Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C39C754294A11EF89E83B1B7DDC24C2.roa
File: 8C39C754294A11EF89E83B1B7DDC24C2.roa (raw, json)
Hash identifier: 0QhV+Y37vzYhnqlwoc4ea2x982FV3fWeM0XCikb5eoU=
Subject key identifier: F1:85:FC:B1:8E:A8:09:10:06:AC:4B:39:F7:92:D9:49:9B:BB:D3:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C202
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C39C754294A11EF89E83B1B7DDC24C2.roa
Signing time: Thu 13 Jun 2024 06:02:43 +0000
ROA not before: Thu 13 Jun 2024 06:02:40 +0000
ROA not after: Fri 21 Jun 2024 06:02:40 +0000
asID: 44559
IP address blocks: 154.211.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49666 (0xc202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 06:02:40 2024 GMT
Not After : Jun 21 06:02:40 2024 GMT
Subject: CN=666a8b83-e592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:d6:75:5a:c7:2e:2d:9a:2c:67:01:0c:7f:
c5:9b:15:a9:ef:33:d1:54:a2:8e:33:d2:58:86:9a:
b9:bb:b2:fc:32:43:fd:78:a6:85:d4:04:7e:b5:03:
9e:64:f3:77:c2:98:80:15:a8:fe:7a:f8:ba:76:f5:
88:d2:dc:4a:ad:27:64:00:fe:35:41:c7:bf:16:72:
8f:d7:98:11:99:5a:28:76:64:c0:99:9e:0d:51:22:
4e:93:ed:ad:cb:91:a9:f7:df:29:0a:01:0d:f5:6f:
a5:70:ed:9b:36:c2:d1:4d:fc:9f:d6:1f:a2:64:67:
55:a7:71:bd:b4:48:45:d3:58:36:34:7a:7c:88:74:
7f:48:02:07:b1:29:98:5b:58:3e:00:e0:e1:11:a5:
6e:a0:33:78:2d:4b:e9:5b:f6:61:05:27:33:a8:d5:
fe:d5:ed:bc:fb:43:6d:82:74:ca:ad:18:05:fe:d7:
0d:fd:36:59:0e:29:6a:d2:48:9d:f6:91:f1:fc:15:
cc:e7:24:66:e5:54:2a:54:69:92:70:27:3b:2a:ca:
ac:61:0b:8a:fc:5a:28:c1:cc:f5:9a:ea:54:31:ea:
eb:9b:38:ad:24:e0:c6:15:a5:d8:03:8f:58:f7:b0:
13:b5:9e:25:8d:5b:bb:58:4b:40:e7:eb:a1:7f:d7:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:85:FC:B1:8E:A8:09:10:06:AC:4B:39:F7:92:D9:49:9B:BB:D3:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C39C754294A11EF89E83B1B7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:10:d4:a8:e8:9e:a6:cf:b1:2d:f6:7a:ce:57:5e:e7:a7:10:
a4:ff:4d:c6:d0:c1:48:88:a0:e6:4b:43:2f:11:d1:bf:57:03:
e4:8d:1c:98:8e:c9:b5:8e:49:68:96:17:e2:8d:c5:14:32:03:
50:36:c3:8f:91:91:07:21:b3:56:bd:f1:28:f2:c3:eb:6e:47:
a2:4b:49:30:7d:0a:b5:ea:f4:28:bb:cc:9b:2f:d4:31:ee:d7:
88:10:bc:f2:90:bc:bb:d7:c1:6c:e2:99:e9:bb:38:7e:7f:63:
ed:72:e3:13:d0:db:0c:dd:e6:20:8a:30:18:48:be:e6:15:e5:
23:cb:6f:81:c5:45:5f:4b:15:2d:88:44:f1:b2:02:0f:c6:d0:
67:cb:41:9c:31:2f:48:b3:89:60:6e:25:e1:93:25:30:6a:ae:
be:2b:aa:36:c5:59:71:8a:11:d1:3f:f5:2a:b0:91:bb:36:04:
e2:d8:fb:b3:ad:4f:77:e8:2f:6f:0f:98:9d:21:49:70:75:92:
a4:4d:1b:fb:ac:a8:93:10:73:94:8f:38:d8:c6:fc:bc:ad:3b:
ee:cd:39:af:a8:c3:1a:ec:f0:65:e4:4f:d2:d5:b9:64:b2:80:
da:92:5e:b8:cc:5f:52:df:27:b4:db:8c:df:41:2f:c7:fc:75:
a3:5e:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:46:00 2024 by rpki-client on console-fra.rpki-client.org