Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CBB3F040DB711EFBFAB112D017001B1.roa
File: 8CBB3F040DB711EFBFAB112D017001B1.roa (raw, json)
Hash identifier: C4Y5cs0/sSkCQA/78LTq5o+AauWrZFn+BsgED4BSROo=
Subject key identifier: 21:C8:00:06:9D:16:DC:A3:32:6D:64:CC:5A:06:57:34:78:82:E2:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CBB3F040DB711EFBFAB112D017001B1.roa
Signing time: Thu 09 May 2024 03:52:26 +0000
ROA not before: Thu 09 May 2024 03:52:23 +0000
ROA not after: Sat 18 May 2024 03:52:23 +0000
asID: 137443
IP address blocks: 154.218.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46519 (0xb5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 03:52:23 2024 GMT
Not After : May 18 03:52:23 2024 GMT
Subject: CN=663c487a-3133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:c0:ee:48:32:1c:51:1f:30:e4:4f:ab:7d:
97:0f:62:11:b8:f0:af:c7:c9:7b:83:4d:15:6b:ed:
ad:f9:e8:bb:5a:18:4d:b8:4e:59:6f:a9:55:f2:07:
a5:7f:be:31:6e:b0:b7:14:20:df:1c:d2:4b:a6:aa:
62:12:f6:05:d0:5c:5d:26:8c:6d:3e:89:85:dd:16:
03:74:ff:7e:4e:b3:db:d2:34:bb:ea:52:3d:c0:b1:
f5:9d:3c:ac:2a:c7:ea:ba:9e:97:d4:18:34:3c:89:
31:06:e8:9e:11:86:7f:a1:0d:13:9f:96:b3:8d:22:
8b:5e:1c:84:6f:ae:fc:41:15:91:fa:8a:2d:ba:e0:
7f:14:ad:84:99:c8:8b:e0:31:15:bd:a5:d0:89:0a:
21:59:68:df:92:cf:84:03:df:b1:1e:32:1c:79:5c:
f5:43:09:93:1d:23:3d:f2:b0:7d:d5:d9:3e:3e:d4:
d8:0e:a5:b8:bb:4d:18:37:ab:88:2b:2c:7a:4e:ce:
d5:80:0c:d7:a1:a3:ae:03:1c:38:9d:0c:81:bd:54:
68:cf:b7:4e:00:9a:1c:fd:3e:17:75:01:6d:9e:9a:
4e:d1:25:15:8b:ad:bd:33:b6:27:bf:2c:00:86:8a:
22:38:e4:5e:40:57:9d:6f:e9:27:6d:f9:74:34:36:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C8:00:06:9D:16:DC:A3:32:6D:64:CC:5A:06:57:34:78:82:E2:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CBB3F040DB711EFBFAB112D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.7.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:8e:57:fc:2d:0d:6d:14:90:a8:47:aa:86:97:03:76:2d:12:
ec:df:46:7b:77:e4:d5:44:ba:6c:00:65:d7:cd:6b:a6:8f:a6:
95:bc:bc:98:53:14:72:14:18:a0:f1:e1:10:a2:a3:27:8d:53:
0c:f3:a0:2f:df:2b:32:9c:d1:d1:4e:fa:5c:00:2c:57:05:58:
49:d7:b4:31:dc:2b:7c:f4:a1:94:10:f5:db:e6:e4:6f:ea:e7:
93:81:a4:03:4d:44:f9:9e:38:60:ac:51:3b:67:a0:c4:2f:ee:
8c:59:81:7b:72:f5:49:0f:b6:38:d3:24:da:f7:d7:3a:84:44:
31:18:c6:13:fb:45:b1:26:12:03:37:8c:f2:ba:27:b8:05:b0:
b0:bb:64:bb:e6:3c:32:6a:b5:a5:ac:7b:ac:84:89:b6:7e:16:
f7:d4:4e:d0:69:41:21:37:2b:49:1b:ca:ca:a5:d1:e9:f4:83:
0e:33:c3:a0:06:16:11:48:ab:7b:4e:e4:6d:1a:b8:1e:95:8a:
43:e2:70:f0:79:c8:f9:ce:bf:ab:cd:27:db:be:35:7f:67:d0:
ec:26:29:1a:86:57:61:8a:d5:88:5f:cc:a1:15:af:4d:3e:5f:
f4:37:a9:e3:b2:1e:23:67:2b:08:5e:08:b2:a1:80:bd:97:1a:
28:21:b4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:08:29 2024 by rpki-client on console-ams.rpki-client.org