:a6:1a:09:bb:c9:b1:3d:ee:38:86:6c:5f:
2b:e7:38:50:88:67:85:b3:fb:95:81:86:de:b9:f6:
e8:14:ce:a7:0a:30:cb:e2:77:0a:d0:6d:bf:da:2a:
0c:a3:92:e8:ca:5a:b6:b3:db:7d:75:76:3c:3f:00:
b9:de:8a:b0:b0:01:78:27:a7:62:1b:72:40:56:be:
13:62:9a:10:ce:f4:c3:a7:72:5a:14:f6:7d:b8:54:
c0:5f:33:da:d4:fc:72:fd:a3:91:66:0c:be:7e:73:
99:f8:35:02:9f:a2:b7:68:b0:bb:3b:69:de:3b:f5:
4a:a7:f0:ab:8d:e1:9d:df:6c:e4:15:bd:2c:3d:a2:
04:cc:4f:83:2e:2a:73:8e:0a:2a:a6:62:e5:17:c8:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:58:C1:B8:40:4E:3A:D7:C1:AF:69:09:C9:9E:77:80:F3:9F:03:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A8CDFFC0B6A11EFA65A7469017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.12.0/22
Signature Algorithm: sha256WithRSAEncryption
44:55:90:fc:de:d1:93:3e:67:59:f3:9e:2a:58:56:1a:ef:94:
b4:ae:49:1c:0a:3f:43:9f:0b:e2:11:79:78:a4:e9:be:da:57:
1b:08:45:71:ae:8e:de:57:fc:f5:f6:cb:da:c1:2b:00:76:c0:
64:48:5c:48:fd:ac:4a:b1:ae:32:37:a3:fb:9a:78:c5:be:da:
6a:ee:be:0f:26:2b:00:38:e6:69:70:81:93:45:9d:80:8d:7d:
54:0d:96:08:e2:d7:bf:01:64:09:aa:2c:3a:42:e1:d2:92:fe:
15:99:5a:44:c6:8b:25:fd:7b:f0:a6:a4:7b:08:80:d7:a7:82:
de:99:8e:bf:e7:40:b1:b3:b9:28:50:04:85:58:33:4e:77:19:
79:89:07:e5:10:18:6e:df:fb:5a:bb:b7:b4:c4:a8:ba:b2:34:
0e:12:9f:03:3f:de:3e:85:ab:2a:75:81:90:c1:42:ea:f5:c6:
01:79:53:39:ed:90:f2:e2:b3:39:e5:fd:0a:c0:95:1a:d8:0d:
58:d9:2d:ee:78:1b:3e:02:f7:17:f1:5d:a3:a1:bc:fc:9a:bd:
40:89:4f:6e:c8:ad:d9:46:4e:a3:2a:a9:10:b1:0e:38:44:63:
80:ea:58:6b:2f:3f:20:10:5b:9d:d9:73:7c:27:f2:36:ef:9d:
b4:d9:39:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 07:46:20 2024 by rpki-client on console-ams.rpki-client.org